Privacy Policy

Explaining How We Use Your Data

Our Privacy Policy covers your use of our site and includes new GDPR changes.

At J Bandy Consulting Limited we care about your data, respect your right to privacy and value the trust that you place in us. To comply with Data Protection Laws we are required to make certain things explicit and inform you of how we use your personal information in this Privacy Notice.

If you have any questions regarding this privacy statement or our use of personal data, you can contact our Data Protection Manager at our registered address or via email at: data@jbandy.co.uk .

This notice is not applicable to internal J Bandy Consulting Limited staff who should refer to internal staff data policies.

Who is J Bandy Consulting Limited?

J Bandy Consulting Limited (the “Company”, “we”, “our”, “us”) provide recruitment and work-finding, training and consultancy services.

The Company is registered in the UK with registration number is 09850623 and our registered address is Suite 3, Market House, Wokingham, Berkshire RG40 1AP.

What is personal data?

Personal Data is data that relates to a living individual which by itself, or with other data available to us, can be used to identify you. Our company needs to process personal data so that we can offer and provide our services to you and we act as a “Controller” of the personal data we hold.

What type of personal data is being collected and why?

J Bandy Consulting Limited will collect and use the following personal data;

Candidates and Workers: (‘Candidate’ includes applicants for any advertised role - permanent, part-time, temporary and freelance roles) to provide tailored work-finding services, we may collect your Personal Data including:

Your name
Home address/location
Contact telephone number(s)
Email address
Date of Birth/age
Curriculum Vitae – includes work and education history
Rights to Work documents such as Passport or Visa
Social Security / National Insurance number
Tax related information
Certain financial details such as past and current salary and benefits
Key qualifications certificates and memberships
Nationality (certain countries require us to record your nationality by law)
Career interests
Details of next of Kin/family, emergency contacts and referees.

We may also process other information you may provide to us, such as in surveys and when you contact us / make enquiries.

We also keep written (electronic) records of our conversations, meetings, registered jobs and placements.

Special Categories of Data – this covers sensitive personal information about an individual including race; ethnic origin; politics; religion; trade union membership; genetics; biometrics (where used for ID purposes); health; sex life; sexual orientation. Normally we will not ask you for the vast majority of this information, but we may require information on your health, for example; information on Allergies. On occasion, we may request other sensitive personal information. We may also be required to perform criminal and other background checks. Before collecting this information we will ask for your explicit consent, except where necessary for the carrying out of obligations under employment, social security or social protection law, or a collective agreement.

Clients (including prospective employers): We need to collect and use information about our customers, clients and others in the course of providing our services e.g. communicate requirements, agree on role specifications, propose candidates, contractual discussions, provide training or consultancy services or to notify you of content published by the Company which is likely to be relevant and useful to you. This includes processing the personal data of individual contacts who we deal with at your organisation such as Name, Work address, Contact telephone numbers, and Email addresses. We may also need to collect personal banking details and/or payment information so that we can charge for our services (if this is part of the contractual arrangements between us).

Suppliers: This includes partnerships and companies (including sole traders), independent contractors and freelance workers, who provide services to us. We need certain information from our Suppliers such as contact details of relevant individuals at your organisation such as Name, Work address, Contact telephone numbers, Email address and Banking details so that we can pay for the services you provide.

Website Users: If you contact us via our website, we will collect information that you provide to us; your name and contact details, email address and telephone number for registration (and where applicable your CV - see candidate and workers above) and process your username when you register. In addition, we collect a limited amount of data which we use to help us to improve your experience when using our website and to help us manage the services we provide. This includes information on how you use our website and the location you view our website from (IP address).

Other people: We need to collect and process some basic background information and contact details (such as name, email address and telephone number) e.g. referees, emergency contacts etc. in order to provide suitable employment safely and securely.

How is my personal data collected?

