Organic Recruitment Ltd General Data Protection Regulation (GDPR) Policy

​

Organic Recruitment Ltd ("the Company") is committed to protecting the privacy and security of your personal data.

 

As a data controller, we are responsible for how we hold and use personal information about you. This policy complies with the General Data Protection Regulation (GDPR) as adapted under UK law in 2024 and applies to current and former employees, agency workers, contractors, and candidates. This document does not form part of any contract of employment or other contract to provide services. We may update this notice at any time.

​

 

Data Protection Principles

The Company adheres to the following principles to ensure that personal information is:

• Processed lawfully, fairly, and in a transparent manner.

• Collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

• Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

• Accurate and, where necessary, kept up to date.

• Retained only for as long as necessary for the purposes we have told you about.

• Secured against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

​

 

Legal Bases for Processing

We process your personal data on various legal bases, including:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose.

• Contract: The processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.

• Legal Obligation: The processing is necessary for us to comply with the law (not including contractual obligations).

• Vital Interests: The processing is necessary to protect someone’s life.

• Public Task: The processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.

• Legitimate Interests: The processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.

​

 

Your Rights

Under the GDPR, you have rights including:

• Access: To request access to your data.

• Rectification: To request correction of inaccurate personal data.

• Erasure: To request erasure of your personal data under certain conditions.

• Restriction: To request restriction of processing under certain conditions.

• Portability: To request the transfer of your personal data to another organization, or directly to you, under certain conditions.

• Objection: To object to processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling); direct marketing (including profiling); and processing for purposes of scientific/historical research and statistics.

​

 

Data Security and Breach Procedures

We have implemented measures to ensure a high level of data security. In the event of a data breach, we will follow our comprehensive breach response plan, which includes notifying the Information Commissioner's Office (ICO) and affected individuals where legally required.

​

 

Data Sharing and International Transfers

Your data may be shared with third-party service providers and other entities within our group. Any transfers of personal data outside the UK are conducted in compliance with applicable laws, ensuring that personal data is protected to the standards described in this policy.

​

 

Changes to This Privacy Notice

We reserve the right to update this privacy notice at any time. We will provide you with a new privacy notice when we make substantial updates, or we may notify you in other ways about the processing of your personal information.

 

 

Contacting Us

For any questions about this privacy notice, exercising your rights, or data protection practices, please contact our Data Protection Officer (DPO) at people@organicrecruitment.com