Privacy

Red Leaf Recruitment

Business address:

Company registration number: 11589851

Our role as the Data Controller

The Data Controller is a person or organisation who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed.

We are the sole Data Controllers for this website. With respect to the personal data of our website users; we determine the purposes and means of the processing of that data.

Intended Website Users

This website is directed at consumers, to inform them about our products and services. The site and its content are directed at adults over the age of 16. While those under 16 can view the site and its content, users of our services are consumers above this age.

Collected Information

Red Leaf will collect and use the following types of personal information:

Information you provide to us

This includes information you share with us when you contact us through the website, email, telephone, post, or through any other means. 

Information that is collected automatically

This includes information about your use of this website. This information helps us improve our website and includes your IP address, as well as dates, times, and frequency of access, along with other engagement patterns relating to our content.

Information about you available publicly

We may also collect information available from other websites, such as your online profiles and social media accounts or publications about you.

Personal Information

Red Leaf Recruitment Ltd may collect and use personal information, such as information regarding your:

• Personal contact details such as name, title, addresses, telephone numbers, and personal email addresses.
• Date of birth and gender.
• Family details such as marital status and dependents, next of kin and emergency contacts.
• Identification such as passport, driving license, national insurance number and other tax or governmental identity.
• Recruitment information and employment records, including salary, annual leave, pension and benefits, copies of right to work documentation, references, compensation history and other information included in a CV, cover letter or as part of the application process.

We may also collect, store and use the following “special categories” of more sensitive personal information regarding your:

• health, including any medical condition.
• information about criminal convictions and offences.

How we use your information

We are committed to protecting your privacy and will only use your personal information in accordance with applicable data protection legislation, including the Data Protection Act 1998 and the General Data Protection Regulation and the UK implementing legislation. Most commonly, we will use your personal information in the following circumstances:

• where we need to provide the recruitment services outlined on this website.
• where we need to comply with a legal obligation.
• where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

Specific uses include:

Contact Forms

Any information submitted through our contact forms will be held securely on our servers. Clear consent must be given to this Policy when submitting any data through our contact forms. All data will be stored for up to 24 months and used to contact you regarding your enquiry.

Site Backups

Contact form information may also be held in a backup of the website. Backups are stored for 30 days, after which they are deleted permanently.

Analytics & Tracking

To deliver the best possible web experience, we collect technical information about your internet connection and browser as well as the country and telephone code where your computer is located, the web pages viewed during your visit, the buttons clicked on, and any search terms you entered. This is done with the use of Cookies that are stored within your web browser (find out more about how we use cookies).

Data Processors

We will sometimes be required to share data with trusted Third Parties who act as Data Processors on our behalf. Data will only be processed for the purposes of operating our website, providing our services, marketing (if consent is given), security, back-ups and communicating with you.

Data Processors are a person or organisation who deals with personal data as instructed by the controller for specific purposes and services offered to the controller that involve personal data processing.

To keep your data safe and protect your privacy, we have a strict policy with these organisations:

• The only data given to the Processor will be what they need to perform their specific services.
• We only give them permission to use the data for the exact purposes we agree in our contract with them.
• We only use trusted Data Processors with clear terms and conditions and policies to ensure full compliance with privacy legislation.
• If we stop using any of our Data Processors, all of the data held by them will either be deleted or rendered anonymous.

We will never share your data with third parties for their own purposes unless you have given explicit consent for us to do so.

Data Location

This website is hosted on servers located in London, United Kingdom, where the website data is held.

Data Transfers Outside the EEA

Our trusted Data Processors may be required to transfer data outside of the EEA when acting on our behalf to provide services. We will regularly check that the organisations are all GDPR compliant for data transfer outside the EEA.

Site Security

This website is scanned daily for Malware, which is removed immediately if found.

• All security is handled at server level, rather than relying on third-party security plugins
• Secure password best practices are enforced on the site for Administrators
• Login attempts are limited at both site and server level, to protect against brute-force attacks
• Intelligent IP blocking detects intruders and blocks them across all sites on the servers within seconds
• All core updates are handled automatically by our hosting provider to ensure the site is running the most up-to-date and secure version of the system

User Rights and Choices

If you wish to access, transfer or delete the data held about you, please contact us. Once notified we can then initiate the process required.

Your data can be removed from our Email Marketing system by unsubscribing via the link at the bottom of any of our marketing emails.

Your data may also be held within a site backup. Backups are stored for 30 days, after which they are deleted permanently

Remarketing

With your consent, we may use Cookies (find out more about how we use cookies) to track your interactions with this website. This data may be shared with our Digital Marketing providers and Data Processors to present you with the most relevant advertisements when browsing third-party websites.

Contact us with any questions

If you have any questions about this policy, your data, how it is used and protected or deletion of this data, please contact us using the details on this page.