Privacy Policy

Last Updated: April 23

Corporate Connect ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our recruitment and hiring services. We comply with the General Data Protection Regulation (GDPR) and other relevant data protection laws applicable in the United Kingdom.

Data Protection Principles

We adhere to the following data protection principles, ensuring that your personal information is:

Used lawfully, fairly, and transparently.
Collected only for valid purposes that we have clearly communicated and not used in ways incompatible with those purposes.
Relevant to the purposes disclosed to you and limited to those purposes.
Accurate and kept up to date.
Retained only as long as necessary for the stated purposes.
Kept securely.

Information We Collect

Personal data, or personal information, refers to any information about an individual that can be used to identify them. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store, and transfer various types of personal data, categorized as follows:

Identity Data: Includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth, and gender.
Socio-demographic Data: Includes details about your work or profession, nationality, and any immigration information, including Biometric Residence Permits, share codes, and European Settlement Status or Pre-Settlement Status.
Contact Data: Includes email address, telephone numbers, and address details.
Documentary Data: Includes details about you stored in documents in various formats or copies, such as identity documentation like passports and proof of address.
Transaction Data: Includes details about payments from you and other details of services you have purchased from us.
Contract Data: Includes details about the services we provide to you and the services you provide to your clients.
Usage Data: Includes data about how you use our services.
Financial Data: Includes payments made or received by you and your company, your bank details, and credit card information.
Open Data and Public Records: Includes details about you that are in public records and information openly available on the internet.
Technical Data: Includes internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on devices used to access our website and portal.
Marketing and Communications Data: Includes your preferences in receiving marketing from us and third parties, your communication preferences, and information you provide in emails, letters, and phone calls.
Call Data: Calls may be recorded for training and quality purposes.

Where necessary, we will only collect special categories of personal data when we have a lawful basis to do so.

How We Will Use Your Personal Information

We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:

Contractual Necessity: Where we need to perform the contract we are about to enter into or have entered into with you.
Legitimate Interests: Where it is necessary for our legitimate interests, provided these are not overridden by your rights and interests.
Legal Obligations: Where we need to comply with our legal obligations.
Consent: Where you have provided consent.

A legitimate interest exists when we have a business or commercial reason to use your information. If we rely on our legitimate interest, we will explain what that is.

Below is a list of all the ways in which we may use your data and the basis upon which we rely:

To register you as a new client.
To conduct identity and necessary Anti-Money Laundering (AML) checks.
To deliver our services.
To make and manage payments due to us by you.
To manage fees, charges, and interest due on your accounts.
To collect and recover money owed to us.
To develop new ways to meet your needs.
To develop and carry out marketing activities.
To study how you use our services.
To provide advice or guidance about our services.
To improve our service offerings.
To respond to and handle complaints.
To contact you within 12 months of terminating or failing to use our services with offers and proposals for re-engagement.
To develop and manage our business and services.
To test new service offerings.
To manage relationships with other companies that provide services to us and our clients.
To make recommendations and suggestions about services that may interest you, including those provided by our suppliers and external business partners.
To analyze data we hold about you to understand your interests and preferences.
To detect, investigate, report, and prevent financial crime.
To manage risk for us and our clients.
To comply with applicable laws and regulations.
To run our business efficiently and protect our operations.
To send your contact details to external business partners who offer services that may be relevant to you.

Marketing

We may use your personal information to inform you about relevant products and services we believe may interest you. We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.

We can only use your personal information for marketing if we have either your consent (via opt-in or soft opt-in) or a legitimate interest. A legitimate interest applies when we have previously provided services to you and are marketing related services.

Marketing and Third Parties

If you have given consent to receive marketing emails, you can withdraw this consent at any time. In some cases, we may share your personal data with third parties for client satisfaction reviews. If we rely on legitimate interests for this, you can object. We will only provide third parties with the necessary information to perform their specific services.

You can ask us or third parties to stop sending you marketing messages at any time by adjusting your preferences on our website, following opt-out links on any marketing message, or contacting us directly at marketing@corporate-connect.com.

Change of Purpose

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to understand how processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis for doing so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Who Do We Share Your Personal Data With?

We may need to share your personal data with third parties for the purposes outlined above. These third parties may include:

Companies within the Corporate Connect group for regular reporting, system maintenance, and when you request services or information about other entities in our group.
Supplier companies and employer-of-record providers we partner with.
Internal staff who support and administer our services.
Companies House, HMRC, regulators, and other authorities.
Our auditors and external business professionals, including lawyers conducting our annual review.
Fraud prevention and credit reference agencies.
Organizations that introduce you to us, or to whom we introduce you.
Any party we have partnered with to offer services you may be interested in.
Insurance brokers and insurers if you choose a service package that includes insurance or if you make a claim.
Third parties to whom we may sell, transfer, or merge parts of our business or assets.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their purposes and only permit them to process your data for specified purposes under our instructions.

How Long Will You Use My Personal Data?

We will retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, insurance, contractual, or reporting requirements.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for processing, and legal requirements.

In some cases, we may anonymize your personal data for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Your Legal Rights

Under certain circumstances, you have rights under data protection laws regarding your personal information, including:

Access: Request access to your personal data.
Correction: Request correction of any inaccurate or incomplete data.
Erasure: Request erasure of your personal data where there is no legitimate reason for us to continue processing it.
Objection: Object to the processing of your personal data where we are relying on a legitimate interest or processing for direct marketing purposes.
Restriction: Request the suspension of processing your personal data in specific scenarios.
Transfer: Request transfer of your personal data to you or a third party.
Withdraw Consent: Withdraw consent at any time, although this will not affect the lawfulness of processing carried out before withdrawal.

We try to respond to all legitimate requests within one month. If your request is complex or you have made several requests, we may take longer but will notify you and keep you updated.

Data Team

We have appointed a Data Team to oversee compliance with this privacy notice. If you have any questions or concerns, please contact the Data Team by emailing data@corporate-connect.com. You also have the right to file a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection issues.

Your Duty to Inform Us of Changes

It is crucial that the personal data we hold is accurate and current. Please inform us if your personal data changes during your relationship with us.

Data Security

We have implemented appropriate security measures to prevent unauthorized access to, alteration, disclosure, or loss of your personal data. These measures include encryption and strict access controls. We have procedures to deal with any suspected data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Changes to This Privacy Policy

We may update this privacy policy periodically. The most recent version will always be available on our website. Please review this policy regularly to stay informed of how we are protecting your data.