Summit Search and Selection Ltd is committed to protecting your privacy and security. This notice explains how and why we use your personal data, to ensure you remain informed and in control of your information.
We will never sell your personal data and will only ever share it with organisations we work with where necessary and if its privacy and security are guaranteed.
Any questions you have in relation to this notice or how we use your personal data should be addressed to our Data Protection Officer using the details below:
Data Protection Officer
Summit Search and Selection Ltd
29 Farm Street
Your personal data (i.e. any information which identifies you, or which can be identified as relating to you personally) will be collected and used by Summit Search and Selection Ltd, a company registered in England and Wales with company registration number 04370431, whose registered office address is 4 Market Square, Amersham, Buckinghamshire HP7 0DQ.
For the purposes of data protection law, Summit Search and Selection will be the data controller and will be referred to as “we”, “us”, “our” from now on within this privacy notice.
Candidates – potential candidates for any type of job or engagement through us and whose personal data is collected in the course of our services;
Referees – referees of Candidates whose personal data is collected in the course of our research of a Candidate; and/or
Corporate Staff – individuals who work for, or are engaged by, our customers, clients or suppliers whose personal data is collected in the course of our work with them.
We refer to the above groups of individuals collectively as “you” unless the context dictates otherwise.
This privacy notice replaces any privacy notice that we have previously issued and was last updated in February 2019.
Any notices or statements relating to data, data protection, fair processing and/or privacy that we may issue at the time of collecting personal data about you will supplement this privacy notice. They are not intended to override it.
We may change this privacy notice from time to time to reflect changes in the law and/or our personal data handling activities and data protection practices.
We encourage you to check this privacy notice for changes whenever you visit our website, as we may not always notify you of the changes.
It is important that the personal data we hold about you is accurate and current.
Please keep us informed if your personal data changes during your relationship with us.
Identity Data, which may include your title, first name, last name, maiden name, date of birth, gender, photograph, national insurance number (or equivalent in your country), nationality and other information relating to residency and citizenship which may be required to establish a right to work in a given country, marital status and number of dependents;
Contact Data, which may include your billing address, delivery address, email address and telephone numbers, emergency contact details and contact details history;
Historical Data, which may include educational history and credentials, employment history, skills and qualifications;
Employment-related Data, which may include your current remuneration, pension and benefits, what role you are looking for, what work-related areas interest you, third party references (if taken) and interview and assessment feedback created either ourselves or by our client following an interview or assessment;
Financial Data, which includes your bank sort code and account number and tax-related information;
Profile Data, which includes your interests and preferences and other insights or determinants that we have gained from our analysis and research of you;
Marketing Data, which includes your preferences in receiving emails marketing from our third parties and from us and your communication preferences.
Other Data – The above list of personal data is not exhaustive. You, your referees or third-party sources may tell us extra information that we have not listed above.
Special Category – We do not collect any Special Categories of Personal Data, such as religious beliefs, sexual orientation, political opinions, trade union membership, health and genetic information or biometric data about you.
We do not intentionally collect personal data relating to children.
We also use the following channels to collect your personal data:
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests.
We believe it is reasonable to expect that if you have posted your professional CV information on professional networking sites and other publicly available sources, you are happy for us to collect and otherwise use your personal data to provide our services, share that information with prospective employers and assess your suitability against our assignments.
We also believe that you will expect us to have an ongoing relationship over a number of years and we will continue to hold your data providing that we retain reasonable periodic contact with you or until you inform us otherwise. We need to do these things so that we can function as a profit-making business, and to be effective and help organisations acquire the right talent.
We will never sell or share your Personal Information to, or with, other unrelated companies for the purposes of direct marketing.
When necessary; we may share your personal information with:
The recipients set out above may be based in the European Economic Area (EEA) or in countries outside the EEA.
We only allow our service providers to handle your personal data if we are satisfied, they take appropriate measures to protect your personal data. We also impose contractual obligations on service providers to ensure they can only use your personal data to provide services to us and to you.
We may disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.
Your personal data can be transferred outside of the EEA from time to time to trusted service providers and other third parties when necessary.
When we do this; we require third parties to keep your personal data confidential and secure. We ensure that suitable protection is maintained at all times by ensuring that appropriate safeguards are in place.
Where we are required by law to disclose, we may not always have control over the terms under which we are required to share your personal data. We will make sure that any disclosure is lawful.
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
We will usually continue to process your personal data in the usual manner for up to 5 years from the last meaningful contact we had with you (or such longer period which we believe in good faith circumstances and the law allows for legitimate interest to continue). Meaningful contact may include a consultant contacting you directly by phone or you may receive an email from us reminding you that we hold your personal information and asking you to let us know if you are no longer interested in remaining on our books.
We keep identification information and information relating to placements, records of any payments, tax information for 7 years from the end of the last transaction relating to you. We hold this information in case there is a legal claim or tax investigation.
We always maintain the security and protection of any information we hold by putting in place administrative, technical and physical measures on our systems and internally which are designed to guard against and minimise the risk of loss, misuse or unauthorised processing or disclosure of the personal information that it holds. We place similar obligations on our service providers and undertake robust risk assessments on their security measures.
We do not engage in any Profiling activities with your personal data
We do not use any automated processes to make decisions about you which produce legal or significant effects concerning you.
Where we store information
Our operations are based in the UK and we store our data within the European Union. Some organisations which provide services to us may transfer personal data outside of the EEA, but we’ll only allow them to do so if your data is adequately protected or with your permission.
For example, some of our systems use Microsoft products. As a US company, it may be that using their products result in personal data being transferred to or accessible from the US. However, we’ll allow this as we are certain personal data will still be adequately protected (as Microsoft is certified under the USA’s Privacy Shield scheme).
How long we store information
We will only use and store information for so long as it is required for the purposes it was collected for. How long information will be stored for depends on the information in question and what it is being used for. For example, if you ask us not to send you marketing emails for example about opportunities that we feel may be of interest to you, we will stop storing your emails for these marketing purposes (though we’ll keep a record of your preference not to be emailed).
We continually review what information we hold and delete what is no longer required.
If you have any concerns about the use of your personal data, or the way we handle your requests relating to your rights, you can raise a complaint directly with us by contacting our Data Protection Officer using the details below:
Data Protection Officer
Summit Search and Selection Ltd
29 Farm Street
By email: firstname.lastname@example.org
If you are not satisfied with the way we handle your complaint, you are entitled to raise a complaint directly with the UK Information Commissioner’s Office via the details available on their website: www.ico.org.uk.
For alternate EU Data Protection Authority contacts please see further information on the following link National Data Protection Authorities.
You have certain rights relating to the personal information we hold about you which are outlined below, they may be subject to various exceptions and limitations.
You have rights to:
You can exercise these rights at any time by contacting our Data Protection Officer using the contact details found in this notice. Please note we will need to validate your identity before we can look into your request.