We collect personal data about you in various ways, both directly and indirectly which include:

Candidates / Workers

Direct CV (hard copy or email body text and/or attachment).
Telephone conversations between you and our staff (we do not audio record any conversations).
Email communications.
Entering details into our website – see website users.
Entering details into our CRM (online portal).
Your online job applications to vacancies we might advertise (from a variety of sources e.g. LinkedIn).
Face to face meetings and at our events.
Contact via social media.
E-signature documents.
Job boards/job sites.
Social media searches such as LinkedIn
Clients and vendor interaction.
Our network contacts/others who may refer you to us.
If referred to us through an RPO (Recruitment Process Outsourcer) or an MSP (Managed Service Provider) supplier, (who may share personal information about you with us).

Clients and suppliers

Telephone conversations between you and our staff.
Face to face meetings and at our events.
Contact via social media.
E-signature documents.
From Candidates & Workers (incl. referees where contacted).
Online and offline media.
Our network contacts/others who may know you.
Event delegate lists.
Third party market research.

Website users

Online registration forms requesting your contact details: name, email, CV (as applicable) and marketing preferences.
Online job applications to vacancies we might advertise.
Automatically via cookies, in line with cookie consent, preferences and settings in your browser.

Other people

Telephone conversations between you and our staff.
Face to face conversations.
From referee information provided to us by Candidates & Workers.
Our network contacts/others who may know you.

* depending on applicable laws and circumstances

What happens if I don’t provide my data?

The information enables us to provide you with our specialist, high quality, tailored services, which include: work finding services and assessing suitability for employment (for Candidates); providing suitable candidates to fill job vacancy requirements (for Clients) and/or offering training and consulting.

Where you are obliged to provide personal data, or where we require your personal data to progress the service, the consequences of failure to provide the data may be that:

we will not be able to supply you with the service that you have requested.
we may not be able to fulfil our contractual requirements.
we may not be able to continue with our relationship.

What is the Lawful Basis for processing my data?

We will process your personal data under the following lawful bases;

a) Contractual requirement

As necessary, the company will process your personal data for the performance of a contract or in order to take steps at your request prior to entering into a contract for the relevant service, including;

to engage with you to send and agree on initial terms
to enter into a contract and manage that contract
to update your records
for the performance of a contract with a third party client.

b) Legitimate interest

As necessary, the company will process your personal data for our own legitimate interest, or those of other persons and organisations which includes;

For good governance, accounting, managing and auditing of our business operations.
To monitor emails, calls and other communications, and activities related to our service provision.
To facilitate the creation and manage online accounts.
In the course of providing recruitment services: to collect and use your personal data (to offer or provide our recruitment services), share that information with clients (prospective employers) and assess your skills against our bank of vacancies. Note: we will always inform you when we intend to send your CV to a prospective employer.
In the course of providing recruitment services; to check the identity of candidates, right to work**, qualifications and references.
To collect your personal information from 3rd parties in order to research your suitability for specific and relevant roles, in order to provide work-finding services upon initial contact (e.g. executive search and headhunting).
For our internal administrative activities, such as payroll and invoicing where relevant.
To process or share your data in connection with crime detection, tax collection or actual or anticipated litigation
For market research, analysis and development statistics.
Candidates and Workers - to send you certain communications e.g. to make sure that we send you the most appropriate content such as job recommendations/ ob alerts and relevant articles to help your job search.

** certain eligibility checks fall under a statutory/legal requirement

c) Statutory requirement

As necessary, the company will process your personal data:

For compliance with legal obligations and disclosures
When you exercise your rights under the data protection laws

d) Consent

As necessary, the company will process your personal data with your consent:

In certain circumstances which require us to ask for your consent to process your personal data in a particular way.

To provide consent we will normally require you to provide written confirmation (e.g. email or completed consent form, or a tick box/web form). You have the right to withdraw consent at any time.

When and how will I be informed?

When we engage with you for the first time, when you approach us, or visit our website(s), we will provide you with this privacy notice. If significant changes are made – we will inform you.

