If you visit our website this policy is for you. It’s about how we protect your data and respect your privacy.
This policy was last updated in May 2021. We update it from time to time as we make improvements or when laws change. Please check it every now and then to make sure you know exactly how we use your data
We are the ‘controller’ of your personal data. This means we decide how and why your data is processed any time you use our website. We go into this in more detail below.
You should read this policy and make sure you’re happy with it before using our services. If anything is unclear, or you disagree with something, please email us at Recruitment@confused.com.
You can choose not to give us your data. If you do this, you can still browse our website, but you won’t be able to apply for a position with us.
What personal data do we collect?
- Sometimes you might give us data, like your name, phone number, home address, email address.
- Sometimes data about you is collected automatically, like which pages on our website you’ve visited.
- Sometimes we may collect data using other means (for example, from third party sources).
This section explains the types of information we collect about you when you use our services, why we collect it and the legal basis on which we use it.
Information you share with us
To apply for a position listed on our website we require you to provide us with certain data. We collect this data when you apply through the application pages of specific jobs, or by communication through email, phone or in person.
Through these interactions we collect:
- Your contact information (name, phone number, address, email address);
- Your employment and educational history (usually in the form of a CV);
- Other personal information you disclose as part of your application;
- Your eligibility to work in the UK;
- Whether or not you have a disability for which we need to make reasonable adjustments during the recruitment process
- We may also ask for additional information to assist us with our recruitment process and in the event you are offered a job.
In addition to your own data, you may also share details of other people with us (for example, an employment referee). In those circumstances, you will need to check with them that they are happy for you to share their personal data with us, and for us to use it as described in this policy.
Information about how you engage with our website
When you use our website, we automatically collect information about your device, including your IP address, information about your visit (including how you got to our website) and how you use our services.
Information we collect form other sources
As part of our recruitment process, we collect some data about you from other sources, including:
- Your previous employers;
- Your references;
- Recruitment agencies;
- Verification service provides (e.g. background or identification checks).
The closer you get to being offered a position, the more data we will need to collect. However, we’ll always collect as little data as necessary to enable us to progress your application to the next stage.
How do we use your personal information?
We use your data in the following ways:
- To help ensure our content is presented in the most effective manner;
- To help protect our interests by keeping our services safe and secure
- To help administer our website and for business administration (for example, troubleshooting, data analysis, testing, and research);
- To facilitate your employment application to us;
- To respond to your queries and requests;
- To promote and monitor equal opportunities within our business;
- To undertake background checks (where required);
- To establish, exercise or defend our (or a third party's) legal rights;
- To protect the rights, property or safety of the firm, our employees, partners and customers;
- To assist in any disputes, claims or investigations relating to your application;
- To comply with our legal, regulatory and professional obligations; and
- Other lawful business operations
Data protection law requires us to define our "legal basis" for processing personal data. Our legal bases for processing your personal data for the purposes described above are:
- Contractual Obligation - It is necessary for us to process your personal data to take steps, at your request, prior to you entering into a contract.
- Legal obligation - It is necessary for us to use your personal information for us or another ZPG Company to comply with a legal obligation.
- Legitimate interest - It is in our legitimate interests to use your personal data to operate our business.
- Consent - You have freely consented to us using your personal data for a specific purpose
Your Data rights
You have personal data rights. They fall into six categories.
- Erasure - You can ask us to erase your information in certain circumstances. Find out more.
- Rectification - You can ask us to complete inaccurate or incomplete information. Find out more.
- Access - You can ask us for copies of your information. This right always applies but there are some exceptions, so you might not get everything we process. Find out more.
- Restrict processing - You can ask us to restrict processing your information in certain circumstances. Find out more.
- Data portability - This applies to the information you give us. You can ask us to transfer this information to another organisation or give it to you. This only applies if we are processing based on your consent or in relation to a contract and that processing is automated. Find out more.
- Object to processing - You can object to how we process your personal data even if we believe it’s in our legitimate interests. Find out more.
How we store your data
Where do we store your data?
The personal data we collect is processed at our offices in the UK and in data processing facilities that are provided to us by third parties.
Some of these third parties are located outside the UK and the European Economic Area (EEA). If we ever transfer your personal data outside the UK and the EEA, we take steps to protect your privacy rights and make sure that the transfers comply with the law.
How long do we store your data for?
We only keep your data long enough to carry out the task it was collected for. The amount of time varies depending on the type of data and how we use it. For example - We automatically delete all inactive recruitment records after 24 months.
Do any third parties process your data?
Like many technology businesses, we use trusted suppliers to host our services (including this website) and power our business systems. We only choose suppliers who have appropriate security measures in place to keep your data safe, they only have access to the data they need to perform specific services, and they are required to keep your data confidential.
The third parties who provide services on our behalf fall into the following categories:
- Third parties that assist us in delivering our website
- Third parties who assist us in understanding how effective our website is;
- Third parties that assist us with listing our employment opportunities;
- Third parties that help us with video interviews, audit services, administrative services, IT technologies (e.g. data storage), security services and insurance claims,
- Third parties that help us with pre-employment checks (if your application is successful),
When might we share your data with someone else?
If we buy or sell any business, we might disclose your data to the prospective seller or buyer, along with its professional advisers (like its lawyers, accountants and financial advisers). If our business is sold (or any part of it), data about our users might be included in the sale.
We might disclose your data to obtain professional advice (for example, from lawyers or financial advisers).
We might disclose your data if the law requires us to do so, or in response to a request from law enforcement or a regulator. We may disclose your data to protect our business (for example, to enforce a contract or to protect someone’s rights, property or safety). This includes disclosure for fraud prevention purposes.
Links to third party websites
How to contact us
We hope all of the above makes sense and you’re happy with how we use your personal data. If not, please contact us using any of the methods below.
Post: Data Protection Officer
2nd Floor, Greyfriars House
Cardiff CF10 3AL
You can complain about how we use your personal information at any time to the Information Commissioner’s Office. Find out more.