How we look after your information.

Who we are

Keystone Resourcing Ltd (company number 16543818, registered in England and Wales) is the controller of the personal data described in this policy. Our registered office is 1-2 Grafton Court, Kettering, NN15 6XR.

For any privacy question or request, email Info@Keystone-Resourcing.co.uk, call 01604 969 514 or write to us at our registered office.

The information we collect

• Enquiries: your name, email address, phone number, company and message when you use our contact form, email or call us.
• Candidates: your CV, employment history, qualifications, salary expectations, right-to-work information, references and interview notes.
• Clients: names and business contact details of people at the organisations we recruit for, and details of the roles they want to fill.
• Website use: cookies and similar technologies, as described on our cookies page.

We collect candidate details from you, and also from public professional profiles such as LinkedIn, job boards, and people who refer you to us. When we get your details from someone other than you, we send you this notice within one month.

We do not ask for special category data such as health or ethnicity. If you choose to share it, for example to request a reasonable adjustment for an interview, we use it only for that purpose and with your explicit consent.

How we use it and our lawful basis

• Finding you work or finding you people: to match candidates with roles and introduce them to clients. Our basis is our legitimate interests in providing a recruitment service, or steps taken at your request before entering into a contract.
• Replying to enquiries: our legitimate interests in responding to you.
• Meeting legal duties: such as right-to-work checks and the Conduct of Employment Agencies and Employment Businesses Regulations 2003. Our basis is legal obligation.
• Job alert emails: only if you opt in. You can unsubscribe at any time.
• Analytics cookies: only with your consent, which you can withdraw at any time.

We will always ask your permission before sending your CV to a client. We do not make decisions about you using solely automated means.

Who we share it with

We share candidate details with prospective employers only with your agreement. We also use trusted service providers for website hosting, data storage and email, who process data on our instructions under written contracts. We may disclose information where the law requires it. We never sell your personal data.

Some providers may store data outside the UK. Where they do, we rely on UK adequacy regulations or the International Data Transfer Agreement or UK Addendum to keep it protected to the UK standard.

How long we keep it

We keep candidate records for up to two years after our last meaningful contact with you, and enquiry records for up to two years after we reply. We keep records needed for legal, tax or accounting purposes for as long as the law requires, typically six years. After that we delete or anonymise them.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• have your data erased
• restrict or object to how we use it, including for direct marketing
• receive your data in a portable format
• withdraw consent at any time, where we rely on consent

Contact us to use any of these rights. We will respond within one month and there is normally no charge.

Keeping it secure

We use access controls, encrypted connections and reputable providers to protect your information, and we limit access to the people who need it.

Complaints

Please talk to us first so we can put things right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

We will update this page when our practices change. The date at the top shows when it was last revised.