Hanson Search Privacy Policy 

Introduction 

Our Privacy Policy will help you to understand what information we collect and process using this Hanson Search website, how we protect and use it, and what choices you have about your personal data.

When we refer to “Hanson Search” within this Privacy Policy, we are referring to Hanson Search Limited of 5th Floor, 21-22 Warwick St, London W1B 5NE, the organisation which provides this website, and any services or features which may be made available to you from this website.

Data Protection Framework 

Hanson Search is based within the United Kingdom, and as such is registered with the Information Commissioner’s Office (ICO) as a Data Controller under the UK Data Protection Act of 1998. We have also aligned our Privacy Policy with the UK General Data Protection Regulation (UK GDPR), effective as of 1st January 2021 and the EU General Data Protection Regulation (EU GDPR) which has been in effect since 25th May 2018, under the supervision of the ICO within the UK.

Hanson Search has completed applicable Privacy Impact Assessments (also known as Data Protection Impact Assessments under GDPR) for activities related to this website, and these are available upon request from the Hanson Search’s Data Protection Officer (see ‘Contacting Hanson Search’ below).

Who We Are and What We Do 

We are a recruitment agency as defined in the Employment Agencies and Employment Businesses Regulations 2003. We also provide the following other services: events & workshops, training, and consultancy. We collect the personal data of the following types of people to allow us to undertake our business; 

We collect information about you to carry out our core business and ancillary activities. 

Information You Give To Us/We Collect About You 

This is information about you that you give us by filling in forms on our site [www.hansonsearch.com] or by corresponding with us by phone, e-mail or another method. It includes information you provide when you register to use our site, to enter our database, subscribe to our services, attend our events, participate in discussion boards or other social media functions on our site, enter a competition, promotion or survey, and when you report a problem with our site.  
 
The information you give us or we collect about you may include your name, address, private and corporate e-mail address and phone number, financial information, compliance documentation and references verifying your qualifications and experience and your right to work in the United Kingdom, curriculum vitae and photograph, links to your professional profiles available in the public domain e.g. LinkedIn, Twitter, business Facebook or corporate website. 

Information We Collect About You When You Visit Our Website 

With regard to each of your visits to our site, we will automatically collect the following information: 

Information We Obtain From Other Sources 

This is information we obtain about you from other sources such as [LinkedIn, corporate websites, job board websites, online CV libraries, your business card, personal recommendations, and events]. In this case we will inform you, by sending you this privacy notice, within a maximum of 30 days of collecting the data of the fact we hold personal data about you, the source the personal data originates from and whether it came from publicly accessible sources, and for what purpose we intend to retain and process your personal data. 
 
We are working closely with third parties including [companies within our Group, business partners, sub-contractors in technical, professional, payment and professional advisors]. We may receive information about you from them for the purposes of our recruitment services and ancillary support services. 

Purposes of the Processing and The Legal Basis for the Processing 

We use information held about you in the following ways: 

Our legal basis for the processing of personal data is our legitimate business interests, described in more detail below, although we will also rely on contract, legal obligation and consent for specific uses of data. 
 
We will rely on contract if we are negotiating or have entered into a placement agreement with you or your organisation or any other contract to provide services to you or receive services from you or your organisation. 
 
We will rely on legal obligation if we are legally required to hold information on you to fulfil our legal obligations. 
 
We will in some circumstances rely on consent for particular uses of your data and you will be asked for your express consent, if legally required. Examples of when consent may be the lawful basis for processing include permission to introduce you to a client (if you are a candidate). 

Our Legitimate Business Interests 

Our legitimate interests in collecting and retaining your personal data is described below: 

As a recruitment business, we introduce candidates to clients for permanent employment, temporary worker placements or independent professional contracts. The exchange of personal data of our candidates and our client contacts is a fundamental, essential part of this process.  
 
In order to support our candidates’ career aspirations and our clients’ resourcing needs, we require a database of candidate and client personal data containing historical information as well as current resourcing requirements.  
 
To maintain, expand, develop our business, and deliver our ancillary services, we need to record the personal data of prospective candidates and client contacts.

Consent 

Should we want or need to rely on consent to lawfully process your data, we will request your consent orally, by email or by an online process for the specific activity we require consent for and record your response on our system.  Where consent is the lawful basis for our processing, you have the right to withdraw your consent to this particular processing at any time. 

Other Uses of Your Data: 

We will use this information: 

We do not undertake automated decision making or profiling. We do use our computer systems to search and identify personal data in accordance with parameters set by a person. A person will always be involved in the decision-making process. If automated decision making or profiling is used then we provide information about how decisions are made, the significance and the consequences. 

Customer and Citizen Data 

You may decide to send us your personal information via this website if you are seeking more information, requesting to attend one of our events, or registering your information for future job opportunities. Your decision to disclose your personal data is entirely voluntary, and by doing so, you are taking an affirmative action by providing us with specific consent to use your personal data only for the purposes for which you have disclosed it to us. 
 
