Privacy Policy.

B-Radical is a personal data controller in its own right. This means that B-Radical is responsible for deciding how it holds and uses personal information about you. You are being sent a copy of this privacy notice to ensure transparency and compliance with the UK General Data Protection Regulation (UK GDPR). As a personal data controller, B-Radical has a responsibility to protect the privacy rights of individuals whose personal data it collects, processes, and stores. By providing this privacy notice, B-Radical is fulfilling its obligation to inform individuals about how their personal data will be used, the purposes for which it will be used, and how long it will be retained. This notice also helps to build trust with individuals and demonstrates B-Radical's commitment to protecting their privacy rights. This document aims to make you aware of how and why your personal data will be used, namely for the purposes of the recruitment exercise, and how long it will usually be retained for. It provides you with certain information that must be provided under the UK General Data Protection Regulation (UK GDPR).

Data Protection Principles

Whenever we are processing your personal data, B-Radical will comply with data protection law and principles, which means that your data will be:

Used lawfully, fairly and in a transparent way;
Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes;
Relevant to the purposes we have told you about and limited only to those purposes;
Accurate and kept up to date;
Kept only as long as necessary for the purposes we have told you about; and
Kept securely.

The type of personal information we collect.

To carry out our core recruitment activities, we collect, store, and use personal data about you which may include:

Your name and title
Date of birth and/or age
Address and postcode including 5-year address history.
Gender
Dependants
Private and corporate e-mail address
phone number
Employment history
Education history
Financial personal data and compliance documentation including salary information.
References verifying your qualifications and experience.
Documents that verify your right to work in the United Kingdom
Curriculum vitae
Photographs
Employment details and preferences
Links to your professional profiles available in the public domain e.g. LinkedIn, Twitter, Facebook for Business or corporate website
Bank details

Some of the personal data we collect about you is considered as being sensitive personal data, which requires a higher level of protection. This may include:

Race or ethnicity
Religion
Sexual preferences
Cultural requirements
Alcohol and other drug use
Trade union membership
Disability or other illness, physical or mental health including any medical condition, health, and sickness records, including:
how your disability affects you at work
records relating to your leaving employment for reason of ill-health, injury, or disability; and
details of any absences (other than holidays) from work including time on statutory parental leave and sick leave
Criminal convictions/offending behaviour
Experience of homelessness
Experience of the care system
Experience in the armed forces
Your refugee status
Experience of domestic violence

How we collect your personal data

Most of the personal information we process is provided to us directly by you. However, we also receive personal data indirectly, including from the following sources:

Any relevant social media sites such as LinkedIn, Twitter, Facebook, Instagram, etc
Corporate websites
Job board websites
Online CV libraries
Your business card
Personal recommendations
Former or present employers
Background check agencies
Job Centre Plus
Disability consultants and assessors
Commissioners and funders
Statutory services including social workers, probation officers and personal assistants,
Educational establishments.
Third party referral and inclusion partners including charities and not for profit organisations.

How we use your information

if you are a supporter, we will primarily use the personal data that you provide to us to contact you about our work, fundraising and events.
if you are a candidate, we will primarily use your personal data to allow us to perform our contract with you to facilitate placing you with a partner organisation. However, we may also use your personal data to do the following:
Decide about your engagement with a partner organisation.
Make decisions or recommendations about tools and equipment that can enable you to do your job.
Check you are legally entitled to work in the UK.
Administer the contract for service that we have entered into with you.
Assess qualifications for a particular job or task with a partner organisation.
Make decisions about your continued engagement with us.
Make arrangements for the termination of our working relationship.
Education, training, and development requirements prior to your engagement with a partner organisation
Ascertain your fitness to work with a partner organisation.
Comply with our health and safety obligations.
Prevent fraud.
Administer the Radical Relief Fund
Reimburse out of pocket expenses.
Refer you to appropriate sources of support.
Report on the impact of our work

We may share this information with trusted third-party vendors:

Sharing personal data with third-party entities is a necessary part of running an organisation that provides recruitment services to people who may have diverse life experiences or protected characteristics under the law. Below are some examples of why we might share data with these parties, our legal basis for sharing the data, and where they will hold data:

Radical Recruit: As a recruitment agency, Radical Recruit may need access to personal data such as a candidate's name, address, and employment history to find suitable job opportunities. The legal basis for sharing this data is to fulfil the legitimate interests of both the job seeker and the recruiter. The data is likely to be held in their CRM system.

Talisman CRM: Talisman CRM provides customer relationship management services to organisations like ours. We may share personal data with them to manage our relationships with clients, donors, and volunteers. The legal basis for sharing this data is to fulfil our contractual obligations to Talisman CRM, who will hold the data in their CRM system.

Fluid IT: IT services providers like Fluid IT may have access to personal data to maintain and improve our technology systems, including hardware, software, and networks. The legal basis for sharing this data is to fulfil the legitimate interests of our organisation. Data will be held securely on their servers.

Shazamme and Word Press: Shazamme and Word Press are our website providers, and we may share personal data with them to manage and update our website. The legal basis for sharing this data is to fulfil the legitimate interests of our organisation. The data is likely to be held on their servers.

Funders and Commissioners: Funders and commissioners provide financial support to our organisation and may require access to personal data to monitor our activities and assess our impact. The legal basis for sharing this data is to fulfil our contractual obligations to our funders and commissioners. Data may be held by them or by third-party auditors or evaluators.

