Data Protection Policy

Last Modified – January 2018

Information:

The General Data Protection Regulations (GDPR) (2018) requires the Company to be open about the information that it holds on you and uses.

You are entitled to audit the business to ensure we comply with the GDPR. Please contact the Data Protection Officer in writing.

You have the right to withdraw your consent to processing of data. Please contact the Data Protection Officer in writing.

The Company policy is to respect the privacy of clients and their employees and to maintain compliance with the General Data Protection Regulations (GDPR). Personal data related to clients and their employees will be protected.

All employees and sub-contractors of the business are asked to sign a confidentially clause.

This policy applies when EC Human Resources Ltd enters a Contract for Services with a client.

This policy complies with the General Data Protection Regulations May 2018.

Marketing Information:

When you enter into a Contract for Services agreement with EC HR Ltd, as part of the service you will receive the following via email (Mailchimp):

• Newsletters
• Legislation updates
• News
• Advice and information
• HR fun facts
• Partner information and specials

There is the option to unsubscribe each time you receive an email.

Your name and email address will be stored by “Mailchimp”.

Our “Mailchimp” account is password protected and only Directors of the business hold this information. We review our security regularly.

Once your service agreement ends, you will be asked if you still wish to receive the above emails. If you do not wish to receive information from EC HR Ltd your details will be deleted from the “Mailchimp” database.

Your Company information and Your Employees information:

Depending on the type of Contract for Services you have with the company, you will at times need to give EC HR Ltd company data and employee data.

The data required will be dependant on the nature of the enquiry.

All data received by EC HR Ltd will be stored on one laptop, which is owned by the Director of the company. The laptop is password protected and the only person who has access to the laptop are Company Directors.

All data will be backed up on a quarterly basis and stored at EC HR Ltd’s company address in a suitable, lockable cabinet.

No data is stored on a removable device but it may be accessed from a mobile phone.

Once a contract ends the data will be archived and stored for a period of seven years, due to our legal responsibilities (i.e. tribunal claims).

EC HR Ltd will, if required, sign a separate confidentiality agreement if the client deems it necessary.

Recruitment Data:

Depending on your Contract for Services agreement, EC HR Ltd may from time to time be responsible for recruiting on your behalf.

The company do not use any automated decision making or profiling.

CV’s, applications for employment (including video applications) and interview notes will be retained by EC HR Ltd until the vacancy within the business has been filled. After this time, all files will be transferred to you the client and deleted from EC HR Ltd’s records.

How we use the information you give us:

No data that is provided by you, will be passed onto a third party without your permission, other than other consultants and professionals who we work with and the Employee Tribunal / Health and Safety Executive or other official office.

Transparency and Choice:

You may at any time contact EC HR Ltd and ask what information we hold on your Company and its employees. The business has one month to respond to your request.You may ask us to update this information if it is incorrect, which we will strive to do as quickly as possible.

You may ask for any company and employee data to be deleted and requests to access, update or delete data should be emailed to echrltd@aol.co.uk

Information Security:

All data is password protected and only accessible by a Company Director. EC HR Ltd take appropriate cyber precautions.

Privacy Policy:

Our Company Privacy Policy can be found separately on our website. https://www.echumanresources.co.uk/privacy-policy/

Compliance:

We regularly review our compliance with the GDPR and the Privacy policy.

Data Protection Officer:

Our Data Officer is Emma Cromarty. For further information or complaints please email: echrltd@aol.co.uk

Changes:

Our Data protection and Privacy Policy may change from time to time. We will not reduce your rights under this policy without your explicit consent. We will inform you of any Policy changes at the earliest opportunity.