Company Name: IDEX Consulting Ltd (‘the Company’)
Company Contact details:
IDEX Consulting Ltd
The Colmore Building, Colmore Circus Queensway
Document DP5A: Privacy Notice
Topic: Data protection
Date: May 2023 Version: 6.0
For the purpose of applicable data protection legislation (including but not limited to the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR"), the company responsible for your personal data can be found here: The Colmore Building
The Data Controller is IDEX Consulting Limited. It is Registered in the UK Company Number 05663021
The Colmore Building, Colmore Circus Queensway, Birmingham, West Midlands, B4 6AT
The Data Controller’s representative is Richard Martin
You can contact them at GDPR@idexconsulting.com
You can call them on 0333 700 4339
The Company is a recruitment business which provides work-finding services to its clients and work-seekers. The Company must process personal data (including sensitive personal data) so that it can provide these services – in doing so, the Company acts as a data controller.
You may give your personal details to the Company directly, such as on an application or registration form or via our website, or we may collect them from another source such as a job board. The Company's legal basis for processing your personal data, is for the purposes of providing you with work-finding services and/or information relating to roles relevant to you, whereby we will only use your personal data in accordance with the terms of the following statement.
1. Collection and use of personal data
IDEX Consulting collects personal data about you to help in the recruitment process. This data consists of information such as your name, address, e-mail address, telephone number, career history and education plus, where relevant, your nationality and basis for working in the UK as required by law. Where necessary we will also collect a copy of your driving licence and/or passport/identity card; Financial information (where we need to carry out financial background checks); Diversity & Inclusion information (When required by certain clients) and any other personal information you choose to tell us.
We also collect information to provide us with a better understanding of the users of our website as a group, but which does not contain personally identifiable information.
Personal data will be stored, processed, used and disclosed by us in the following ways:
Provide our recruitment services to you, whether you are a client, candidate or a user of our website
Provide our job seeking services to you, as a user of www.insurancejobs.co.uk
Enable you to submit your CV, to apply for specific jobs or update your employment preferences
To maintain our business relationship, where you are a user of our website, a client or candidate
Provide information on suitable job opportunities to people who register with us, to match your profile with suitable job vacancies and to assist us in finding a position that is most suitable for you
Internal reporting and Analytics
To fulfil contractual obligations with our clients
Share market insights, intelligence and information directly to your personal email address
We will also share information about relevant services that may be of interest to you. You will always be able to unsubscribe from such marketing at any time
There are two main ways in which we collect your personal data:
Directly from you; and
From third parties including job boards.
a. Purpose of processing and legal basis
The Company will collect your personal data (which may include sensitive personal data) and will process your personal data for the purposes of providing you with work-finding services. The legal bases we rely upon to offer these services to you are:
Consent – The individual gives his or her consent to the processing of his or her data for a particular purpose
Legitimate interest – processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject
Contractual basis - processing is necessary in relation to a contract to which the individual has entered into or because the individual has asked for something to be done so they can enter into a contract
Necessary for the compliance of a legal obligation
b. Legitimate interest
Where the Company has relied on a legitimate interest to process your personal data our legitimate interests is/are as follows:
The company is required to process personal data in order to provide work-finding services to individuals
The company is required to process personal data in order to provide relevant marketing material / industry insight / intelligence to individuals
Our aim is to be responsible, relevant and secure when using your data. IDEX Consulting provides bespoke recruitment solutions as well as specific marketing relating to industry news and insight across of range of professional sectors. The main reason for using your personal details is to help you find employment or other work roles that might be suitable for you, or in the case of contacts, to ensure that the contractual arrangements between us can properly be implemented so that the relationship can run smoothly. The more information we have about you, your skillset and your ambitions, the more bespoke we can make our service.
c. Recipient/s of data
We will only share your personal information with 3rd parties in order to facilitate the recruitment process, for example, sharing contact details to arrange interviews or process offer paperwork / contracts pertaining to future employment opportunities.
d. Statutory/contractual requirement
Your personal data is not required as part of a statutory and/or contractual requirement, and/or a requirement necessary to enter into a contract.