Volunteers: We may need to share personal data with volunteers to facilitate their involvement with our organisation. The legal basis for sharing this data is to fulfil the legitimate interests of both the volunteer and our organisation. The data may be held in our CRM system or on paper files.

Potential or current employers/clients: We may share personal data with potential or current employers or clients to facilitate job placements or service provision. The legal basis for sharing this data is to fulfil the legitimate interests of both parties. The data is likely to be held in their HR or CRM systems.

Statutory services including the Job Centres: We may share personal data with statutory services such as the Job Centres to facilitate job placements or access to benefits. The legal basis for sharing this data is to fulfil our legal obligations and the legitimate interests of the individual. Data will be held in their systems.

Charities or organisations providing relevant services that we do not offer: We may share personal data with charities or organisations that provide complementary services to ours, such as the Fuel Bank Association or Suited and Booted. The legal basis for sharing this data is to fulfil our legitimate interests and to provide the best service possible to our clients. Data may be held in their CRM or on paper files.

Training Providers: We may share personal data with training providers to facilitate training for our staff or clients. The legal basis for sharing this data is to fulfil our contractual obligations. The data may be held in their CRM or on paper files.

Associate consultants including Disability Assessors and Trainers: We may share personal data with associate consultants to facilitate assessments or training for our clients. The legal basis for sharing this data is to fulfil our contractual obligations. The data may be held in their CRM or on paper files.

Other trusted third-party vendors: We may share personal data with other trusted third-party vendors to provide services such as printing or data processing. The legal basis for sharing this data is to fulfil our legitimate interests and to provide the best service possible to our clients. Data may be held in their systems or on paper files.

It is important to note that when sharing personal data with third-party entities, we have a legal obligation to ensure that appropriate measures are taken to protect the data and that the data is only used for the purposes for which it was shared. We will also ensure that appropriate contracts are in place with these parties, outlining our expectations and requirements for data handling and processing.

Our legal basis for sharing this data is to fulfil our contractual obligations, our legitimate interests, or our legal obligations. Third-party entities are likely to hold data in their own systems, and we will take appropriate measures to ensure that the data is protected and used only for the purposes for which it was shared.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

Consent – we may be able to offer you a choice as to whether or not we collect, store, share or otherwise process your personal data. This will be made clear to you and will not be done unless we have your consent;
Contract – in some cases we need to collect personal data to fulfil a contract, this personal data will always be anonymised. For example, where we are required to report on candidate diversity;
Legitimate interest – where processing is necessary for the purposes of our legitimate interests, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data;
Legal obligation – sometimes we may need to store and share personal data where we have a legal obligation to do so. For example, we may need to store personal data to comply with health and safety legislation; and/or
Public interest – where we are working to assist with public law we will collect your personal data under public interest. We will be clear about why we have to collect this personal data, how it will used, who you can expect it to be shared with and why.

When processing special category and criminal conviction data, organisations operating within the UK must comply with the UK General Data Protection Regulation (UK GDPR) and ensure they have a lawful basis for processing such data. The UK GDPR provides specific legal bases for processing this type of data, which include:

Explicit consent – where you have given explicit consent to the processing of your special category or criminal conviction data for the purposes for which it was collected.
Contract – where the processing of special category or criminal conviction data is necessary for the performance of a contract with you.
Substantial public interest – where the processing of your special category or criminal conviction data is necessary for reasons of substantial public interest, provided that there is a legal basis in UK law to do so.
Legal claims - the processing of special category or criminal conviction data is necessary for the establishment, exercise, or defence of legal claims.
Employment, social security, and social protection - where the processing of your special category or criminal conviction data is necessary for the purposes of supporting you to acquire and sustain employment.
Vital interests - the processing of special category or criminal conviction data is necessary to protect the vital interests of you or another person where the individual is physically or legally incapable of giving consent.
Public interest in the area of public health – where the processing of your special category data is necessary for reasons of public interest in the area of public health.

Organisations must ensure that any processing of special category or criminal conviction data is necessary and proportionate to the purpose for which it is processed, and that appropriate safeguards are in place to protect individuals' rights and freedoms. In addition, organisations must be transparent about their processing activities and provide individuals with information about how their personal data is being used.

How we store your personal information

Your information is securely stored.

We retain different types of data for differing periods. The criteria we use to determine whether we should retain your data and how long for includes:

The nature of the personal data
Its perceived accuracy of your data
Your engagement levels with our services
Our legal obligations following an offer or when a placement has been made.

We may archive part or all of your data, or retain it on our financial systems but delete all or part of it from our recruitment software system. On removal, we may anonymise parts of your data – particularly following a request for suppression or deletion of your data – to ensure we do not re-enter your data to our database unless you have requested us to do so.

Our current retention period for data on candidates who have not been placed or are no longer showing any signs of engagement with our website or via any other modes of contact including by phone and email is three years.

Where we store your person information

Your personal data is stored securely on our internal systems and we currently hold a Cyber Essentials Plus certificate to prove that we do everything possible to protect the data we hold from cyber-attacks. Our servers are stored within the EEA and are subject to strict security controls.

Your data protection rights.

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
Your right to restriction of processing - You have the right to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
Your right to object to processing – You have the right to object to the processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at:

kirsty@b-radical.co.uk

phone number: 07889 598569

if you wish to make a request.

Changes to this Privacy Notice

We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at:

kirsty@b-radical.co.uk

phone number: 07889 598569

if you wish to make a request.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk