Privacy Policy | Foster Lawson

Website Privacy Policy

Background:

Foster Lawson understands that your privacy is important to you and that you care about how your information is used and shared online. We respect and value the privacy of everyone who visits Our Site and will only collect and use information in ways that are useful to you and in a manner consistent with your rights and Our obligations under the law.

This Policy applies to Our use of any and all data collected by us in relation to your use of Our Site. Please read this Privacy Policy carefully and ensure that you understand it. Your acceptance of Our Privacy Policy is deemed to occur upon your first use of Our Site. If you do not accept and agree with this Privacy Policy, you must stop using Our Site immediately.

1. Definitions and Interpretation

In this Policy the following terms shall have the following meanings:

“Account” means an account required to access and/or use certain areas and features of Our Site;
“Cookie” means a small text file placed on your computer or device by Our Site when you visit certain parts of Our Site and/or when you use certain features of Our Site. Details of the Cookies used by Our Site are set out in section 12, below;
“Our Site” means this website, www.fosterlawson.com;
“UK and EU Cookie Law” means the relevant parts of the Privacy and Electronic Communications (EC Directive) Regulations 2003 as amended in 2004, 2011 and 2015; and
“We/Us/Our” Foster Lawson

2. What Data Do We Collect?

Some data will be collected automatically by Our Site (for further details, please see section 9 below), other data will only be collected if you voluntarily submit it, for example, when signing up for an Account.

Depending upon your use of Our Site, We may collect some or all of the following data:
name; date of birth; gender; business/company name job title; profession; contact information such as email addresses and telephone numbers; demographic information such as post code, preferences and interests; financial information such as credit / debit card numbers; IP address (automatically collected); web browser type and version (automatically collected); operating system (automatically collected); a list of URLs starting with a referring site, your activity on Our Site, and the site you exit to (automatically collected);

3. How Do We Use Your Data?

All personal data is stored securely in accordance with the principles of the Data Protection Act 1998. For more details on security see section 4, below.

We use your data to provide the best possible products and services to you. This could include: Providing and managing your Account; Providing and managing your access to Our Site; Personalising and tailoring your experience on Our Site; Supplying Our products and services to you; Personalising and tailoring Our products and services for you; Responding to communications from you; Supplying you with email Email, e.g. Newsletters, Alerts etc. that you have subscribed to (you may unsubscribe or opt-out at any time by following instructions on the communication); Market research; Analysing your use of Our Site and gathering feedback to enable Us to continually improve Our Site and your user experience;

With your permission and/or where permitted by law, We may also use your data for marketing purposes which may include contacting you by email, telephone, text message and/or post with information, news and offers on Our products and services. We will not, however, send you any unsolicited marketing or spam and will take all reasonable steps to ensure that We fully protect your rights and comply with Our obligations under the Data Protection Act 1998 and the Privacy and Electronic Communications (EC Directive) Regulations 2003, as amended in 2004, 2011 and 2015.

4. How and Where Do We Store Your Data?

We only keep your data for as long as We need to in order to use it as described above in section 3, and/or for as long as We have your permission to keep it.

Data security is of great importance to Us, and to protect your data We have put in place suitable physical, electronic and managerial procedures to safeguard and secure data collected through Our Site.

Notwithstanding the security measures that We take, it is important to remember that the transmission of data via the internet may not be completely secure and that you are advised to take suitable precautions when transmitting to Us data via the internet.

5. Do We Share Your Data?

We may sometimes contract with third parties to supply products and services to you on Our behalf. These may include payment processing, delivery of goods, search engine facilities, advertising and marketing. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, We will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, Our obligations, and the obligations of the third party under the law.

We may compile statistics about the use of Our Site including data on traffic, usage patterns, user numbers, sales and other information. All such data will be anonymised and will not include any personally identifying information. We may from time to time share such data with third parties such as prospective investors, affiliates, partners and advertisers. Data will only be shared and used within the bounds of the law.

