Cloud Trade Technologies Ltd Privacy Notice for
Applicants, Employees, Workers & Contractors
Company Name: Cloud Trade Technologies Ltd
Company Address: Cloud Trade Technologies Ltd
Unit 5.09 Cargo Works
Person responsible for Data Protection: – CEO - David Cocks
Contact Details: email firstname.lastname@example.org
The Company collects and processes personal data relating to job applicants (in so far as any sections of this privacy notice apply), current and former employees, workers, volunteers, apprentices, interns and consultants to manage the employment or contractor relationship.
The Company is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations. This Privacy Notice summaries your rights and our responsibilities to you. Further details can be found in the Data Protection Policy for Employees, Workers and Contractors.
The Company collects and processes a range of information about you which is likely to include (as it applies to either an employment worker or contractor relationship) but is not limited to:
The Company may collect this information in a variety of ways. For example, data might be collected through application forms, CVs or resumes; obtained from your passport or other identity documents such as your driving licence; from forms completed by you at the start of or during employment or contract; from correspondence with you; or through interviews, meetings or other assessments.
In some cases, with your consent, the Company may collect personal data about you from third parties, such as references supplied by former employers and information from criminal records checks or credit reference agencies as permitted by law. The Company will seek information from third parties only once a job offer to you has been made and will inform you that it is doing so.
Data will be stored in a range of different places (as it applies to either an employment worker or contractor relationship), including in your application record, personnel or contractor file, in the Company's HR manual and electronic filing system, cloud-based HR Management systems and in other IT systems, including the Company's email system.
The Company needs to process data to enter into or to be in a contract with you and to meet its obligations under your employment or worker contract or your contract for services.
For example, it needs to process your data in order to receive your application for employment or a contract, and assess your suitability for the role, to provide you with the contract, to pay you in accordance with your contract and to administer benefits, pension and insurance entitlements where these are applicable.
In some cases, the Company needs to process data to ensure that it is complying with its legal obligations and to defend against legal claims. For example, it is required to check an individual's entitlement to work in the UK, to deduct tax, to make reasonable workplace adjustments in the case of disability, to comply with health and safety laws and to enable employees or workers to take periods of leave to which they are entitled.
In other cases, the Company has a legitimate interest in processing personal data before, during and after the end of the employment, worker or contractor relationship. Processing data allows the Company to (as it applies to either an employment worker or contractor relationship):
operate and keep a record of recruitment and promotion processes; maintain accurate and up-to-date employment records and contact details (including details of who to contact in the event of an emergency), and records of employee contractual and statutory rights; operate and keep a record of disciplinary and grievance processes, to ensure acceptable conduct within the workplace; operate and keep a record of employee performance and related processes, to plan for career development, and for succession planning and workforce management purposes; operate and keep a record of absence and absence management procedures, to allow effective workforce management and ensure that employees are receiving the pay or other benefits to which they are entitled; obtain occupational health advice, to ensure that it complies with duties in relation to individuals with disabilities, meet its obligations under health and safety law, and ensure that employees are receiving the pay or other benefits to which they are entitled; operate and keep a record of other types of leave (including maternity, paternity, adoption, parental and shared parental leave), to allow effective workforce management, to ensure that the Company complies with duties in relation to leave entitlement, and to ensure that employees are receiving the pay or other benefits to which they are entitled; operate systems for and keep a record of pay, pension and benefits including PAYE or other required deductions operate and keep a record of necessary Health and Safety provisions and arrangements; ensure effective general HR and business administration; provide references on request for current or former employees; respond to and defend against legal claims.
Some special categories of personal data, such as information about health or medical conditions, is processed to carry out legal obligations, such as those in relation to individuals with disabilities.
We may process sensitive data relating to your criminal record (and driving offences) where the nature of our work requires it in order to comply with a legal or statutory obligation, where our insurers require it, or where we believe it is in our legitimate best interests to have made a criminal records check. Rarely, we may use your personal data relating to criminal convictions where necessary in relation to legal claims, where it is necessary to protect your interests (or someone else’s interests) and you are not capable of giving your consent, or where you have already made the information public.
