Privacy Policy.

Foodchain Recruitment’s key priorities are to help businesses recruit the right people into their organisation and to support people build a successful and rewarding career . We place great importance on establishing a lasting relationship with everyone we work with, Long term relationships are based on trust. Part of our commitment to creating that trust is that we will look after and manage your personal data securely and transparently.

At Foodchain Recruitment Ltd we respect your personal data. This Privacy Policy explains how we will use your personal data after you have sent us your data. Our contact details : Our Data Protection Officer can be contacted via the email address: dpo@foodchainrecruitment.com.

What data do we collect about you and how do we use that data?

At Foodchain Recruitment, we value each and every person we work with. With that in mind, we want you to know that we take the privacy of your data very seriously. We need to collect and process your data in order to build a relationship with you and assist you in finding people to work for your business or as a candidate finding you a new job. That’s what we’re here for.

As a client, we start by collecting your name, address, phone, and email. These may be business or private or both. We also collect your company / brand information should we require it to help promote your brand to people looking for a new job. We keep data based on the roles we recruit for you.

As a candidate, there are two ways that we could have your data.

Firstly, if you sent it to us (eg emailed us your CV or messaged via LinkedIn, applied for a job through us on a job board website or uploaded your CV to our website). Secondly, we found your data by searching a job board’s CV directory as we thought we could help in your search for work. If you’re not sure how we first received your data, please email dpo@foodchainrecruitment.com and we will let you know.

We also like to learn more about you in order to understand better how we can work together. To further this aim, we may view your Facebook, LinkedIn and Twitter profiles.

The data we have about you is entered into our systems to avoid having stacks of paperwork.

What data do we require if you secure a new job offer through us?

We may be required to see proof of your right to work in the UK, which is normally done by taking a copy of your passport, birth certificate or other suitable document. Most of these contain information about your country of origin, which could be considered “Special Category” data under GDPR.

Rest assured, we do not do anything with this information except attach a copy to your file. On some occasions, we may be asked to send this data to the employer you are due to be joining. We confirm this with you before sending.

We take affirmative action with your consent to hold and process this information, however if you feel this is not the case then please contact us. We will not share this info with any third-party companies unless you explicitly ask us to.

What is our legal basis for processing your personal data?

We need a legal basis in order to process your personal data. Most of our processing is done because we have a legitimate interest in doing so.

We will process the following personal data because we believe that we have a legitimate interest in doing so:

- your personal data provided when you give us your business card or email to one of our employees or inboxes. Our legitimate interest is furthering our business relationship.

- data from your social media pages such as Twitter or LinkedIn. Again, our legitimate interest is in furthering our business relationship.

You have the right to object to our processing your data using legitimate interest. Please speak to us if you have any concerns.

Do we use any automated decision making?

We do not use any automated decision making.

Who do we share your personal data with?

We share your data with one or more of the following:

1. Our software providers, (e.g. our CRM provider or external assessment software if required)

2. Our professional advisors (e.g. legal advisors, accountants etc.)

3. We share candidate details to our clients (but only after speaking to candidates about a specific role)

4. We share brand's information to people interested in looking for new job opportunities or wanting to learn more about a company.

4. Professional bodies (if we need to conduct qualification checks)

Do we transfer your personal data outside of the EU or EEA?

We do not transfer your personal data outside of the EU. If we discuss a role with you which requires us to send your data outside the EU then we will speak to you in advance.

How long do we keep your data for?

For a candidate, we will keep your data for three years from the last meaningful contact. We define the date of “last meaningful contact” as: the date we received an updated CV from you, the date we last arranged an interview for you or the date we last spoke to you on the phone/in person.

For a client, we will hold your data for as long as you remain a contact for our mutual or future business, plus three years. If you are no longer the most appropriate contact then please let us know.

Your rights as a data subject:

The GDPR gives you rights as a data subject. You have:

1. The right to request from us access to your personal data;

2. The right to request from us rectification of your personal data;

3. The right to request from us erasure of your personal data;

4. The right to request from us restriction of processing your personal data;

5. The right to object to our processing of your personal data;

6. The right of data portability;

7. If we are processing your personal data on the basis of your consent, you have the right to withdraw your consent at any time. To do so please contact dpo@foodchainrecruitment.com. This does not affect the lawfulness of processing based on your consent before you withdrew it; and

8. You have the right to complain to the ICO if you feel that we have been unable to resolve your query.

More information on your rights can be found in Chapter 3 of the General Data Protection Regulation.