Data protection privacy notice: (employment and workforce)

Laura Devine Immigration (“LDI”)
Data protection privacy notice (employment and workforce)

1. This notice applies to all job applicants, current and former employees, trainees, temporary and agency workers, contractors, interns, secondees, volunteers, apprentices and any other individuals working or prospectively working for LDI.

2. This notice explains what personal data (information) we may hold about you, how we collect it, and how we use and may share information about you during your employment and after it ends. We are required to notify you of this information under data protection legislation. Please ensure that you read this notice (sometimes referred to as a ‘privacy notice’) and any other similar notice we may provide to you from time to time when we collect or process personal information about you.

Who collects the information
3. LDI is a ‘data controller’ and gathers and uses certain information about you.

Data protection principles
4. LDI will comply with the data protection principles when gathering and using personal information, as set out in our data protection (employment and workforce) policy.

About the information we may collect and hold
5. The table set out in the attached Schedule summarises the information we may collect and hold, how and why we do so, how we use it and with whom it may be shared.

6. We may also need to share some of the categories of personal information set out in the attached Schedule with other parties, such as external contractors and our professional advisers and potential purchasers of some or all of our business or on a restructuring. Usually, information will be anonymised but this may not always be possible. We will seek to ensure that the recipient of the information is bound by confidentiality obligations. We may also be required to share some personal information with our regulators or as required to comply with the law.

7. We seek to ensure that our information collection and processing is always proportionate. We will notify you of any changes to information we collect or to the purposes for which we collect and process it.

Where information may be held
8. Information may be held at our offices and third party agencies, service providers, external contractors and professional advisers as described above. Information may be transferred internationally to the USA and other countries around the world, including countries that do not have data protection laws equivalent to those in the UK, for the reasons described above. We have security measures in place to seek to ensure that there is appropriate security for information we hold including those measures detailed in our data protection (employment and workforce) policy.

How long we keep your information
9. We keep your information during and after your employment for no longer than is necessary for the purposes for which the personal information is processed. Further details on this are available in our data protection (employment and workforce) policy.

Your rights to correct and access your information and to ask for it to be erased
10. Please contact our Head of Risk and Compliance, Natasha Chell: natasha.chell@lauradevine.com if (in accordance with applicable law) you would like to correct or request access to information that we hold relating to you or if you have any questions about this notice. You also have the right to ask us for some but not all of the information we hold and process to be erased (the ‘right to be forgotten’) in certain circumstances. We will provide you with further information about the right to be forgotten, if you ask for it.

Keeping your personal information secure
11. We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

12. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

How to complain
13. We hope that our Head of Risk and Compliance can resolve any query or concern you raise about our use of your information. If not, contact the Information Commissioner at ico.org.uk/concerns/ or telephone: 0303 123 1113 for further information about your rights and how to make a formal complaint.

The information we collect How we collect the information Why we collect the information How we use and may share the information
*Your name, contact details (ie address, home and mobile phone numbers,
email address) and emergency contacts (ie name, relationship and home and
mobile phone numbers)
From you To enter into/perform the employment contract

Legitimate interest: 
to maintain employment records and good employment practice
To enter into/perform the employment contract
*Details of salary and benefits, bank/building society, National Insurance and tax information, your age From you To perform the employment contract including payment of salary and benefits

Legitimate interests: 
to maintain employment records and to comply with legal,regulatory and corporate governance obligations and good employment practice
To ensure you receive the correct pay and benefits

Information shared with
our payroll administrators Mercer & Hole and with HM Revenue & Customs
(HMRC)
*Details of your spouse/partner and any dependants

From you To perform the employment contract including employment-related benefits, eg private medical insurance, life assurance and pension To ensure you
receive the correct pay and benefits

Information shared with
our payroll administrators Mercer & Hole and with HM Revenue & Customs
(HMRC)
*Your nationality and immigration status and information from related
documents, such as your passport or other identification and immigration
information
From you and, where necessary, the Home Office To enter into/perform the employment contract

To comply with our legal obligations

Legitimate interest:
to maintain employment records
To carry out right to work checks

Information may be shared with the Home Office
*Details of your pension arrangements, and all information included in
these and necessary to implement and administer them
From you, from our pension administrators Scottish Widows/St James’ Place and (where necessary) from your own pension fund administrators To perform the employment contract including employment-related benefits