In certain circumstances We may be legally required to share certain data held by Us, which may include your personal information, for example, where We are involved in legal proceedings, where We are complying with the requirements of legislation, a court order, or a governmental authority. We do not require any further consent from you in order to share your data in such circumstances and will comply as required with any legally binding request that is made of Us.

6. How Can You Control Your Data?

When you submit information via Our Site, you may be given options to restrict Our use of your data. In particular, We aim to give you strong controls on Our use of your data for direct marketing purposes (including the ability to opt-out of receiving emails from Us which you may do by unsubscribing using the links provided in Our emails and at the point of providing your details AND/OR by managing your Account).

You may also wish to sign up to one or more of the preference services operating in the UK: The Telephone Preference Service (“the TPS”), the Corporate Telephone Preference Service (“the CTPS”), and the Mailing Preference Service (“the MPS”). These may help to prevent you receiving unsolicited marketing. Please note, however, that these services will not prevent you from receiving marketing communications that you have consented to receiving.

7. Your Right to Withhold Information

You may access certain areas of Our Site without providing any data at all. However, to use all features and functions available on Our Site you may be required to submit or allow for the collection of certain data.

You may restrict your internet browser’s use of Cookies. For more information, see section 9 below

8. How Can You Access Your Data?

You have the legal right to ask for a copy of any of your personal data held by Us (where such data is held). We reserve the right to charge a small fee for this service.

9. Cookies

Our Site may place and access certain first party Cookies on your computer or device. First party Cookies are those placed directly by Us and are used only by Us. We use Cookies to facilitate and improve your experience of Our Site and to provide and improve Our products and services. Our Site also uses analytics services provided by Google which also use Cookies. Website analytics refers to a set of tools used to collect and analyse usage statistics, enabling Us to better understand how people use Our Site.

10. Contacting Us

If you have any questions about Our Site or this Privacy Policy, please contact us. Our contact details can be found on our Contact Page. Please ensure that your query is clear, particularly if it is a request for information about the data We hold about you (as under section 4, above).

11. Changes to Our Privacy Policy

We may change this Privacy Policy as we may deem necessary from time to time, or as may be required by law. Any changes will be immediately posted on Our Site and you will be deemed to have accepted the terms of the Privacy Policy on your first use of Our Site following the alterations. We recommend that you check this page regularly to keep up-to-date.

Client Privacy Policy

Scope and Overview

The Fordy Group Ltd. is committed to protecting the privacy and security of your personal data. This Privacy Notice describes how The Fordy Group and its subsidiaries, affiliates, and related entities (collectively, “The Fordy Group,” “we,” or “us”) collect and process personal data about you as clients and prospective clients of The Fordy Group. This Privacy Notice applies to current, past and prospective clients and customers of The Fordy Group. This privacy notice applies to data subjects located in in all jurisdictions and territories where they are based.

This Privacy Notice describes the categories of personal data that we collect, how we use your personal data, how we secure your personal data, when we may disclose your personal data to third parties, and when we may transfer your personal data outside of your home jurisdiction. This Privacy Notice also describes your rights regarding the personal data that we hold about you including how you can access, correct, and request erasure of your personal data.

We will only process your personal data in accordance with this Privacy Notice unless otherwise required by applicable law. We take steps to ensure that the personal data that we collect about you is adequate, relevant, not excessive, and processed for limited purposes.

Collection of Personal Data

For the purposes of this Privacy Notice, personal data means any information about an identifiable individual. Personal data excludes anonymous or de-identified data that is not associated with a particular individual. To carry out our activities and obligations as a recruiter, we may collect, store, and process the following categories of personal data, some of which we require to administer the services and relationship with you or the organisation(s) you represent:

Personal contact details such as name, title, addresses, telephone numbers, and personal email addresses
Gender
Start date and job title
Location of place of work
Education and training
Employment records (including professional memberships, references, work history, and proof of work eligibility)
Photograph
Voice recordings e.g. telephone calls
Video recordings e.g. meetings

The personal data listed in this notice is information we may obtain in the ordinary course of our business relationship.

