Compliance UK

This is the privacy notice of Compliance UK. In this document, "we", "our", or "us" refer to Compliance UK. “you” or “your” refers to our client or the client’s job applicant being screened.

Our office is at 59 West Grove, Hull, HU4 6RQ.

1. This is a notice to inform you of our policy about all information that we process on your behalf. It sets out the conditions under which we may process any information that we collect from you, or that you provide to us. In the context of the law and this notice, “process” means collect, store, transfer, use or otherwise act on information.
2. All information received will be treated in the strictest confidence, be used solely for the purposes of security screening to the current revision of BS 7858 and, when processed, will be distributed only to the client requesting the service (Data Administrator). Once confirmation of receipt has been obtained from the client, all data relating to the individual being screened (Data Subject), will be deleted by Compliance UK (Data Processor).
3. 3. We take seriously the protection of your privacy and confidentiality. We understand that all clients and their job applicants are entitled to know that their personal data will not be used for any purpose unintended by them and will not accidentally fall into the hands of an unrelated third party.
4. 4. We undertake to preserve the confidentiality of all information you provide to us, and hope that you reciprocate.
5. 5. Our policy complies with UK law accordingly implemented, including that required by the EU General Data Protection Regulation (GDPR).
6. 6. The law requires us to tell you about your rights and our obligations to you in regard to the processing and control of your personal data. We do this now, by requesting that you read the information provided at www.knowyourprivacyrights.org
7. Sharing your data

   We will only share your personal data with a 3rd party if we have your consent to do so, if it is necessary to fulfil contractual obligations to you or if we are obliged to do so by law.

   Below are the data processors we use, or who are involved during the screening process -
   
   TransUnion – When we conduct a Consumer Information search for you, we use TransUnion (formally Callcredit). We will send them your name, date of birth and address history. The information they return will be held by us and shared with our client.
   
   Department of Work & Pensions – We may contact the DWP when there are gaps in employment history due to periods of unemployment.
   
   National Security Inspectorate / SSAIB – all clients are either NSI or SSAIB members and consequently, are audite by them on a regular basis. This audit will include verification that the security screening process is being undertaken in accordance with British Standard BS 7858 – "Screening of Individuals Working in a Secure Environment - Code of Practice” and screening packs may be inspected by NSI / SSAIB during that process.
   
   HM Treasury's Consolidated List of Financial Sanctions Targets – we cross-reference the individual's name with this list to verify the applicant does not appear on any fraud databases or watchlists.
   
   Previous Employers – verification of employment periods going back 5 years (or attendance dates at school or further education establishments if they fall within that period).
   
   All requests for information from previous employers will be accompanied by a Form of Authority signed and dated by the applicant allowing Compliance UK to approach these data processors.

   Criminality checks are not undertaken by Compliance UK. They are requested by the client directly to their local Police Authority using the Appendix C application in the National Police Chief’s Council (NPCC) Policy Document.

8. Encryption of data sent between us and our client.
   

   We use Secure Sockets Layer (SSL) certificates to verify our identity to your browser and to encrypt any data you give us.

   Whenever information is transferred between us, you can check that it is done so using SSL by looking for a closed padlock symbol or other trust mark in your browser’s URL bar or toolbar.

   Screening packs, when completed, are emailed to the named client contact and are password protected.

9. How you can complain
   

   a) If you are not happy with our privacy policy or if have any complaint, then you should tell us by email. Our address is alan@compliance-uk.co.uk
   b) If a dispute is not settled, then we hope you will agree to attempt to resolve it by engaging in good faith with us in a process of mediation or arbitration
   c) If you are in any way dissatisfied about how we process your personal information, you have a right to lodge a complaint with the Information Commissioner's Office. This can be done at https://ico.org.uk/concerns/

10. Retention period for personal data
    

    We keep your personal information only for as long as the screening process takes. BS 7858 states that this process should be concluded within 12 weeks of commencing provisional employment. Once concluded and sent to the client (and confirmation of receipt received) all personal information relating to the applicant will be deleted by us.

11. Other Websites
    Our website may contain links to other websites that are outside our control and are not covered by this Privacy Policy. If you access other sites using the links provided, the operators of these sites may collect information from you that will be used by them in accordance with their privacy policy, which may differ from ours.
12. Use of Cookies
    A cookie is a small piece of information sent by a web server to a web browser, which enables the server to collect information from the browser. The Compliance UK website does not create cookies. Consequently, no information is retrieved in this fashion.
13. Compliance with the law
    Our privacy policy has been compiled so as to comply with the law of every country or legal jurisdiction in which we aim to do business. If you think it fails to satisfy the law of your jurisdiction, we should like to hear from you. However, ultimately it is your choice as to whether you wish to use our services.
14. Review of this privacy policy
    

    We may update this privacy notice from time to time as necessary.

    If you have any question regarding our privacy policy, please contact us.

    Last reviewed: January 2020.
    Authorised: A. Consadine, Sole Trader.