Where the Company processes other special categories of personal data, such as information about ethnic origin, sexual orientation or religion or belief, this is done for the purposes of equal opportunities monitoring. Individuals are entirely free to decide whether or not to provide such data and there are no consequences of failing to do so. Equal opportunities monitoring data is usually anonymised at which point it ceases to be personal data as no specific living individual can be identified from it.
We do not take automated decisions about you using your personal data or use profiling in relation to you.
Data may be shared internally, with your line manager, managers in the business area in which you work, those involved in the recruitment activity, and other personnel as necessary for them to carry out their role or for the conduct of our business.
The Company shares your data with external consultants for HR and payroll purposes, third parties in order to obtain references from other employers, to obtain background and credit checks from third-party providers and to obtain necessary criminal records checks from the Disclosure and Barring Service.
We are also required by law to share personal data with statutory bodies such as, but not limited to, the HMRC, the Pensions Regulator, and when applicable the HSE and the local authority for RIDDOR reporting, and when requested to do so the police, court services and similar bodies.
The Company may also share your data with third parties in the context of a sale of some or all of its business. In those circumstances the data will be subject to confidentiality arrangements.
The Company also shares your data with third parties (as it applies to either an employment worker or contractor relationship) that process data on its behalf, in connection with HR services, payroll, the provision of benefits and the provision of occupational health services as required. These may include but are not limited to:
The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for one of the third parties we contract with and may be engaged in, among other things, processing of HR-related data.
If your personal data is transferred outside of the EEA, we do our best to ensure a similar degree of protection in respect of your personal information as we will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with the provisions set out in the Data Protection Policy for Employees, Workers and Contractors.
The Company takes the security of personal data seriously. The Company has internal policies, procedures, technologies and controls in place, from the point of collection to the point of destruction, to protect personal data against loss, malicious or accidental destruction, misuse or disclosure, and to ensure that data is not accessed, except by individuals in the proper performance of their duties.
Further details of how we manage data security and handle data breaches can be found in the Data Protection Policy for Employees, Workers and Contractors.
If your application for employment is unsuccessful, the Company will hold your data on file for six months after the end of the relevant recruitment process.
If you agree to allow the Company to keep your personal data on file, the Company may hold your data on file for a further six months for consideration for future employment opportunities. At the end of that period, or if you withdraw your consent earlier, your data will be deleted or destroyed.
The company will hold your personal data for the duration of your employment or contract and thereafter data for as long as necessary for the purposes for which we collected it and in accordance with the data retention periods set out in Data Protection Policy for Employees, Workers and Contractors.
As a data subject, you have a number of rights – you can:
Know what data we hold about you; access and obtain a copy of your data on request, and to request a transfer of data to another data controller; require the Company to change incorrect or incomplete data; require the Company to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing; object to the processing of your data where the Company is relying on its legitimate interests as the legal ground for processing; not to be subject to automated decision making (with some exceptions); to be notified of a data security breach; to withdraw consent processing where this was the legal basis relied upon for any such processing; to complain to the Information Commissioner Office https://ico.org.uk/concerns/.
Applicants for employment or a contract are under no statutory or contractual obligation to provide data to the Company during the recruitment process. However, if you do not provide the information, the Company may not be able to process your application properly or at all.
Once offered a position you have some obligations under your employment contract or contract for services to provide the Company with data. You are required to report absences from work and may be required to provide information about disciplinary or other matters under the implied duty of good faith. Failing to do so may breach the terms of your contract with the Company.
Where applicable, you may also have to provide the Company with data in order to exercise your statutory rights, such as in relation to statutory leave entitlements. Failing to provide the data may mean that you are unable to exercise your statutory rights.
Certain information, such as contact details, your right to work in the UK and payment details, have to be provided to enable the Company to enter a contract with you and for us to meet our legal obligations. If you do not provide this information, and update it as necessary, this will hinder the Company's ability to administer the rights and obligations arising as a result of the employment or contractor relationship efficiently.
I have read and understood the Applicant Employee Worker Contractor Privacy Notice above