We will collect the majority of the personal data that we process directly from you or from your organisation(s). In limited circumstances third parties may provide your personal data to us, such as referral bodies, social media (such as LinkedIn), public organisation information (such as websites) and data service providers.

Use of Personal Data

We only process your personal data where applicable law permits or requires it, including where the processing is necessary for the performance of our contractual obligations with you or your organsiation(s), to offer our services to you, to demonstrate the services that were performed or offered to be performed, where the processing is necessary to comply with a legal obligation that applies to us as a service provider, and for our legitimate interests or the legitimate interests of third parties.

We may process your personal data for the following legitimate business purposes and for the purposes of performing the employment contract with you:

To offer legitimate business services to you and/or the organisation(s) you represent
Business management and planning
Accounting, invoicing and auditing
Gathering evidence for claims as may be necessary
Complying with applicable law
Education, training, and development requirements

We will only process your personal data for the purposes we collected it for or for compatible purposes. If we need to process your personal data for an incompatible purpose, we will provide notice to you and, if required by law, seek your consent. We may process your personal data without your knowledge or consent where required by applicable law or regulation.

We may also process your personal data for our own legitimate interests, including for the following purposes:

To prevent fraud
To ensure network and information security, including preventing unauthorized access to our computer and electronic communications systems and preventing malicious software distribution
To support internal administration with our affiliated entities
To conduct data analytics analyses to review and better understand client retention and attrition rates and feedback

You will not be subject to decisions based on automated data processing without your prior consent.

Collection and Use of Special Categories of Personal Data

The following special categories of personal data are considered sensitive under the laws of your jurisdiction and may receive special protection:

Racial or ethnic origin.
Political opinions.
Religious or philosophical beliefs.
Trade union membership.
Genetic data.
Biometric data.
Data concerning health.
Data concerning sex life or sexual orientation.

Data relating to criminal convictions and offences may also receive special protection under the laws of your jurisdiction.

We do not intend to process special categories of data but some information may be processed incidentally in the ordinary course of business conversations and dealings:

Physical or mental health information or disability status
Race or ethnic origin, religious affiliation, health information and sexual orientation

Where we have a legitimate need to process special categories of personal data for purposes not identified above, we will only do so only after providing you with notice and, if required by law, obtaining your prior, express consent.

We will always treat special categories of personal data as confidential and we will only share such data internally where there is a specific and legitimate purpose for sharing the data. As set out below, we have implemented appropriate physical, technical, and organisational security measures designed to secure your personal data against accidental loss and unauthorised access, use, alteration, or disclosure.

We will only retain special categories of personal data for as long as necessary to fulfill the purposes we collected it for, as required to satisfy any legal, accounting, or reporting obligations, or as necessary to resolve disputes.

Data Sharing

We will only disclose your personal data to third parties where required by law or to our group entities, employees, contractors, designated agents, or third-party service providers who require such information to assist us with administering the relationship with you and the organisation(s) you represent, including third-party service providers who provide services to us or on our behalf. Third-party service providers may include, but are not limited to, CRM processors, administration providers, and data storage or hosting providers. These third-party service providers may be located outside of our or your home jurisdiction.

We require all our third-party service providers, by written contract, to implement appropriate security measures to protect your personal data consistent with our policies and any data security obligations applicable to us as your employer. We do not permit our third-party service providers who process your personal data on our behalf to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes in accordance with our instructions.

We may also disclose your personal data for the following additional purposes where permitted or required by applicable law:

To other members of our group of companies (including outside of your home jurisdiction) for the purposes set out in this Privacy Notice and as necessary to perform our employment contract with you.
As part of our regular reporting activities to other members of our group of companies.
To comply with legal obligations or valid legal processes such as search warrants, subpoenas, or court orders. When we disclose your personal data to comply with a legal obligation or legal process, we will take reasonable steps to ensure that we only disclose the minimum personal data necessary for the specific purpose and circumstances.
To protect the rights and property of The Fordy Group.
During emergency situations or where necessary to protect the safety of persons.
Where the personal data is publicly available.
If a business transfer or change in ownership occurs and the disclosure is necessary to complete the transaction. In these circumstances, we will limit data sharing to what is absolutely necessary, and we will anonymize the data where possible.
For additional purposes with your consent where such consent is required by law.

