At InfoSec People Ltd we’re committed to protecting and respecting your privacy.

This policy explains when and why we collect personal information, how we use it, the conditions under which we may disclose it to others and how we keep it secure.

InfoSec People Ltd is a leading UK Cyber Security and Technology recruitment business whose aim is to inspire people to the find the careers that inspire them. InfoSec People is a limited company registered in England & Wales. Registered Company No: 06448435 Registered Address: Eagle Tower, Montpellier Drive, Cheltenham GL50 1TA Any questions regarding this Policy and our privacy practices should be sent to info@infosecpeople.co.uk, alternatively you can telephone us on 01242 507 100.

Why do we collect your personal information?

We are retained by organisations to identify and place individuals into new employment opportunities. We have identified you as an individual that could be of interest to our clients. We take your privacy very seriously and, in order for us to keep you informed about relevant opportunities, we request to hold your personal data. If you do not allow us to do this, we will be legally obliged to remove you from our database and can no longer put you forward for such opportunities.

What information do we collect?

Typically, we collect your current and previous employers, and details of your work, skills and experiences, education and qualifications. We will then store pertinent details of our relationship which could include elements such as records of interviews, opportunities we have put you forward for, information you have provided to us such as a CV/resume and copies of correspondence including call recordings. We may store further information where we have placed you or you are in employed by us which could include start and end dates, pay history, umbrella company details and bank details. It is unlikely we will require or process any data which would be categorised as Special under the relevant data protection legislation but should we need to do so we would contact you and get your explicit consent to do so.

What will we do with your personal information?

We will hold your personal data:

• To be able to place you to the most suitable position according to your background and experience.
•  We may use your personal information to contact you to discuss the opportunity.
• We may use your data for the fulfilment and ongoing management of a contract where we have placed or hired you.
• We may also use your data for the purpose of identification
• To comply with our legal and regulatory obligations

Who will we share your personal information with?

We will only make your personal information visible to the organisations we are working with when you are put forward for an opportunity or where required for the fulfilment and ongoing management of a contract where we have placed or hired you. We may also disclose your personal information to third parties: As a part of our business processes InfoSec People utilise the services of

• Office365
• Access Network Ltd Vincere
• Timesheet Portal provided by Anfold Software
• Xero Limited
• Emerge Digital
• Signable

Whilst these cloud providers would not typically have direct access to your information, storage is considered processing under the relevant data protection legislation. Similarly, as an example, if we have employed you directly or engaged with your limited company on a contract engagement we would need to send your data as required by law to local tax authorities; – If we are under a duty to disclose or share your personal data in order to comply with relevant legal obligations, or in order to enforce or apply our terms of use which includes exchanging information with other companies and organisations for the purposes of fraud protection. Using your information to keep in touch with you.

In addition to our typical processing we may use the information we hold about you in order to contact you in the following circumstances:

• To advise you of changes to our terms
• To advise you of any security concerns
• Where permitted by law

How long do we hold it for?

We will hold your data for no longer than 2 years before seeking confirmation that you are happy for us to continue to hold your data. If we have placed you either with one of our clients or you have been employed directly by us, we are required by law to hold your data for 6 years and no longer.

Secure collection and storing of your information

All information that you provide to us, or we collect about you is stored on our secure servers. We understand that this includes confidential information and we have put in place a range of suitable physical, electronic and managerial procedures to safeguard and secure your information. Our staff have the minimum required access to your data, and are trained to ensure that it is protected, and kept secure. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to us; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. We do not store your information for longer than is necessary to provide the service, and to ensure that we have appropriate auditable records for business purposes.

Automated Decision Making

During our processing of your information we may use functions that could be defined as automated decision making. Typically, this would be where you have submitted a CV/resume to us and we use an industry standard 3rd party product, in the case of InfoSec People, namely Voyager Infinity Software, which uses complex proven semantic and natural language algorithms to “read” and extract data from the submitted document and create a profile for you in our database. This information could later be used to then match your profile against vacancy profiles also stored within our database. We have conducted a Data Protection Impact Assessment and matched profiles and vacancies are assessed by our staff before we contact you in regard to the position to ensure suitability. If you have any questions about this process or to request that we do not use this process during our relationship with you, please contact us. 01242 507 100 or email privacy@infosecpeople.co.uk.

Your rights

You have the right to request from us access to your own personal information. This is sometimes known as a ‘subject access request’. Additionally, you have the right to request from us:

• that any inaccurate information we hold about you is corrected
• that information about you is deleted in certain situations
• that we stop using your personal information for certain purposes
• that your member profile is provided to you in a portable format
• that decisions about you are not made by wholly automated means

Many of the rights listed above are limited to certain defined circumstances and we may not always be able to comply with your request. We will tell you if this is the case. If you choose to make a request to us to exercise any of these rights, we will aim to respond to you as soon as we reasonably can but no later than one month. We will not charge a fee for dealing with any reasonable request. If you are unhappy with how we are using your personal information or if you wish to complain about how we have handled a request, then please contact 01242 507 100 or email info@infosecpeople.co.uk and we will try to resolve your concerns. You also have the right to complain to your local Data Protection Authority and a full list can be found here: http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080

Changes to this privacy notice

Any changes we may make to our privacy notice in the future will be posted on this page. Please check back frequently to see any updates or changes to our privacy notice.

Law and Jurisdiction

This privacy information notice is subject to the laws of England, and the non-exclusive jurisdiction of the English Courts. If you are domiciled in Scotland, Wales or Northern Ireland it can be enforced in your local court system.

Get in touch

Phone: 01242 507 100 Email: info@infosecpeople.co.uk