Where we gather your personal data prior to contacting you, we will:

Inform you that we hold your personal data (what we hold and from which source the personal data originated, and if applicable, whether it came from publicly accessible sources) and;
Provide you (the individual) with this Privacy Notice (transparency information) no later than one month after we have collected the data, or when we first communicate if that is before one month and;
Ask you to register with us to continue the relationship and process this information on the basis that we will provide our services to you according to this privacy notice.

How is my personal data safeguarded?

We will take all reasonable steps to protect your personal data from loss, misuse, or other unauthorised uses, and to remove your personal data when it is no longer required for its intended purposes.

We will protect personal data through the following principles;

Not collecting or retaining excessive amounts of data.
Protecting personal data from loss, misuse, unauthorised access and disclosure.
Keeping personal data up to date.
Storing and destroying it securely.
Ensuring that appropriate administrative, technical and physical safeguards are in place to protect personal data. These measures include measures to deal with any suspected data breach.
Regularly reviewing our information collection, storage and processing practices, including physical security measures.

Who will you share my personal data with?

Where appropriate and in accordance with local laws and requirements, we may share your personal data for various reasons with certain categories of third parties such as:

Clients (including current, past and prospective employers) - if you are a candidate we may share your personal information with our clients (prospective employers) who may have job opportunities available or interest in placing prospective candidates / recruitment.
Our internal staff such as recruitment consultants.
Business associates – we may share client / B2B contact details.
Group Companies and business partners.
Individuals and organisations who hold information related to your reference or application to work with us, such as current, past or prospective employers, educators and examining bodies and employment and recruitment agencies.
Third parties who we have retained to provide services such as reference, qualification checks, to the extent that these checks are appropriate and in accordance with local laws.
Sub-contractors and third party service providers who perform functions on our behalf (including external consultants, business associates and professional advisers such as lawyers, auditors and accountants, technical support functions and IT consultants carrying out testing and development work on our business technology systems).
Third party outsourced IT and document storage providers where we have an appropriate processing agreement (or similar protections) in place.
Technology platforms and suppliers; including Customer Relationship Management (CRM) software provider (s) and data forwarding agencies where we have an appropriate processing agreement (or similar protections) in place.
Marketing research organisations who help to improve our products or services.
Organisations, such as the REC, may audit our Company and such auditing may require the processing of an individual’s personal data.
Tax, audit, or other Government authorities, when we believe in good faith that the law or other regulation requires us to share this data (for example, because of a request by a tax authority or in connection with any anticipated litigation).
Debt collecting and tracing agencies (where we have legal recourse to use these)
If J Bandy Consulting Limited merges with or is acquired by another business or company in the future, (or is in meaningful discussions about such a possibility) we may share your personal data with the (prospective) new owners of the business or company.
Anyone else where we have your consent or as required by law.

We do not disclose personal information we collect about you, except as described in this Privacy Policy or in separate notices provided in connection with particular activities.

We will not sell or rent to any third party any of the personal information or data that you provide to us.

Where we share personal information with vendors who perform services on our behalf, based on our instructions (data processors), we ONLY authorise these vendors to use or disclose the information as necessary to perform services on our behalf or comply with legal requirements.

You can contact us at data@jbandy.co.uk to get an updated list of those third parties.

Where is my personal data held?

Please be aware that your information may be securely stored in locations including:

Local file servers and file structures in the UK and the EEA.
CRM and Database systems are provided by 3rd party providers, based in the UK and the EEA.
Cloud-based systems (1st and 3rd party) whose servers are located within the UK and the EEA.

Will my personal data be transferred overseas?

J Bandy Consulting Limited Ltd may from time to time use a 3rd party provider, based outside of the EEA, in order to process certain personal data for the performance of contractual requirements (this includes contractor / temporary worker payments and credit control activities). This is governed by a Controller-Processor agreement and associated safeguards.

Where it is a requirement to transfer the information you provide to other countries outside the European Economic Area (‘EEA’) (i.e. the Member States of the European Union, together with Norway, Iceland and Liechtenstein), we will inform you and only transfer this data where it is compliant with data protection legislation and the means of transfer provides adequate safeguards in relation to your data.