The Company may transfer only the information you provide to us to countries outside the European Economic Area (‘EEA’) for the purposes of providing you with work-finding services. We will take steps to ensure adequate protections are in place to ensure the security of your information. The EEA comprises the EU member states plus Norway, Iceland and Liechtenstein.
2. Data retention
The Company will retain your personal data only for as long as is necessary to perform our duties. Different laws require us to keep different data for different periods of time.
The Conduct of Employment Agencies and Employment Businesses Regulations 2003, require us to keep work-seeker records for at least one year from (a) the date of their creation or (b) after the date on which we last provide you with work-finding services.
Where the Company has obtained the legal right to process your personal data, we will do so in line with our retention policy of 10 years. If we have not had meaningful contact with you upon expiry of that period, the Company will cease to process your personal data. In the case of a “Placed Candidate”, we will retain your data for a period of 8 years in order to ensure that you are not actively contacted about new opportunities and that the company does not breach it’s contract with the employing business.
We must also keep your payroll records, holiday pay, sick pay and pensions auto-enrolment records for as long as is legally required by HMRC and associated national minimum wage, social security and tax legislation.
3. Your rights
Please be aware that you have the following data protection rights:
The right to be informed about the personal data the Company processes on you;
The right of access to the personal data the Company processes on you;
The right to rectification of your personal data;
The right to erasure of your personal data in certain circumstances;
The right to restrict processing of your personal data;
The right to data portability in certain circumstances;
The right to object to the processing of your personal data that was based on a public or legitimate interest;
The right not to be subjected to automated decision making and profiling; and
The right to withdraw consent at any time.
You can exercise your right to erasure of any data held by IDEX at any time, by contacting GDPR@idexconsulting.com and we will action requests within 7 working days. This request can be declined if there is a legal requirement for the company hold certain data, at which point this will be communicated to you.
4. Online Data
A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about webpage traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
Our organisation utilises Force24’s marketing automation platform.
Force24 cookies are first party cookies and are enabled at the point of cookie acceptance on this website. The cookies are named below:
They allow us to understand our audience engagement thus allowing better optimisation of marketing activity.
f24_autoId – This is a temporary identifier on a local machine or phone browser that helps us track anonymous information to be later married up with f24_personid. If this is left anonymous it will be deleted after 6 months. Non-essential, first party, 10 years, persistent.
f24_personId – This is an ID generated per individual contact in the Force24 system to be able to track behaviour and form submissions into the Force24 system from outside sources per user. This is used for personalisation and ability to segment decisions for further communications. Non-essential, first party, 10 years, persistent.
The information stored by Force24 cookies remains anonymous until:
Our website is visited via clicking from an email or SMS message, sent via the Force24 platform and cookies are accepted on the website.
A user of the website completes a form containing email address from either our website or our Force24 landing pages.
The Force24 cookies will remain on a device for 10 years unless they are deleted.
We also use similar technologies including tracking pixels and link tracking to monitor your viewing activities
Device & browser type and open statistics
All emails have a tracking pixel (a tiny invisible image ) with a query string in the URL. Within the URL we have user details to identify who opened an email for statistical purposes.
All links within emails and SMS messages sent from the Force24 platform contain a unique tracking reference, this reference help us identify who clicked an email for statistical purposes.
5. Suppliers Data
We don't collect much data about Suppliers, we simply collect enough to ensure that our relationship runs smoothly. We'll collect the details for our contacts within your organisation, including names, telephone numbers, email addresses and bank details for payment purposes. We may also hold extra information that someone in your organisation has chosen to tell us.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question
Complaints or queries
If you wish to complain about this privacy notice or any of the procedures set out in it please contact: Richard Martin onGDPR@idexconsulting.com. You also have the right to raise concerns with Information Commissioner’s Office on 0303 123 1113 or at https://ico.org.uk/concerns/, or any other relevant supervisory authority should your personal data be processed outside of the UK, if you believe that your data protection rights have not been adhered to.