This Candidate Data Policy outlines how we manage the data that is exchanged between the Candidate ("you"), and the Agency ("us"), collectively referred to as "Parties". This is to include about whom it is necessary to hold or process or hold data in the provision of our services. This is to include compliance with all applicable laws pertaining to Data Protection.

​

• MW Advisory Consulting Ltd operates as a Data Controller of Candidate Personal Data under GDPR. 

• MW Advisory Consulting Ltd utilises Candidate Date under Legitimate Interests of that data, under GDPR.

• "Candidates" is to include applicants for all Vacancies advertised or otherwise promoted by MW Advisory Consulting Ltd, in addition to those who have registered their CV or personal details with the Agency.

• The Agency will, wherever possible, present Candidates with suitable and attractive Vacancies, that we consider to be relevant to your experience and aspirations..

• The Agency will only gather and use information about you that are necessary for the provision of its services.

• Candidate data will be kept securely, and for only as long as is needed.

• Candidate data will be kept as up to date as possible, within the limits of what the Candidate chooses to provide us.

• Candidate data will be used in a fair, lawful and honest manner.

• Candidate data will not be used to discriminate in any way relating to age, race, religion, gender, sexuality, disability 

​

Candidate Data we may hold (not exhaustive, and applicable on a case-by-case basis):

• Name

• Age/DoB

• Gender

• Contact Details, including telephone, mobile, email, social media or similar.

• Address

• Details of Qualifications and Education history

• Proof of ID and/or Nationality, including documents to show Immigration and/or Right to Work status, where applicable.

• Driving Licence

• Proof of Address

• Details of current and past employment, including job titles, dates of employment, employer name, and other related information.

• Details of current and past remuneration.

• Details of current and past contractual notice periods, non-compete limitations or similar.

• Current and Past Reference details.

• Details of one or more Emergency Contact.

• Photograph

• Marital Status

• Financial information

• Any information you choose to provide, in writing or via other methods of communication.

​

Sensitive Data

 Some data you may choose to share with us may be categorised as "sensitive". Information that falls into this category will not be shared with any third-party without prior consent given by the candidate. This may include, but not be limited to:

• Details of race, ethnicity, religion, sexual orientation, political opinions.

• Details of any injury, illness or disability (whether current or historic).

• Details of any criminal convictions.

• Details of any financial difficulties, particularly when resulting in CCJ's, Court Orders, Bankruptcies, Insolvencies or similar.

Where a particular Vacancy, Opportunity, or a Client of the Agency have requirements such as Security Checks, Credit Checks or certain physical requirements, the Agency will inform the Candidate of these as early as possible in the process.

​

How we may collect Candidate Data

• You provide data to us directly.

• We receive data from other sources. This may include, but is not limited to: third-parties such as social media, job-seeking or advertisement boards or other similar data aggregating sources.

• Data provided to us from contacts of the Candidate, which may include, but is not limited to: past employers or colleagues, professional referees.

• Information/data on how and when you utilise the Agency's website, any communication between the Candidate and the Agency, and any other interaction between the Candidate and the Agency..

​

How we use your Data

Your data will only be in the provision of "lawful purposes" and "legitimate interests" under GDPR; in most instances, as the Data Controller providing opportunities of employment to the Candidate with Clients of the Agency. Other instances may include:

• Where we need to comply with a legal obligation.

• Where it is required in our legitimate interests.

• For some activities, such as marketing, where you have given consent.

• To asses your skills or relevance to a particular Vacancy.

• To carry out background or reference checks.

• To communicate with you regarding suitable Vacancies or an interview process you may be undertaking.

​

Legal Obligations

We are required as part of our recruitment services, to seek and confirm certain Right to Work documents, Proof of Address, Proof of Identification.

We must comply with wider UK legal obligations, therefore may be required to share your data in connection with criminal activities, tax collection, or litigators.

​

Failure to Provide Data

If the Candidate fails to provide us with data that is required for the provision of our services, we may bot be able to undertake those services on behalf of the Candidate.

​

Security

We have in place appropriate security measures to prevent data being accidentally lost, or accessed in any way by agents/individuals without the proper authority. In addition, you data will only be accessed or processed as required under the provision of the services offered by the Agency. Should any form of data breach occur, we have in place procedures to notify you and any regulator/law enforcement body, in a timely fashion.

​

Data Retention

We will delete your data within 6 months after the 2nd anniversary of our last Meaningful Communication with you. Your data will be deleted unless we believe in good faith that law or regulation requires us to retain it further..

Meaningful Communication with a Candidate may construe:

• Communication both ways between the Agency and the Candidate relating to the provision of services of the Agency; primarily the communication of Vacancies that we would consider you suitable for.

• Communication from the Candidate to the Agency.

• Communication from the Candidate in response to marketing materials from the Agency.

​

Request to Erase Data

You have the right to request we erase your personal data in certain circumstances. This includes:

• The data is no longer necessary for the purpose for which it was collected.

• The data was processed illegally.

• You have withdrawn your consent to us processing your data, and we have no reason to further process your data.