Privacy Policy

The purpose of this document is to set out the privacy entitlements of Data Subjects, as defined in the UK GDPR and Data Protection Act 2018 (GDPR), of living persons. Privacy can only apply to information that is not already in the public domain, and GDPR only applies to such personal data.

The UK GDPR and Data Protection Act 2018 (GDPR) is a Regulation that sets out the data entitlements of data subjects and the obligations of those who process the personal data of data subjects. GDPR seeks to protect and enhance the rights of data subjects. These rights cover the safeguarding of personal data, protection against the unlawful processing of personal data, and the unrestricted movement of personal data.

We have identified our data subjects as being:

Our candidates – permanent, temporary agency workers, contractors
The individuals with whom we have contact at our client, prospective client, and supplier businesses
Our own employees – our own employee data processing information is set out in their employee handbook

Legal Basis for Processing Any Personal Data

We rely upon the following legal bases for data collection:

Contract:

Candidates: Information is required to perform the contract of “Employment agent” on behalf of our candidates with potential employers. The basis of data gathering in that instance is a contractual requirement. This will include identification information such as, but not limited to, name, address, date of birth, education/qualifications, and reference checks.
Clients/Suppliers: We process data pursuant to business-to-business transactions, but where required, we rely on the lawful basis of necessity for the performance of the contract for processing personal data within this relationship.

Statutory/Legal Obligation:
Information is required to perform our statutory obligations such as tax returns and compliance with employment permit legislation. This includes PPS numbers and, where relevant, evidence of entitlement to work. This applies to temporary agency workers and contractors.

Legitimate Interest:

Clients: We use personal data, including email addresses and contact telephone numbers, to keep our clients and potential clients informed about careers and market-related information. We consider this a legitimate interest to maintain our market presence.
Candidates: Information is processed in the legitimate interests of Brightcrew as an employment agency, balancing your data protection rights. This includes providing access to salary surveys, marketplace analysis, and career opportunities.

Consent:
On occasion, we may rely on consent to collect and process data. However, given the nature of the agent-candidate and agent-client relationship, consent is not the primary ground for data processing and will only be used in rare circumstances.

Personal Data
This Privacy Statement sets out how Brightcrew uses and processes any information that you provide. We respect your privacy and are committed to protecting your personal information. This Privacy Statement explains how we collect, transfer, process, use, and disclose your data and sets out our security practices.

Collection of Personal Data

Candidates:

We collect personal data you provide to us, which may include:

Name
Address
Email address(es)
Phone number(s)
Education
Employment history
CV and any other information required for job placement services

We may source contact details through social media and reach out to you there. Data is collected and processed as part of Brightcrew’s recruitment services. Candidates who submit details for advertised positions or register with us are screened for available opportunities.

Clients/Suppliers:

We collect personally identifiable information (DATA) provided directly by the contact or through public sources, including social media.

Use of Your Personal Information

Candidates:
Brightcrew collects and uses all DATA you provide to deliver job-seeking or related services. Your information will only be disclosed to prospective employers at your direction.

Clients/Suppliers:
Brightcrew collects and uses DATA in line with recruitment operations, including contacting clients about potential candidates, scheduling interviews, and facilitating payment processes.

Security of Your Personal Information
Brightcrew uses security measures to protect user privacy, including technological and physical safeguards.

Links to Other Websites
Brightcrew may include links to third-party sites. We recommend reviewing their privacy policies.

How We Use Cookies
Our website uses cookies to distinguish users and collect general internet usage data. Cookies do not identify personal details.

Data Retention
We process personal data during the contract term and retain it as needed for legal obligations. Personal data not needed will be deleted after retention periods expire.

ACCESS TO INFORMATION AND UPDATING, VERIFYING, DELETING AND RETENTION OF PERSONAL DATA

Subject to other applicable legal requirements, we intend to hold your personal data for 5 years from the date you have volunteer your DATA to us to use it on your behalf. This retention period is based on our experience that, having engaged with us on employment options, individuals are open to considering new opportunities within that timeframe. Each individual has the right to withdraw their consent and have their personal information erased at any time.

Your Rights

As a data subject, you have a number of rights. You can:

access and obtain a copy of your data on request;
require us to change incorrect or incomplete data;
require us to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing;
object to the processing of your data where we are relying on our legitimate interests as the legal ground for processing; and
ask us to stop processing data for a period if data is inaccurate or there is a dispute about whether or not your interests override our legitimate grounds for processing data.
If you would like to exercise any of these rights, please contact us at hello@mybrightcrew.com
If you believe that we have not complied with your data protection rights, you can complain to the Information Commissioner.

What if you do not provide personal data?

You are under no statutory or contractual obligation to provide data to us during the recruitment process. However, if you do not provide the information, we may not be able to process your application properly or at all.

Automated decision-making

Recruitment processes are not based solely on automated decision-making.

CHANGES TO THIS PRIVACY STATEMENT

Our Privacy Statement may change from time to time and changes to the statement will be posted on this page. Please check back frequently to see any updates or changes to our privacy policy. If you do not agree to these changes, please do not continue to use this Website to submit personal information.