ICO NUMBER: ZB961763
The Purpose of this Private Policy
This privacy policy explains how The OSS Group Ltd looks after your personal data in its capacity as a startup accelerator and ongoing support system for recruitment agency owners. It is in accordance with applicable legislation, including the General Data Protection Regulation (GDPR) and related laws. This notice also explains your rights.
GDPR will not change how we use your personal information. We have always, and will continue, to value all data you share with us whilst keeping it secure at all times. Our commitment to looking after your data remains the same.
Where we refer to ‘we’ or ‘the company’, we mean The OSS Group Ltd. We are a startup accelerator and support business that provides services to our partners to help them start, build and scale their own recruitment businesses. We must process personal data (including sensitive personal data) so that we can provide these services. In doing so, we act as a data controller.
It is important that you read this statement with any other privacy policy we may provide on specific occasions, so you are aware of how and why we are using your personal data.
What is GDPR?
The General Data Protection Regulation is a law enforced across the United Kingdom and the European Union (EU). It builds upon existing data protection laws and is designed to give individuals increased rights and transparency over their personal information by helping them understand how companies, such as The OSS Group Ltd, use their data. The law also gives individuals the ability to exercise their rights, such as correcting or accessing their data.
What impact does the changes have on you?
GDPR provides you with more transparency regarding your personal data. It strengthens your rights, giving you improved access to your data and the right to review, and in certain circumstances, edit or delete the information that organisations store about you. In short, you have more control over your personal data.
You do not need to do anything, as we will continue to look after your data as we always have. If you do want to know more about the data we hold and how we use it, continue reading through our privacy policy.
What is personal data?
Personal data is any information related to a living person (known as a data subject) that can be used, directly or indirectly (when combined with other information), to identify the person. It does not apply to non-living persons, for example, most corporate entities, but may apply to data we process about individuals connected with that corporate.
What personal data do we collect?
We may collect the following types of personal data about you:
- contact details such as name, address(es), telephone number(s), and email address(es)
- identification information such as date of birth, gender, nationality, residency, national insurance number, or other national identity numbers such as a passport number, driving licence, bank or building society account details, occupation, employment status, employer, and job title
We may also collect, store, and use the following special or sensitive personal data:
- physical health (medication, etc.)
- criminal proceedings and offences
We must have an additional legal ground to use this type of personal data, which is explained below in ‘How we will use your personal data’.
We may also collect, store, and use personal data, where you have provided this to us, in respect of third parties, such as spouses, civil partners, or dependants. If you do so, you are responsible for and confirm you are entitled to provide us with this information. You also confirm that you have informed those third parties of our identity and the purposes for which their personal data will be processed. You should draw their attention to this privacy policy. We will not use information except for the purpose for which you have provided it.
How we will collect your data
You may give your personal details to the company directly, such as on an application or registration form, or via our website. We may also collect them from another source. You may also provide your personal details via email or over the phone with one of our authorised representatives.
The company must have a legal basis for processing your personal data. For the purposes of providing you with our business services, we will only use your personal data in accordance with the terms of the following sections.
We may also receive information from third parties who contact us, such as His Majesty’s Revenue & Customs (HMRC), the Department for Work & Pensions (DWP), the police, or other government agencies.
How we will use your personal data
We will only use your personal data when the law allows us to and most commonly to provide our services and to comply with our legal requirements.
- to provide our services to you.
- to enable you to submit your information for a potential partnership with The OSS Group.
- to fulfil contractual obligations with our partners.
- to trusted third parties where we have retained them to provide services that you have requested. These third parties comply with similar and equally stringent undertakings of privacy and confidentiality as The OSS Group Ltd.
- to third parties who perform functions on our behalf and who also provide services to us, such as professional advisors and IT consultants carrying out testing and development work on our business technology systems. These third parties comply with similar undertakings of privacy and confidentiality.
- we will also use your personal information to create anonymous business statistics, from which you cannot be identified.
- we may also release personal information to regulatory or law enforcement agencies if they require us to do so. We will also disclose your information where we are permitted and requested to do so by law.
