Sustainable People Solutions

As a recruitment company, we will store and process your data to facilitate the provision of our services to you. Additionally, we will share any pertinent information with regulatory bodies such as HMRC, Inland Revenue, and other legally mandated organizations.

If you contact us as a job seeker, we will use your details to send you requested information, updates, job openings, and other relevant information that may be of interest to you. Alternatively, if you contact us as a client with potential job opportunities or related inquiries, we will provide any requested information and share updates, including those related to advertised positions, that we believe may be of interest to you.

We will retain and protect personal information such as application forms, identification documents, and bank details for applicants, clients, and employees to enable us to provide our services. Additionally, we may gather personal data from third parties, including former employers’ references. As a potential employer, we will store data necessary to fulfil our services and contractual obligations, which may include contact information.

What data will be disclosed?

We will only disclose data relevant to our service provision process, and only to the third parties specified in this policy.

How long will it be retained?

We will only retain your data for seven years from our last communication with you, after which it will be erased.

Who has access to my data?

We will not sell, share, or distribute your data to any third party except as stated in this policy. We will disclose your information to regulatory bodies or legal entities, as well as parties relevant to the application process, such as client companies with potential vacancies or other applicants.

How is my data safeguarded?

We will store your data on secure servers located in the UK, and processing will also occur in the UK. We employ industry-standard security measures to protect your data.

We are committed to protecting your privacy and will only use your personal information to provide the services you have requested and to send you information about services, job openings, and other related information that may be of interest to you. We will never sell, share, or utilize your personal information other than as specified in this policy.

This policy outlines how we will use and disclose the information you provide to us. It defines your association with People & Process Solutions. The General Data Protection Regulation (GDPR) establishes guidelines for the collection, management, processing, and storage of personal data by organizations.

These regulations apply regardless of the medium used to store data, whether electronic, paper-based, or other formats. To comply with GDPR, personal information must be obtained and utilized in a transparent and lawful manner, stored securely, and not unlawfully disclosed.

The GDPR is built on eight essential principles:

● Processed lawfully and fairly

● Collected for specific and legitimate purposes

● Adequate, relevant, and not excessive

● Accurate and kept up to date

● Retained for no longer than necessary

● Processed in accordance with the data subject’s rights

● Securely protected

● Not transferred outside of the European Economic Area unless adequate protection is ensured in the receiving country or territory.

We recognize our obligations under these principles, and this document outlines our data protection strategy.

This policy mitigates data security risks such as:

● Inappropriate disclosures that breach confidentiality.

● Failure to provide individuals with the option to control how their data is used.

● Potential harm to our reputation if sensitive data is accessed by hackers.

People & Process Solutions is registered in the United Kingdom and is registered with the information commissioner’s office.

You can contact us by the following:

Email: Contact@pandpsi.com

Phone: +44 7812 043 416

This policy applies to all users of People & Process Solutions, including clients (potential employers), candidates, workers, and employees. Processing of your data is necessary for us to provide you with our services. This policy pertains to individuals who have shared their information with People & Process Solutions, whether as a customer, candidate, employee, supplier, or in any other capacity.

This policy covers all information that the company possesses regarding identifiable individuals, even if such information is technically not covered by GDPR. This information may include:

● Individuals’ names

● Postal addresses

● Email addresses

● Telephone numbers

This section details the lawful basis for processing your data and pertains to the information you provide us with or allow us to collect, including:

● Information provided when you contact us

● Information collected during discussions about utilizing our services

● Information about your website usage

● Information about products and services we provide to you, as well as other transactions that require financial and other personal information to complete.

● Information that is shared and stored as part of our ongoing relationship

We do not collect or process sensitive data about you.

We will utilize your personal data only for the purposes for which it was collected and in a way that you would reasonably anticipate your data to be processed, and only when a lawful basis for processing exists. For example:

Purpose/Activity

Type of data

Lawful basis for processing

To register you as a new client

(a) Identity, (b) Contact

(a) Performance of a contract with you.

(b) Pursuit of our legitimate interests.

(c) Compliance with legal obligations.

To provide the services you have requested, such as recruitment and employment services, managing payments, fees, and charges, and collecting and recovering money owed to us:

(a) Identity, (b) Contact, (c) Financial, (d) Transaction, (e) Marketing and Communications

(d) Execution of a contract with you.

(e) Pursuit of our legitimate interests.

(f) Compliance with legal obligations.