To comply with our legal obligations

Legitimate interests: 
to maintain employment records and to comply with legal, regulatory and corporate governance obligations and good employment practice
To administer your pension benefits and/or
comply with our auto-enrolment pension obligations

Information shared
with our pension administrators Scottish Widows/St James’ Place and with HMRC
*Information in your sickness and absence records (including sensitive
personal information regarding your physical and/or mental health)
From you, from your doctors, from medical and occupational health
professionals we engage and from our insurance benefit administrators Canada Life
To perform the employment contract including employment-related benefits

To comply with our legal obligations

Legitimate interests: 
to maintain employment records and to comply with legal, regulatory and corporate governance obligations and good employment practice, to ensure safe working practices
To maintain employment records, to administer sick pay entitlement, to follow our policies and to facilitate employment-related health and sickness benefits

To comply with our legal obligations to you as your employer

Information shared with your doctors, with medical and occupational health professionals we engage and with our insurance benefit administrators Canada Life

For further information, 
see * below
Your racial or ethnic origin, sex and sexual orientation, religious or similar beliefs From you To comply with our legal obligations and for reasons of substantial public interest (equality of opportunity or treatment) To comply with our equal opportunities monitoring obligations and to follow our policies

For further
information, 
see * below
**Criminal records information, including the results of Disclosure and
Barring Service (DBS) checks
From you and the DBS To comply with any relevant legal obligations.

For reasons of substantial public interest, such as preventing or detecting unlawful acts, preventing terrorist financing or money laundering and protecting the public against dishonesty.
To carry out statutory checks, where justified (taking into account the applicable statutory conditions and safeguards)

Information shared with DBS and other regulatory authorities as required

For further Information,
see ** below
Information on grievances raised by or involving you From you, from other employees and from consultants we may engage in relation to the grievance procedure To perform the employment contract

To comply with our legal obligations

Legitimate interests: 
to maintain employment records and to comply with legal, regulatory and corporate governance obligations and good employment practice

For staff administration, to follow our policies and to deal with grievance matters

Information shared with relevant managers, HR personnel and with consultants we may engage
Information on conduct issues involving you From you, from other employees and from consultants we may engage in
relation to the conduct procedure
To comply with our legal obligations

Legitimate interests: 
to maintain employment records and to comply with legal, regulatory and corporate governance obligations and good employment practice, to ensure safe working practices
For staff administration and assessments, to follow our policies, to monitor staff performance and conduct and to deal with disciplinary and grievance matters

Information shared with relevant managers, HR personnel and with consultants we may engage
Details of your appraisals and performance reviews From you, from other employees and from consultants we may engage in
relation to the appraisal/performance review process
To comply with our legal obligations

Legitimate interests: 
to maintain employment records and to comply with legal, regulatory and corporate governance obligations and good employment practice, to ensure safe working practices
For staff administration and assessments, to follow our policies, to monitor staff performance and conduct and to deal with disciplinary and grievance matters

Information shared with relevant managers, HR personnel and with consultants we may engage
Details of your performance and of any management/improvement plans From you, from other employees and from consultants we may engage in
relation to HR or performance issues
To comply with our legal obligations

Legitimate interests: 
to maintain employment and contractor records and to comply with legal, regulatory and corporate governance obligations and good employment and contractor management practice, to ensure safe working practices
For staff and contractor administration and assessments, to follow our policies and to monitor staff and contractor  performance

Information shared with relevant managers, HR personnel and with consultants we may engage
Details of your time, attendance and activity records From you and from our time recording systems, application logs  and door entry systems To perform contracts with employees and contractors; to perform contracts with clients; to
comply with our regulatory duties towards clients and others

Legitimate interests: 
to monitor and manage staff and contractor access to our systems and facilities and to record staff and contractor absences and activities; to record and monitor time spent on client work; to invoice clients and to report to clients on activities carried out on their behalf
For payroll and staff administration and assessments, to follow our policies and to monitor staff performance and attendance

Information shared with relevant managers, HR personnel and with consultants we may engage and with our payroll administrators
Information in applications you make for other positions within our organisation From you To enter into/perform contracts with employees and contractors