We will obtain explicit consent from you, prior to sharing any sensitive personal information.

Am I subject to any automated decision-making?

We do not undertake any fully automated decision making processes.

What data is collected By Automated Means?

When you visit our Websites, we may collect certain information by automated means. Details of cookies used are in our “cookie policy”. Your web browser is most likely set to automatically accept cookies, but you can consult your browser help file if you wish to change these settings.

The providers of third-party apps, tools, widgets and plug-ins on our Sites, such as social media sharing tools, also may use automated means to collect information regarding your interactions with these features. This information is collected directly by the providers of the features and is subject to the privacy policies or notices of these providers. Subject to applicable law, J Bandy Consulting Limited is not responsible for these providers' information practices.

We will ask for your consent for some aspects of these activities which are not covered by our legitimate interests, in particular, the collection of data via cookies when you use our websites.

What marketing will I receive?

J Bandy Consulting Limited may wish to use your data; phone numbers, email addresses and social media (e.g. Facebook, Google, LinkedIn and message facilities on other platforms) to communicate with you, in accordance with our legitimate interests and your marketing preferences.

Under our legitimate interests

We will inform you of industry events and provide you with questionnaires, newsletters and content relating to our service(s) or career opportunities that may fit the requirements you engaged us with and recommendations and relevant articles to help your job search.

Direct marketing

We may wish to inform you of other products and services that we offer. We will ask you to set these preferences when we contact you. You have the right to opt-out of these activities. You can do so at any time.

Interest-Based Advertising

On our Sites, we may collect information about your online activities to provide you with advertising about products and services tailored to your individual interests (also see cookie policy). We also may obtain information for this purpose from third-party websites on which our adverts are served. You may see certain adverts on other websites because we engage third-party advertising networks, through which we can target our messaging to users. To do this we will explicitly ask for your consent as part of accepting our cookie policy.

How long will you hold my personal data?

The Company will retain your personal data only for as long as is necessary. The following criteria are used to determine retention periods for personal data:

Retention in case of queries – data is retained as long as it takes to deal with queries.
Retention in case of claims – we will retain data for as long as a data subject or organisation might legally bring claims against us.
Retention in accordance with legal and regulatory requirements: data will be retained for a period after the service/contract term has been provided or has otherwise come to an end based on our legal and regulatory requirements.

To simplify we will hold personal data for a default period of 6 years (or for a longer period where we believe in good faith that the law or relevant regulators require us to preserve your data) from the last meaningful contact *we have with you, after which time it will be deleted or destroyed.

* Meaningful contact includes where:

You have instructed us to act on your behalf to perform work-finding services e.g. engage with a client or candidate, submit a CV or arrange an interview.
The parties are in the process of entering into a contract and/or a contract is in place or the contract is with the company or entity which supplies your services.
You have actively engaged in email or marketing communications.

What rights do I have?

Please be aware that you have the following data protection rights:

The right to be informed about the personal data the Company processes on you;
The right to request access to the personal data the Company processes on you;
The right to rectification of your personal data; (corrected if it is inaccurate or incomplete)
The right to have your personal data erased (deleted)†;
The right to restrict the processing of your personal data;
The right to data portability;
The right to object to processing of your personal data that was based on public or legitimate interest;
The right not to be subjected to automated decision making and profiling;
The right to withdraw consent at any time.

Where you wish to engage with us to exercise your rights, you can do this by contacting our Data Protection Manager at data@jbandy.co.uk . We will respond to your request as soon as possible but certainly within 30 days.

Please note that these rights do not apply in all circumstances.

If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk, or any other relevant supervisory authority should your personal data be processed outside of the UK if you believe that your data protection rights have not been adhered to.

Policy updates

This Privacy Policy may be updated periodically to reflect changes in our personal information practices. For significant changes, we will notify you by posting a prominent notice on our websites and contact you by email indicating when it was most recently updated.

Last Policy Update: August 18th 2023