To manage our ongoing relationship with you which will include notifying you about changes to our terms, recruitment services, or privacy policy, to maintain our records

​(a) Identity, (b) Contact, (c) Profile, (d) Marketing and Communications

(a) Performance of a contract with you, (b) Necessary to comply with a legal obligation, (c) Necessary for our legitimate interests to keep our records updated and to study how customers use our products/services

To administer and protect our business and our site (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

(a) Identity, (b) Contact, (c) Technical

​(a) Necessary for our legitimate interests for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise,

(b) Necessary to comply with a legal obligation

To deliver relevant content and advertisements to you and measure and understand the effectiveness of our advertising

​

(a) Identity, (b) Contact, (c) Profile, (d) Usage, (e) Marketing and Communications, (f) Technical

Necessary for our legitimate interests to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy

To use data analytics to improve our website, products/services, marketing, customer relationships and experiences

​

(a) Technical, (b) Usage

​

Necessary for our legitimate interests to define types of customers for our products and services, to keep our site updated and relevant, to develop our business and to inform our marketing strategy

To make suggestions and recommendations to you about goods or services that may be of interest to you

​

(a) Identity, (b) Contact, (c) Technical, (d) Usage, (e) Profile

Necessary for our legitimate interests to develop our products/services and grow our business

As an employee/candidate, we may gather and process data about you, including your name, address, contact information (such as email address and mobile number), work details, and other details obtained as part of your job application. We may obtain personal information from the following sources:

● Information provided to us when registering on our website (including your email address)

● Information provided when filling out your job application (including your name, gender, date of birth, education, and employment details)

● Information given to us when signing up for correspondence lists

● Information regarding any vacancies, jobs, or employment you accept

The personal data we receive will be used for the purposes for which it was provided, including:

● Responding to your job-related queries

● Managing and administering your relationship with us

● Informing you of any changes to our services or communicating with you in other ways

● Collecting feedback from you about us

● Informing you about changes to your place of work, such as shift patterns, new assignments, or any other job role changes.

As per your preferences, we may utilize your personal information to provide you with details about products, services, promotions, and offers that may interest you. We may analyze your personal information to determine the services, promotions, and offers that are most likely to appeal to you. This document outlines how you can modify your preferences regarding receiving such information. However, please be aware that, even if you choose not to receive this information, we may still use your personal information to send you important service-related communications, including communications relating to any purchases or services you utilize.

We adhere to the UK GDPR data protection guidelines. We value your rights and will address any requests for access to personal information and requests to delete, rectify, transfer, or stop processing data. Additionally, we will provide guidance on how to file complaints with the relevant authority, the Information Commissioner’s Office. Any requests or objections should be submitted in writing to the Data Controller. Alternatively, you may visit our website, call, or email us to change your preferences at any time.

By providing your personal data on this website or as required for us to provide you with our products and services, you are affirming your consent for such information to be used in accordance with this privacy policy. You may modify your preferences at any time using the methods specified in this document.

We may occasionally employ your information for marketing, account management, or relationship management purposes. Our primary objective is to supply you with information regarding services that we believe may appeal to you and/or to preserve any existing relationships we have with you.

If you grant us consent to process your data, such as when you permit us to send you marketing information or allow us to process financial data, you may contact us to modify or revoke your consent at any time. Additionally, you may object to processing and request deletion of your data. We uphold all user rights as stipulated in GDPR. If you have any comments or grievances, please contact us.

Your data will primarily be collected, stored, and processed within the UK. We do not typically transfer your data outside the UK. However, if we do, we will implement suitable technical, contractual, and operational measures to safeguard your data.

We will store your data for up to 7 years following our last interaction to ensure that we have records of services provided, payments, and other interactions with you.

To provide our services, we utilize reputable third parties for payment processing, credit reports, and other verifications, accounting, and banking services. We will store transaction, payment, and order data for up to 7 years, or for as long as necessary under UK financial and company regulations. These third parties may operate outside the UK, and if so, we will take necessary precautions to protect your data.

We will only use your personal data for the purposes for which we collected it, unless we reasonably determine that we need to use it for another purpose that is compatible with the original purpose. If you want to learn more about how processing for the new purpose is compatible with the original purpose, please contact us via email. If we need to use your personal data for a purpose unrelated to the purpose for which we collected the data, we will inform you and explain the legal basis for processing.