Cross-Border Data Transfers

Where permitted by applicable law, we may transfer the personal data we collect about you to the United States and other jurisdictions that may not be deemed to provide the same level of data protection as your home country, as necessary for the purposes set out in this Privacy Notice. If you are located in the EU, we have implemented appropriate data protection mechanisms to secure the transfer of your personal data to the United States and other jurisdictions.

Data Security

We have implemented appropriate physical, technical, and organizational security measures designed to secure your personal data against accidental loss and unauthorised access, use, alteration, or disclosure. In addition, we limit access to personal data to those employees, agents, contractors, and other third parties that have a legitimate business need for such access.

Data Retention

Except as otherwise permitted or required by applicable law or regulation, we will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, as required to satisfy any legal, accounting, or reporting obligations, or as necessary to resolve disputes. To determine the appropriate retention period for personal data, we consider applicable legal requirements, the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes we process your personal data for, and whether we can achieve those purposes through other means.

Under some circumstances we may anonymise your personal data so that it can no longer be associated with you. We reserve the right to use such anonymous and de-identified data for any legitimate business purpose without further notice to you or your consent.

Rights of Access, Correction, Erasure, and Objection

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes. By law you may have the right to request access to, correct, and erase the personal data that we hold about you, or object to the processing of your personal data under certain circumstances. You may also have the right to request that we transfer your personal data to another party. If you want to review, verify, correct, or request erasure of your personal data, object to the processing of your personal data, or request that we transfer a copy of your personal data to another party, please contact us at legal@thefordygroup.com. Any such communication must be in writing.

We may request specific information from you to help us confirm your identity and your right to access, and to provide you with the personal data that we hold about you or make your requested changes. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal data that we hold about you, or we may have destroyed, erased, or made your personal data anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal data, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

Right to Withdraw Consent

Where you have provided your consent to the collection, processing, or transfer of your personal data, you may have the legal right to withdraw your consent under certain circumstances. To withdraw your consent, if applicable, contact us at legal@thefordygroup.com

Changes to This Privacy Notice

We reserve the right to update this Privacy Notice at any time, and we will provide you with a new Privacy Notice when we make any updates. If we would like to use your previously collected personal data for different purposes than those we notified you about at the time of collection, we will provide you with notice and, where required by law, seek your consent, before using your personal data for a new or unrelated purpose. We may process your personal data without your knowledge or consent where required by applicable law or regulation.

Contact Us

If you have any questions about our processing of your personal data or would like to make an access or other request, please contact us at: legal@thefordygroup.com

If you are unsatisfied with our response to any issues that you raise, you have the right to make a complaint with the data protection authority in your jurisdiction.

Candidate Privacy Policy

Scope and Overview

The Fordy Group Ltd. is committed to protecting the privacy and security of your personal data. This Privacy Notice describes how The Fordy Group and its subsidiaries, affiliates, and related entities (collectively, “The Fordy Group,” “we,” or “us”) collect and process personal data about you as a candidate or prospective candidate for employment with the clients or prospective clients of The Fordy Group. This Privacy Notice applies to current, past and prospective candidates. This privacy notice applies to data subjects located in in all jurisdictions and territories where they are based.

This Privacy Notice describes the categories of personal data that we collect, how we use your personal data, how we secure your personal data, when we may disclose your personal data to third parties, and when we may transfer your personal data outside of your home jurisdiction. This Privacy Notice also describes your rights regarding the personal data that we hold about you including how you can access, correct, and request erasure of your personal data.

We will only process your personal data in accordance with this Privacy Notice unless otherwise required by applicable law. We take steps to ensure that the personal data that we collect about you is adequate, relevant, not excessive, and processed for limited purposes.

