1. Introduction
We are committed to safeguarding the privacy of our clients, candidates and website visitors. This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users – in other words, where we determine the purposes and means of the processing of that personal data.
We use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of our services, we will ask you to consent to our use of cookies when you first visit our website.
2. How we use your personal data
In this section we set out the general categories of personal data that we may process, the source and specific categories of any data we did not obtain directly from you, the purposes for which we may process personal data, and the legal bases of the processing.
Usage data. We may process data about your use of our website and services. The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views, and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is our analytics tracking system. This usage data may be processed for the purposes of analysing the use of the website and services. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website and services.
Profile data. We may process the information included in your candidate or client registration form submitted on our website. This may include your name, address, telephone number, email address, profile pictures, date of birth, place of birth, relationship status, nationality, passport type, native language, interests and hobbies, educational details, employment details, job search requirements, current location, availability, additional languages spoken, visa type, personal statements, employment requests and family requirements. The profile data may be processed for the purposes of administering our services. The legal basis for this processing is our legitimate interests, namely the proper administration of our website, our clients’ requests for services, and candidate registrations and applications for new opportunities.
Enquiry data. We may process information contained in any enquiry you submit to us regarding our services. The enquiry data may be processed for the purposes of offering and providing relevant services to you. The legal basis for this processing is consent.
Customer relationship data. We may process information received from references, including client contact information. This may include your name, employer type, job title, contact details, and information contained in communications between us, you and your employee. The customer relationship data may be processed for the purposes of assessing suitability of candidates, managing our relationships with customers, communicating with customers, keeping records of those communications and promoting our services to customers. The legal basis is our legitimate interests, namely the proper management of candidate assessment.
Notification data. We may process information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters. The legal basis is your consent.
Correspondence data. We may process information contained in or relating to any communication that you send to us, including the communication content and the metadata associated with the communication. The legal basis is our legitimate interests, namely the proper administration of our website and business.
Please do not supply any other person’s personal data to us unless we prompt you to do so.
3. Providing your personal data to others
We may disclose your personal data to our insurers and professional advisers insofar as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims.
We may also disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
4. Retaining and deleting personal data
This section sets out our data retention policies and procedures, designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal data.
Personal data that we process for any purpose shall not be kept for longer than is necessary for that purpose. We may, however, retain your personal data where such retention is necessary for compliance with a legal obligation, or in order to protect your vital interests or those of another natural person.
5. Your rights
Under UK GDPR you have the following principal rights:
- the right to access
- the right to rectification
- the right to erasure
- the right to restrict processing
- the right to object to processing
- the right to data portability
- the right to complain to a supervisory authority
- the right to withdraw consent
You have the right to confirmation as to whether or not we process your personal data and, where we do, access to that personal data along with certain additional information including the purposes of processing, the categories of personal data concerned, and the recipients. The first copy will be provided free of charge; additional copies may be subject to a reasonable fee.
You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed.
In some circumstances you have the right to the erasure of your personal data without undue delay – for example, where the data is no longer necessary in relation to the purposes for which it was collected, where you withdraw consent to consent-based processing, or where the processing is for direct marketing purposes. There are exclusions to the right of erasure, including where processing is necessary for compliance with a legal obligation, or for the establishment, exercise or defence of legal claims.
You have the right to object to our processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for processing is necessary for the performance of a task carried out in the public interest, or for the purposes of legitimate interests pursued by us or by a third party.
You have the right to object to our processing of your personal data for direct marketing purposes at any time. If you make such an objection, we will cease to process your personal data for that purpose.
To the extent that the legal basis for our processing is consent or contract performance, and the processing is carried out by automated means, you have the right to receive your personal data from us in a structured, commonly used and machine-readable format.
If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. In the UK that authority is the Information Commissioner’s Office (ico.org.uk).
To exercise any of your rights, please contact us using the details below. We aim to respond within 30 days.
6. Our cookies policy
You can read our full cookies policy at dukeandduchess-int.com/cookies-policy.
7. Our details
This website is owned and operated by DDI Partners Ltd. Duke and Duchess International is a trading name of DDI Partners Ltd. We are registered in England and Wales under company number 8811424, and our registered office is at North East Suffolk Business Centre, Pinbush Road, NR33 7NQ.
You can contact us by post, using our website contact form, by telephone on the contact number published on our website, or by email at [email protected].
8. Data protection officer
Our data protection officer is Carrie-Ann Pryke. You can reach the data protection officer at [email protected].