Hanson Search may access and use your personal data only for the purposes for which you have submitted it to us to (a) provide information to you, (b) make contact with you, (c) provide services to you, (d) investigate career opportunities suitable for you, or (e) maintain the operations and security of the website and services we provide to you, and (f) reasons set out in the above sections of this privacy notice. We will not use your personal information for any other purposes, for example for the communication of marketing materials, unless we have your specific consent that permits us to do so. 
 
We will at all times handle and store your personal data in accordance with industry best practice aligned with ISO27001, the international standard for information security. This includes the activities and procedures undertaken by our own personnel and authorised third parties (see Sensitive Personal Data Section below), and the technical controls which we have implemented to prevent unauthorised access, compromise or theft of information from our applications, supporting computer systems and premises. 

Sensitive Personal Data 

GDPR specifies a set of personal data categories which are “sensitive”, and which require special consideration by Data Controllers. This website, and any services available from this website, do not knowingly collect or process any sensitive personal data, and supporting Privacy Impact Assessments (also known as Data Protection Impact Assessments under GDPR) are available upon request from the Hanson Search’s Data Protection Officer (see ‘Contacting Hanson Search’ below). 

Children’s Personal Data 

This website, and any services available from this website, are not directed to children under the age of 13. If you learn that a child under the age of 13 has provided us with their personal information without having parental consent, please contact the Hanson Search’s Data Protection Officer (see ‘Contacting Hanson Search’ below) immediately so that we can take appropriate action. 

Customer and Citizen Data Rights 

As prescribed within data protection regulations, you have specific rights connected to the provision of your personal data to Hanson Search using this website. These include your rights to request we: 

To contact Hanson Search, please see contact details below.  
 
If Hanson Search does not address your request or fails to provide you with a valid reason why we have been unable to do so, you have the right to contact the Information Commissioner’s Office to make a complaint. They can be contacted via their website (www.ico.org.uk) or by telephone 0303 123 1113. 

Declaration of Sub-Processing 

To make an informed decision on whether to provide your personal data to Hanson Search using this website, we need to make you aware of the following organisations who act as Data Processors for us in the provision of our services to you. 
 
These include any member of the Hanson Search group, both in the EEA and outside of the EEA, Vincere (for sales administration and account management purposes), Mailchimp (for consented marketing communications), and Modina Ltd. (for financial, invoicing and payroll processing activities). 

Selected third parties including: 

We will disclose your personal information to third parties: 

The lawful basis for the third-party processing will include: 

The activities within which each of these Data Processors participates have been recorded within the applicable Privacy Impact Assessments (also known as Data Protection Impact Assessments under GDPR). These will be available upon request from Hanson Search from 25 May 2018 (see below). 

Retention of Your Data 

We understand our legal duty to retain accurate data and only retain personal data for as long as we need it for our legitimate business interests and that you are happy for us to do so.  Accordingly, we have a data retention notice and run data routines to remove data that we no longer have a legitimate business interest in maintaining. 
 
We do the following to try to ensure our data is accurate: 

We may archive part or all of your personal data or retain it on our financial systems only, deleting all or part of it from our main Customer Relationship Manager (CRM) system. We may pseudonymise parts of your data, particularly following a request for suppression or deletion of your data, to ensure that we do not re-enter your personal data on to our database, unless requested to do so. 
 
For your information, Pseudonymised Data is created by taking identifying fields within a database and replacing them with artificial identifiers, or pseudonyms. 

Website Cookies 

This Hanson Search website uses cookies to record log data. We use both session-based and persistent cookies, dependent upon how you use or interact with this website. 
 
Cookies are small text files sent by us to your computer, and from your computer or mobile device to us each time you visit our website. They are unique to you or your web browser. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser session. Persistent cookies last until you or your browser delete them, or until they expire. 
 
We use cookies which are not specific to your account but are unique and allow us to undertake website analytics and customization, among other similar things. If you decide to disable some or all cookies, you may not be able to use some of the functions on our website. We may use third-party cookies, for example, Google Analytics, and you may choose to opt-out of third-party cookies by visiting their website. More about cookies and how to manage them. 

External Links 

This Hanson Search website may include relevant hyperlinks to external websites not controlled by us. Whilst all reasonable care has been exercised in selecting and providing any such links, you are advised to exercise caution before clicking any external links. We cannot guarantee the ongoing suitability of external links, nor do we continually verify the safety or security of the contents which may be subsequently provided to you. You are advised, therefore, that your use of external links is at your own risk and we cannot be responsible for any damages or consequences from your use of them. 

Changes to this Privacy Policy 

We may change this Hanson Search Privacy Policy from time to time, and if we do we will post any changes on this page. If you continue to access this website or use services available from this website after those changes have come into effect, you will have agreed to the revised policy. 
 
This Hanson Search Privacy Policy is version 4.0 and was released on 07/07/2023. You are advised to download or print a copy and retain it for your records.

Contacting Hanson Search 

If you have any questions about this Privacy Policy, would like to exercise any of your statutory rights, or to make a complaint, please write to: Data Protection Team, Hanson Search, 5th Floor, 21-22 Warwick St, London W1B 5NE or email data@hansonsearch.com