Collection of Personal Data

For the purposes of this Privacy Notice, personal data means any information about an identifiable individual. Personal data excludes anonymous or de-identified data that is not associated with a particular individual. To carry out our activities and obligations as a recruiter, we may collect, store, and process the following categories of personal data, some of which we require to administer the services and relationship with you and our clients:

Personal contact details such as name, title, addresses, telephone numbers, and personal email addresses
Date of birth
Gender
Marital and dependent status, only when needed to administer benefits such as health insurance or pension benefits
Beneficiary and emergency contact information
Government identification numbers such as social insurance or other national insurance number, driver’s license number, or other identification card number
Bank account details and payroll information
Wage and benefit information
Compensation history
Performance information
Insurance enrollment information
Start date and job title for current and past employment
Location of employment
Education and training
Employment records (including professional memberships, references, work history, and proof of work eligibility)
Photograph
Other personal details included in a CV, resume, application form or cover letter or that you otherwise voluntarily provide to us
Voice recordings e.g. telephone calls
Video recordings e.g. meetings

The personal data listed in this notice is information we may obtain in the ordinary course of our business relationship as a recruiter.

We will collect the majority of the personal data that we process directly from you or from third parties may provide your personal data to us, such as referral bodies, social media (such as LinkedIn), public organisation information (such as websites) and data service providers.

Use of Personal Data

We only process your personal data where applicable law permits or requires it, including where the processing is necessary for the performance of our contractual obligations with clients and prospective clients, to promote you to our clients and prospective clients for employment, engagement, hiring, to offer our services to clients and prospective clients, to demonstrate the services that were performed or offered to be performed, where the processing is necessary to comply with a legal obligation that applies to us as a recruitment service provider, and for our legitimate interests or the legitimate interests of third parties.

We may process your personal data for the following legitimate business purposes and for the purposes of performing the employment contract with you:

To offer legitimate business services to you, our clients and prospective clients
Business management and planning
Accounting, invoicing and auditing
Gathering evidence for claims as may be necessary
Complying with applicable law
Education, training, and development requirements

We will only process your personal data for the purposes we collected it for or for compatible purposes. If we need to process your personal data for an incompatible purpose, we will provide notice to you and, if required by law, seek your consent. We may process your personal data without your knowledge or consent where required by applicable law or regulation.

We may also process your personal data for our own legitimate interests, including for the following purposes:

To prevent fraud
To ensure network and information security, including preventing unauthorized access to our computer and electronic communications systems and preventing malicious software distribution
To support internal administration with our affiliated entities
To conduct data analytics analyses to review and better understand client retention and attrition rates and feedback

You will not be subject to decisions based on automated data processing without your prior consent.

Collection and Use of Special Categories of Personal Data

The following special categories of personal data are considered sensitive under the laws of your jurisdiction and may receive special protection:

Racial or ethnic origin
Political opinions
Religious or philosophical beliefs
Trade union membership
Genetic data
Biometric data
Data concerning health
Data concerning sex life or sexual orientation

Data relating to criminal convictions and offences may also receive special protection under the laws of your jurisdiction.

We do not intend to process special categories of data but some information may be processed incidentally in the ordinary course of business conversations and dealings:

Physical or mental health information or disability status
Race or ethnic origin, religious affiliation, health information and sexual orientation

Where we have a legitimate need to process special categories of personal data for purposes not identified above, we will only do so only after providing you with notice and, if required by law, obtaining your prior, express consent.

We will always treat special categories of personal data as confidential and we will only share such data internally where there is a specific and legitimate purpose for sharing the data. As set out below, we have implemented appropriate physical, technical, and organisational security measures designed to secure your personal data against accidental loss and unauthorised access, use, alteration, or disclosure.

We will only retain special categories of personal data for as long as necessary to fulfill the purposes we collected it for, as required to satisfy any legal, accounting, or reporting obligations, or as necessary to resolve disputes.