Your personal data is required by law and/or a contractual requirement. You are obliged to provide the personal data and if you do not, we will be unable to provide our services.
On rare occasions, we may also use your personal data where we need to protect your interests (or someone else’s interests) or where it is needed in the public interest, for example, for the investigation, detection, and prevention of crime.
How long we may retain your data for
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. We are legally required to retain certain financial and business-related records for up to 6 years after your last partnership with us for taxation audits from HMRC.
Who we share your data with
We utilise third parties and share your personal data directly with them to perform functions on our behalf and to provide services to you, such as payroll companies, accountants, brand marketers and IT support providers.
When legally necessary, we would share your data with government agencies, such as the courts, the police, HMRC, and others.
Your rights in connection with personal data
You can ask us to do certain things with your personal data, such as provide a copy of it, correct it, or even delete it. There may be occasions where we cannot comply with a request, and we will tell you if this is the case and give our reasons.
This will usually be for legal or regulatory reasons.
- Request access to your personal data – This enables you to confirm whether we process your personal data and to receive a copy of your personal data we are processing and certain information about how we use your personal data.
- Request correction of the personal data that we hold about you – This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request the erasure of your personal data – You can ask us to delete or remove personal data where the processing is no longer necessary for the original purpose, or where you withdrew your consent, or the processing is unlawful, or our personal data must be erased to comply with the law.
- Request the restriction of processing of personal data – You can ask us to restrict the processing of personal data where you think the personal data we hold is inaccurate until we can verify its accuracy, or you believe we no longer need to process your personal data (but you do not want it erased), or you wish processing to be restricted pending confirmation that our processing is based on our overriding legitimate interest.
- Object to processing of your personal data – You have the right to object to us processing your personal data where we are doing so based on our legitimate interest (for the purposes described in this privacy policy) unless we can demonstrate compelling grounds as to why the processing should continue in accordance with data protection laws.
- Request the transfer of your personal data to another party – In certain circumstances, you can ask us to send your personal data to a third party of your choice. This would be where it is information which is processed by us by automated means and you have consented to such processing or we need to process the information to perform our contract with you.
- Right to withdraw consent – If you have provided your consent to the processing of your personal data for a specific purpose, you have the right to withdraw your consent for the specific processing at any time.
How to exercise your rights
You can make a request by contacting The OSS Group Ltd. We will always ask you to confirm your request in writing. Your request will be acted upon within one month of you putting it through.
In most cases, we will not charge a fee to action your request. However, a reasonable administration fee may be charged if your request is deemed unfounded, excessive, or if further copies of your data are requested. For security, we may need you to confirm specific information on your identity before actioning a request to ensure that your personal data is not disclosed to any person who has no right to receive it.
Who to contact for queries about this privacy policy and how The OSS Group Ltd uses your data
If you have any enquiries in regard to this notice or any of The OSS Group Ltd’s policies or notices, you can contact us at info@theossgroup.com or in writing to:
Legal Team
The OSS Group Ltd
Unit 5 Kingsway Business Park
Oldfield Road
Hampton
TW12 2HD
Right to complain and who to complain to
If you wish to complain about this privacy policy or any of the procedures set out in it, you can contact us at info@theossgroup.com or in writing to:
Complaints Team
The OSS Group Ltd
Unit 5 Kingsway Business Park
Oldfield Road
Hampton
TW12 2HD
You also have the right to raise concerns with the Information Commissioner’s Office on 0303 123 1113 or at https://ico.org.uk/concerns/, or any other relevant supervisory authority should your personal data be processed outside of the UK, if you believe that your data protection rights have not been adhered to.
How we secure your personal data
We understand that having the correct measures to ensure your privacy is paramount. All of our data is held in highly-secure data centres and supported by Alchemy Systems Ltd to ensure the best-possible security for data.
Changes made to this privacy policy
We reserve the right to update this privacy policy at any time, and we will notify you if we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.
Where to find GDPR info/help:
https://www.jobsatteam.com/g-d-p-r
https://www.rec.uk.com/news-and-policy/policy-and-campaigns/GDPR