We may have a legal obligation to disclose your personal information without your knowledge, to the extent that we are required to do so by law. This may be in connection with any ongoing or potential legal proceedings or to establish, exercise, or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk). We may disclose your personal information to any person who we reasonably believe may apply to a court or other competent authority for the disclosure of that personal information where, in our reasonable opinion, such court or authority would be likely to order disclosure of that personal information.

You will only receive marketing communications from us if:

● You requested information from us or purchased goods or services from us

● You provided us with your details and ticked the box at the point of entering your details, for us to send you marketing communications

● You have not opted out of receiving marketing communications

We will obtain your express opt-in consent before sharing your personal data with any third party for marketing purposes.

As a data controller, we are legally responsible for handling the information that you provide to us. We will comply with the UK GDPR in the way we use and share your personal data. This means that we will use your personal data:

● Fairly and lawfully

● In accordance with the legislation and this policy

● To the extent necessary for the stated purposes

● We will take measures to ensure the accuracy of your data and rectify any inaccuracies.

Under certain circumstances, you have rights under data protection laws regarding your personal data. These include the right to:

● Request access to your personal data.

● Request the correction of your personal data.

● Request the erasure of your personal data.

● Object to the processing of your personal data.

● Request the restriction of processing of your personal data.

● Request the transfer of your personal data.

● The right to withdraw your consent.

You will not be charged a fee to exercise your rights related to your personal data. However, we may charge a reasonable fee if your request is unfounded, excessive or repetitive. We may also refuse to comply with your request in these circumstances.

To ensure that your personal data is not disclosed to unauthorized persons, we may need to verify your identity and obtain specific information from you when you exercise your rights. We may also contact you to request additional information to expedite our response.

We aim to respond to all legitimate requests within one month. However, if your request is complex or you have made multiple requests, it may take us longer to respond. We will notify you and keep you informed in such cases.

We may need to share your personal data with the parties outlined below for the purposes explained in this policy:

For candidates/workers: Prospective employers and companies that may offer you work.

For clients: Candidates/employees/workers who may be interested in any vacancies.

For all users of our site:

● Service providers who provide IT and system administration services.

● Professional advisers, including lawyers, bankers, auditors and insurers who provide consultancy, credit scoring, banking, legal, fraud protection, insurance and accounting services.

● HM Revenue & Customs, regulators, and other authorities based in the United Kingdom and other relevant jurisdictions who require reporting of processing activities in certain circumstances.

● Third parties to whom we sell, transfer, or merge parts of our business or our assets.

We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions.

We have implemented suitable security measures to prevent accidental loss, unauthorized access, use, alteration, or disclosure of your personal data. Moreover, we restrict access to your personal data to employees, agents, contractors, and other third parties who have a genuine business requirement to know such data. These parties will process your personal data only on our instructions and are obligated to maintain confidentiality.

We will promptly notify the relevant authorities within 24 hours of any actual or suspected data breaches and inform those affected within 72 hours. If you have any concerns or questions regarding your data usage, please get in touch with us.

This website may contain links to third-party websites, plug-ins, and applications. Clicking on such links or enabling such connections may enable third parties to collect or share data about you. We do not oversee these third-party websites and are not responsible for their privacy policies. Before using any third-party website, we recommend that you carefully read their privacy policies.

A cookie is a small file that is placed on your computer’s hard drive with your permission. Cookies allow websites to respond to you as an individual by gathering and remembering information about your preferences. We use traffic log cookies to identify which pages are being used, helping us to analyze data about webpage traffic and improve our website to better serve our customers. We only use this information for statistical analysis purposes and then remove the data from the system.

Cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. However, cookies do not give us access to your computer or any personal information about you, except for the data you choose to share with us.

You have the option to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. Please note that declining cookies may prevent you from taking full advantage of the website.

In addition to your ability to accept or reject cookies, we require your permission to store cookies on your machine. When you visit our site, you will be presented with the option to accept our terms of use, which includes the storage of cookies on your machine. If you do not accept our terms, you are free to leave our website at any time.

According to GDPR, we are authorized to disclose certain information to third parties who use this data for non-marketing objectives, such as credit and risk evaluation and management, identification and fraud prevention, debt collection, and returning assets to you.

If you any questions or comments about this Privacy Policy, wish to exercise your information rights in connection with the personal data you have shared with us or wish to complain, please contact:

Email: Contact@pandpsi.com

Phone: +44 7812 043 416

We will process SARs within 30 days, SAR responses are usually free but we reserve the right to charge for excessive or unfounded requests. We fully comply with Data Protection legislation and will assist in any investigation or request made by the appropriate authorities.