All organisations that process personal data are required to comply with data protection legislation. This includes in particular the Data Protection Act 1998 (or its successor) and the EU General Data Protection Regulation (together the ‘Data Protection Laws’). The Data Protection Laws give individuals certain rights over their personal data whilst imposing certain obligations on the organisations that process their data.
As a recruitment business 360 North collects and processes both personal data and sensitive personal data. It is required to do so to comply with other legislation. It is also required to keep this data for different periods depending on the nature of the data.
For the purpose of the General Data Protection Regulation (Regulation (EU) 2016/679) (the GDPR), the data controller is:
360 North Ltd
Ivy Business Centre,
What do 360 North do?
360 North provides recruitment related services to candidates and clients and we will, therefore, use your personal data in order for us to be able to deliver these services to you whether you be a candidate, client or website user.
What we collect
We may collect the following information for individuals:
- Current job title and potential salary earnings
- Contact information including email address and telephone number
- Referee details
- Your right to work status
- Demographic information such as postcode, preferences and interests
- Information on your interests and needs regarding future job opportunities
- Any additional information you choose to disclose to us
A lot of the above data will only be collected as part of a pre-screening call with 360 North. Upon initial contact, we will process the data that you have made available on your CV or third-party profiles such as profiles filled out on a job board or networking site.
Why we collect certain information
To enable us to support you in your search for employment we need to know certain information. This allows us to present the best opportunities whilst saving you time by avoiding you having to wade through information about irrelevant jobs and services.
It is completely at the individuals’ discretion what information they wish to provide us with. However, the more accurate information we can gather about an individual will enable us to provide a more in-depth search and allow us to be able to put candidates forward for job opportunities that match their criteria.
You can share your details with us in many ways and are likely to include:
- Entering your details onto our website via a “contact us” form or via an application form as part of a registration process
- Emailing your CV to us directly
- Leaving a hard copy of your CV with us at an event we are attending
- Applying for a job advertised on our website
Data we receive from other sources
- Where you apply for a job that we have advertised via a third party such as an online job board
- Via an online job board CV Database that you have signed up to and we have access to in line with the terms agreed by both parties
- Your referees may share personal information about you with us
- Our clients may share personal information about you with us
- We will most likely also process your data when searching for Candidates through third-party applications such as job boards and social networking sites such as LinkedIn
- If you are referred to us
Where we keep your information and our security
We will do what we reasonably can to protect the personal data we hold from misuse, loss or unauthorised access.
We are likely to keep your information that you have provided us with on our electronic database. We access this database daily for our day to day business activities from a secure platform which is password protected and has strict user restrictions.
Senior management ensures that data records are kept confidential and secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect verbally and electronically and all of our employees are aware of this through our company policies.
If you suspect any misuse, loss or unauthorised access of your personal data please let us know immediately.
Our main suppliers
Microdec – Our CRM Database provider. We use Profile RPM 10.6. This is where the main bulk of your data is stored for recruitment purposes only. They also deal with our system support for the software and only have access to our servers when fixing a problem with the software or updating the system.
Ivy Business Centre (Manchester) – Is where 360 North is based. They are responsible for the management and services provided for our office space. We use minimal hard copy information and operate a clean desk policy in which all information or sensitive data is locked away once we leave the office.
Data retention period:
We aim to keep your data for as long as required, we do regular checks with our candidates to find out if the data we hold on them is correct and if they still would like to be kept on our system or if they still wish to be contacted regarding any job opportunities we have.
We value our customers and their privacy and we will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so.
How we share your information – Legitimate Interests
Article 6-1-f of the GDPR states that we can process your data where “processing is necessary for the purposes of the legitimate interests pursued by the controller [360 North] or by a third party except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.”
As already established, 360 North is a company that provides recruitment services to candidates and clients.
From a candidate perspective where you as an individual apply directly to a role advertised by 360 North on behalf of a client, send your CV to specific 360 North consultants, or make your CV or profile available to view online or download from a job board or professional networking site, you’re happy for us to collect and process your data in order to provide you with our recruitment services and provide you similar jobs suitable to you in line with our expectations.
Where you have made your personal data available within these circumstances we will also provide you with updates on similar positions on email based around a soft opt-in that is you have made your data available to us for the purposes of recruitment services including receiving updates about job opportunities that could be suitable to you.
You have the right to object to us processing your data on this basis and you can do so by contacting us directly.
From a client perspective, we will think it is reasonable to collect data relating to individual contacts of an organisation as well as keeping records of conversations (email & phone calls), meetings, jobs registered and placed with you. As a business that provides recruitment services to clients and candidates, we deem it legitimate to collect this information in order to fulfil our requirements as a profit-making business.
Controlling your personal information
- you have the right to request what information we hold on you
- you have the right to ask for any information we hold on you to be updated or deleted
If you believe that any information we are holding on you is incorrect or incomplete or you would like it deleted, please contact us either verbally or in writing.