Data Sharing

We will only disclose your personal data to third parties where required by law or to our clients and prospective clients, our group entities, employees, contractors, designated agents, or third-party service providers who require such information to assist us with administering the relationship with you and our clients and prospective clients, including third-party service providers who provide services to us or on our behalf. Third-party service providers may include, but are not limited to, CRM processors, administration providers, and data storage or hosting providers. These third-party service providers may be located outside of our or your home jurisdiction.

We require all our third-party service providers, by written contract, to implement appropriate security measures to protect your personal data consistent with our policies and any data security obligations applicable to us as your employer. We do not permit our third-party service providers who process your personal data on our behalf to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes in accordance with our instructions.

We may also disclose your personal data for the following additional purposes where permitted or required by applicable law:

To other members of our group of companies (including outside of your home jurisdiction) for the purposes set out in this Privacy Notice and as necessary to perform our employment contract with you.
As part of our regular reporting activities to other members of our group of companies.
To comply with legal obligations or valid legal processes such as search warrants, subpoenas, or court orders. When we disclose your personal data to comply with a legal obligation or legal process, we will take reasonable steps to ensure that we only disclose the minimum personal data necessary for the specific purpose and circumstances.
To protect the rights and property of The Fordy Group.
During emergency situations or where necessary to protect the safety of persons.
Where the personal data is publicly available.
If a business transfer or change in ownership occurs and the disclosure is necessary to complete the transaction. In these circumstances, we will limit data sharing to what is absolutely necessary, and we will anonymize the data where possible.
For additional purposes with your consent where such consent is required by law.

Cross-Border Data Transfers

Where permitted by applicable law, we may transfer the personal data we collect about you to the United States and other jurisdictions that may not be deemed to provide the same level of data protection as your home country, as necessary for the purposes set out in this Privacy Notice. If you are located in the EU, we have implemented appropriate data protection mechanisms to secure the transfer of your personal data to the United States and other jurisdictions.

Data Security

We have implemented appropriate physical, technical, and organizational security measures designed to secure your personal data against accidental loss and unauthorised access, use, alteration, or disclosure. In addition, we limit access to personal data to those employees, agents, contractors, and other third parties that have a legitimate business need for such access.

Data Retention

Except as otherwise permitted or required by applicable law or regulation, we will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, as required to satisfy any legal, accounting, or reporting obligations, or as necessary to resolve disputes. To determine the appropriate retention period for personal data, we consider applicable legal requirements, the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes we process your personal data for, and whether we can achieve those purposes through other means.

Under some circumstances we may anonymise your personal data so that it can no longer be associated with you. We reserve the right to use such anonymous and de-identified data for any legitimate business purpose without further notice to you or your consent.

Rights of Access, Correction, Erasure, and Objection

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes. By law you may have the right to request access to, correct, and erase the personal data that we hold about you, or object to the processing of your personal data under certain circumstances. You may also have the right to request that we transfer your personal data to another party. If you want to review, verify, correct, or request erasure of your personal data, object to the processing of your personal data, or request that we transfer a copy of your personal data to another party, please contact us at legal@thefordygroup.com. Any such communication must be in writing.

We may request specific information from you to help us confirm your identity and your right to access, and to provide you with the personal data that we hold about you or make your requested changes. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal data that we hold about you, or we may have destroyed, erased, or made your personal data anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal data, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

Right to Withdraw Consent

Where you have provided your consent to the collection, processing, or transfer of your personal data, you may have the legal right to withdraw your consent under certain circumstances. To withdraw your consent, if applicable, contact us at legal@thefordygroup.com

Changes to This Privacy Notice

We reserve the right to update this Privacy Notice at any time, and we will provide you with a new Privacy Notice when we make any updates. If we would like to use your previously collected personal data for different purposes than those we notified you about at the time of collection, we will provide you with notice and, where required by law, seek your consent, before using your personal data for a new or unrelated purpose. We may process your personal data without your knowledge or consent where required by applicable law or regulation.

Contact Us

If you have any questions about our processing of your personal data or would like to make an access or other request, please contact us at: legal@thefordygroup.com

If you are unsatisfied with our response to any issues that you raise, you have the right to make a complaint with the data protection authority in your jurisdiction.