To comply with our legal obligations

Legitimate interests: 
to maintain employment and contractor records and to comply with legal, regulatory and corporate governance obligations and good employment and contractor management practice
To process the application

Information shared with relevant managers, HR personnel and with consultants we may engage
Information about your use of our IT, communication and other systems Automated monitoring of our websites and other technical systems, such as our computer networks and connections, CCTV and access control systems, communications systems, remote access systems, email and instant messaging systems, intranet and Internet facilities, telephones, voicemail, mobile phone records, VOIP and mobile device management systems. Legitimate interests:

to monitor and manage staff access to our systems and facilities

to protect our networks, and personal data of 
employees, contractors and customers/clients/contacts, against unauthorised access or data leakage

to ensure our business policies, such as those concerning security and internet use, are adhered to

for operational reasons, such as maintaining employment and contractor records, recording transactions, training and quality control

to ensure that commercially sensitive information is kept confidential

to check that restrictions on your activities that apply during your employment or after your employment has ended (post-termination restrictions or restrictive covenants) are being complied with

for investigating complaints and allegations of misconduct and/or criminal offences

for statistical analysis

to prevent unauthorised access and modifications to our systems

as part of investigations by regulatory bodies, or in connection with legal proceedings or requests
To protect and carry out our legitimate interests (see adjacent column)

Information shared with relevant managers, HR personnel and with consultants we may engage

For further information, see ***
below
Details of your business-related use of social media From relevant websites and applications Legitimate interests:

to monitor
and manage staff access to our systems and facilities

to protect our networks, and personal data of employees, contractors  and customers/clients/contacts, against
unauthorised access or data leakage

to ensure our business policies, such as those concerning security and internet use, are
adhered to

for operational reasons, such as maintaining employment and contractor records,
recording transactions, training and quality control

to ensure that commercially sensitive information is kept confidential

to check that restrictions on your activities that apply during your employment or after your
employment has ended (post-termination restrictions or restrictive covenants) are being complied with

for investigating complaints and allegations of misconduct and/or criminal offences

as part of investigations by regulatory bodies, or in connection with legal proceedings or requests
To protect and carry out our legitimate interests (see adjacent column)

Information shared with relevant managers, HR personnel and with consultants we may engage

For further information,
see *** below
Your personal use of social media (only in very limited circumstances, to check specific risks for specific functions within our organisation; you will be notified separately if this is to occur) From relevant websites and applications Legitimate interests:

to monitor and manage staff access to our systems and facilities

to protect our networks, and personal data of employees and customers/clients/contacts, against unauthorised access or data leakage

to ensure our business policies, such as those concerning security and internet use, are adhered to

for operational reasons, such as maintaining employment and contractor records, recording transactions, training and quality control

to ensure that commercially sensitive information is kept confidential

to check that restrictions on your activities that apply during your employment or after your employment has ended (post-termination restrictions or restrictive covenants) are being complied with

for investigating complaints and allegations of misconduct and/or criminal offences

as part of investigations by regulatory bodies, or in connection with legal proceedings or requests
To protect and carry out our legitimate interests (see adjacent column)

Information shared with relevant managers, HR personnel and with consultants we may engage

For further information, 
see *** below
Details in references about you that we give to others From your personnel records, our other employees To perform contracts with employees and contractors

To comply with our legal obligations

Legitimate interests: 
to maintain employment records and to comply with legal, regulatory and corporate governance obligations and good employment and contractor management practice
To provide you with the relevant reference

To comply with legal/regulatory obligations

Information shared
with relevant managers, HR personnel and the recipient(s) of the reference

You are required (by law or under the terms of your contract of employment, or in order to enter into your contract of employment) to provide the categories of information marked * above to us to enable us to verify your right to work and suitability for the position, to pay you, to provide you with your contractual benefits, such as contractual sick pay and to administer statutory payments such as statutory sick pay (SSP). If you do not provide this information, we may not be able to employ you, to make these payments or provide these benefits.

** Further details on how we handle sensitive personal information and information relating to criminal convictions and offences are set out in our data protection policy (employment and workforce).*** Further information on the monitoring we undertake in the workplace and how we do this is available in our data protection policy (employment and workforce).