Kind Haven Recruitment is a recruitment agency that provides work-finding services to both clients and work-seekers. To provide these services, we must process personal data (including sensitive personal data). In doing so, Kind Haven Recruitment acts as a data controller.
You may give us your personal details directly, such as on an application form or via our website, or we may collect this information from other sources, including job boards. We must have a legal basis to process your personal data, and for the purpose of providing work-finding services and related role information, we will only use your personal data in accordance with this privacy notice. We are committed to complying with current data protection laws at all times.
Collection and use of personal data
Purpose of processing and legal basis
Legitimate Interest
Statutory/Contractual Requirement
Recipients of Data
Information to Be Provided When Data Is Not Collected Directly
Catergories of data
Sources of Data
Data Retention
Your rights
Cookies
Log Files
Links to external websites
Sale of the business
Data Security
Changes to the privacy statement
Complaints or Queries
Kind Haven Recruitment will collect and process your personal data (which may include sensitive personal data) for the purpose of providing work-finding services. This includes activities such as:
Contacting you about job opportunities
Assessing your suitability for roles
Updating and maintaining our database
Putting you forward for job opportunities
Arranging payments and managing our services
If you have opted in, we may also send you marketing information and news via email or text. You can opt out of these communications at any time by clicking “unsubscribe” when receiving them.
In some cases, we may need to use your data for purposes such as detecting and reporting crime, or to comply with applicable laws. We may also use your data during internal audits to demonstrate our compliance with relevant industry standards.
The legal bases we rely upon for processing your personal data are:
Your Consent
Legitimate Interest
When we rely on legitimate interest to process your data, we ensure that it is reasonable and in line with what you would reasonably expect. Our legitimate interests include:
Managing our database and keeping work-seeker records up-to-date
Providing work-finding services
Seeking your consent when necessary
Giving you information about similar services that you have used in the past
We have legal and contractual obligations to collect and process personal data. This includes complying with the Conduct of Employment Agencies and Employment Businesses Regulations 2003, immigration and tax laws, and, in some cases, safeguarding requirements. If you do not provide the personal data we need, we may not be able to provide you with our work-finding services.
We may process your personal and sensitive personal data with the following receipts:
When we do not collect your data from you, we source it from platforms such as:
Job Boards (e.g., Career Builder, Reed, CV Library, Indeed, etc.)
Former Employers
Referees (whose details you may have previously provided)
Cookies (as detailed in section 7)
>We collect the following categories of personal data:
Personal Date:Name, address, mobile number, email, National Insurance number, nationality (via right-to-work checks)
Sensitive personal data: Health information (including disabilities), criminal conviction details
We retain personal data only as long as necessary for the purpose it was collected. Various laws may require us to keep data for different periods, such as:
Work-seeker records: At least one year from the last date of providing work-finding services (per the Conduct of Employment Agencies and Employment Businesses Regulations 2003)
Payroll records: 3 to 6 years, as required by HMRC and related tax legislation.
Sensitive personal data: Retained for the duration specified in our retention policy.
Upon expiry of retention periods, we may seek further consent to continue processing your data. If consent is not granted, we will cease processing your data.
You have the following rights under data protection laws:
The right to be informed about the data we process
The right of access to your personal data
The right to rectification of your data
The right to erasure of your data in certain circumstances
The right to restrict processing
The right to data portability in certain situations
The right to object to processing based on public or legitimate interests
The right not to be subjected to automated decision-making
The right to withdraw consent at any time
If you wish to exercise any of these rights, please contact us using the details provided above.
We may use cookies to collect data about your online activity. Cookies are small text files placed on your device by websites you visit. For further information on how we use cookies, please refer to our Cookie Policy.
We may collect and analyse IP addresses to track trends, administer the site, and gather demographic data. These IP addresses are not linked to personally identifiable information.
Our website may contain links to other external sites. Please be aware that we are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies when leaving our site.
If our business is sold or integrated with another company, your personal data may be disclosed to advisers and prospective buyers, and will be passed to the new owners.
We take every precaution to protect your personal data through encryption, firewalls, and other security measures. However, please note that email and internet communication are not completely secure, and we cannot guarantee the security of personal information transferred via these methods.
We may update this privacy notice from time to time. When we make changes, we will post the revised version along with a revision date. If the changes are significant, we will notify you.
If you have any complaints or questions regarding this privacy notice, please contact us:
Daisy Brown: [email protected]
Phone: 03335775534
If you believe your data protection rights have been violated, you can raise concerns with the Information Commissioner’s Office (ICO) at 0303 123 1113 or visit their website at https://ico.org.uk/make-a-complaint/.
Please refer to our attached Data Retention Policy for specific retention periods.