Kirkwood Training & Skills Limited is registered as a data controller in the United Kingdom for the purposes of the Data Protection Act 2018. Our website is designed to protect the privacy of all users. We ensure that the data you supply to us is processed fairly and lawfully, and with skill and care. This Data Protection Policy governs our processing of all personal data provided to us, in all forms. By registering your details with us and using our website, you consent to us collecting and processing personal data supplied by you and disclosing this information to prospective employers and clients in connection with the recruitment process.
This Privacy Notice provides you with clear information as to how we process your personal data. We are obliged to use your information in line with all applicable laws. We do so in a manner that is fair by using your information in a way that you would reasonably expect when providing our work-finding services or recruiting personnel for you and being transparent so that you know how it will be used.
This Privacy Notice sets out the types of personal data that we collect about you, how and why we use it, how long we will keep it for, when why and who we will share it will, the legal basis for us using your personal data and your rights in relation to us storing and processing your personal data. It also explains how we may contact you and how you can contact us.
Part of the recruitment process will involve sharing your personal data with our clients (independent data controllers) who have potential work opportunities that may be suitable for you. These third parties will have their own privacy policies and will also need to comply with all applicable laws – we encourage you to contact them directly if you have any concerns or questions about your data.
Who we are
Kirkwood Training & Skills Limited (registration number 13324840) is a training and skills company. We provide bespoke training solutions and business transformation consultants to organisations across the UK, striving to address the needs of both corporate organisations and the professionals who make up their teams.
We are registered as a data controller with the ICO in the United Kingdom for the purposes of the Data Protection legislation and General Data Protection Regulation (GDPR). Our registered office address is 28 The Stow, Harlow, Essex, CM20 3AN and you can contact us at email@example.com. if you have any queries relating to data protection.
Legal basis for processing your data
For prospective candidates, contractors, referees and clients, our processing is necessary for our legitimate interests in that we need the information to be able to assess suitability for potential roles, to find potential candidates and to contact clients and referees.
We do not consider our legitimate interests to be overridden by your interests or fundamental rights and freedoms. We take into consideration the reasonable expectations of individuals who are actively applying for jobs or making their personal information publicly accessible on professional networking sites.
If you are submitted as a candidate or requested for interview, then this may involve the processing of more detailed personal data including sensitive data such as health information or any unspent criminal convictions that you or others provide about you. We will ask for your consent before undertaking such processing if we are required to do so.
For clients, we may also rely on our processing being necessary to perform a contract for you if one is in place, for example in contacting you.
What information will we collect about you?
We collect, and process personal data only as far as is necessary to facilitate the training process and registration. The information we collect may include your name, email address, telephone number.
In general, we will not ask you about sensitive personal data but there may be times that it is necessary for information to be disclosed to us and for us to share that with your trainer. We will only share the information where you have provided your explicit consent.
Where does the information we collect about you come from?
The data we collect about you is obtained from the following sources:
Directly from you. This may be via our registration process, information requests and applications via our website.
An agent or third party acting on your behalf. This may be where you are being referred to us by another partner organisation.
You may be recommended by a friend, former employer or colleague.
How will we use the information collected about you?
We will use your information in such ways to facilitate the training sessions and to provide you with additional training materials and information.
How and when will we contact you?
We may contact you by phone or email.
Some examples of when we will contact you are:
Upon receipt of a referral or your personal data, it will be reviewed to determine whether we are likely to be able to provide a place for you on one of our training courses.
In relation to any correspondence, we receive from you.
To update you on any material or location changes on your fourth coming course with us.
Who will we share your information with?
We will process your information within the company and never disclose your information to third party organisations with prior consent.
Will we transfer your data outside the EEA?
Kirkwood Training & Skills Limited is a UK based company and our back-up systems are stored in the EEA. We will not transfer your data out of the EEA. However, if we do need to make transfers to countries outside the EEA, we will ensure the appropriate safeguards are in place.
How long will we keep your personal information?
Kirkwood Training & Skills will only retain information for as long as necessary for the relevant activity. This may be determined by legislation or a decision as to what we consider necessary for the business based on several factors.
Your data will be retained for 6 to 12 months from when it was added to our database or from when you were last contacted. You can request to have your record deleted.
Can you find out what data we hold about you?
You have the right to be informed and access a copy of the information comprised in your personal data. If any of the data we hold is inaccurate, you have the right to rectify it. You can contact us at firstname.lastname@example.org or contact us directly to update your data.
You can make a request to find out what personal data we hold about you. You may exercise this right by making a written subject access request (SAR) to email@example.com. We require you to provide us with proof of your identity and answer security questions before processing your request.
We usually act on such requests and provide information free of charge, but may charge a reasonable fee to cover our administrative costs of providing the information for:
baseless or excessive/repeated requests, or further copies of the same information.
Alternatively, we may be entitled to refuse to act on the request.
Please consider your request responsibly before submitting it. We will respond as soon as we can. Generally, this will be within 2 weeks from when we receive your request but, if the request is going to take longer to deal with, we will let you know.
Do you have the right to data portability?
The GDPR introduces a new right to data portability. This will enable individuals to both receive and transmit the personal data they have provided to a data controller in a structured, commonly used and machine-readable format to another data controller.
The right to data portability only applies to the following:
- personal data provided by the individual;
- personal data that is processed with the individual’s consent or based on a contract (excluding the other legal bases); and
- when processing is carried out through automated means.
As we rely on the legal basis of legitimate interests, this right will not apply to the data we hold about you. In addition, references obtained directly from third parties about you will not be subject to the right of data portability.
Cookies are small text files used to help websites work more efficiently. They provide information to the owners of the site as long as you give permission for these files to be places on your hard drive. We use the following cookies:
Strictly Necessary Cookies
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.
You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites.
They do not store directly personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Most web browsers will allow the user to have some control over cookies through the browser settings. If you want more information on cookies, visit www.allaboutcookies.org
If you wish to opt out of being tracked by Google analytics, visit http://tools.google.com/dlpage/gaoptout
Links to other websites
Our website may contain links to other websites, please note that once you have left our site and clicked on these links, we cannot be held responsible for the protection and privacy of any information which you provide whilst on these sites.
Changes to this privacy notice
We reserve the right to change our Privacy Notice at any time. Changes to our Privacy Notice will be displayed on our website.
If you have any issues or concerns, then we ask that in the first instance you set this out in writing and send this to firstname.lastname@example.org.
If we are unable to satisfactorily deal with your complaint you can complain to the ICO which is the UK supervisory authority. You have the right to claim compensation for damages caused by a breach of data protection legislation.