Riverbright Recruitment (Riverbright Limited) is committed to protecting your personal data and privacy. This policy outlines our approach to this, in line with GDPR regulations, and explains your rights and how the law protects you.
Information we collect, retain and use
From our candidates we generally collect data in the form of a CV which may include personal information such as your name, title, address, photograph, email address, telephone numbers, gender, date of birth, employment and education details.
Through telephone conversations, email, post, SMS text or meetings in person we may also collect other information such as salary details, notice period or any other relevant information which may help us in your job search.
If successful in finding you employment with one of our clients, we may need to seek (with your consent) reference information from previous employers.
This data is collected in one of the following ways;
Through a direct application to us, in respect to an available job opportunity, or via a third-party job board or similar advertiser
Through a third-party job board database, where you have made your CV and/or personal details available to view and download
Through professional social media sites such as LinkedIn
Through direct contact via telephone, email, post, SMS text or meetings in person
When you use or access our Site in connection with your use of our services
From third-party providers, services and public registers (for example, traffic analytics vendors
From our clients we generally collect data which is publicly available such as business addresses, telephone numbers, website addresses, email addresses and nature of business. Through conversations with individuals we may also collect job titles, direct email addresses and direct or mobile telephone numbers.
We take reasonable steps to ensure that data we hold is accurate, complete and up to date and we ask that you keep us informed of any changes.
How we use your personal data
To provide a recruitment service to both our candidates and clients, Riverbright Limited processes your data when it is in our legitimate interest to do so and these interests are not overridden by your data protection rights.
We will only ever use data when matching candidates to appropriate job opportunities or to provide information which we feel may be of benefit. Any decisions made when matching candidates to suitable job opportunities are carried out by an individual and not by automated software. We may periodically contact you via email or SMS text message, which you can unsubscribe from at any time by contacting email@example.com
We will only ever share your data with potential employers and only after we have received your full consent. Where data is shared, this is usually in the form of a CV which will include your first name, surname, town or postcode identifier (i.e. DY10), availability for employment and salary information. Where your original CV includes your full postal address, email address(es), telephone number(s), date of birth or any other personal information this will also be included unless you ask us to remove it.
We never sell on or share data with any other third-parties unless you request for us to do so or to;
Comply with any applicable law, regulation, legal process or governmental request
Enforce our policies (including our Agreement), including investigations of potential violations thereof
Investigate, detect, prevent or take action regarding illegal activities or other wrongdoing, suspected fraud or security issues
Establish or exercise our rights to defend against legal claims
Collaborate with law enforcement agencies and/or in case we find it necessary in order to enforce intellectual property or other legal rights
International transfer of data
Generally, we only deal with candidates and clients within the EEA (European Economic Area). However, if we do need to share your data with third-parties outside the EEA (for example, if you wish to apply for a position with a company outside the EEA) we will request your consent in each instance and take reasonable steps to ensure your data is handled securely.
We collect two types of data and information from Users;
Non-personal Information - Un-identified and non-identifiable information pertaining to a User(s), which may be made available or gathered via your use of the Site. We are not aware of the identity of a User from which the Non-personal Information was collected. Non-personal Information which is being collected may include your aggregated usage information and technical information transmitted by your device, including certain software and hardware information (e.g. the type of browser and operating system your device uses, language preference, access time, etc.) in order to enhance the functionality of our Site. We may also collect information about your activity on the Site (e.g. pages viewed, online browsing, clicks, actions, etc.).
Personal Information - Which is individually identifiable information, namely information that identifies an individual or may, with reasonable effort, identify an individual. Such information includes Device Information such as geolocation data, IP address, unique identifiers (e.g. MAC address and UUID) and other information which relates to your activity through the Site.
We may use the information for statistical and analytical purposes intended to improve the Site.
We understand the importance of protecting children’s privacy, especially in an online environment. The Site is not designed for or directed at children. Under no circumstances shall we allow the use of our services by minors without prior consent or authorisation by a parent or legal guardian. We do not knowingly collect Personal Information from minors. If a parent or guardian becomes aware that his or her child has provided us with Personal Information without their consent, he or she should contact firstname.lastname@example.org
A "cookie" is a small piece of information that a website assigns to your device while you are viewing a website. Cookies are very helpful and can be used for various different purposes. These purposes include allowing you to navigate between pages efficiently, enabling automatic activation of certain features, remembering your preferences and making the interaction between you and our services quicker and easier.
The Site uses the following types of cookies;
Session Cookies - which are stored only temporarily during a browsing session in order to allow normal use of the system and are deleted from your device when the browser is closed
Persistent Cookies - which are read only by the Site, saved on your computer for a fixed period and are not deleted when the browser is closed. Such cookies are used where we need to know who you are for repeat visits, for example to allow us to store your preferences for the next sign-in
Third-party Cookies - which are set by other online services who run content on the page you are viewing, for example by third-party analytics companies who monitor and analyse our web access
Cookies do not contain any information that personally identifies you, but Personal Information that we store about you may be linked, by us, to the information stored in and obtained from cookies. You may remove the cookies by following the instructions of your device preferences; however, if you choose to disable cookies, some features of our Site may not operate correctly and your online experience may be limited.
Access to your data is only permitted by employees of Riverbright Limited who are subject to a duty of confidentiality. All data is only ever stored in electronic format on secure, password protected servers or devices.
How long we keep your data
We will only retain your data for as long as necessary to fulfil the purposes we collected it for or until you request for it to be removed. As we support candidates over a period of many years, and potentially throughout their careers, the purpose for which we retain data, by means of legitimate interest, is often ongoing. If we have successfully found you employment with one of our clients, we will retain your information for as long as the employment continues to meet with regulatory obligations.
Your legal rights
Under data protection law you have clear rights which you can exercise at any time including;
The right to access your data
The right to enquire about the data that is being held and used
The right to make changes to the data that we hold for you
The right to restrict the use of your data where information is thought to be inaccurate or you object to your data being used
The right to request that your data is deleted
If you wish to exercise any of these rights, please contact using the details found below. This is free of charge and we endeavour to carry out all requests within 7 days.
32 MCF Complex
If, after you have spoken to us, you feel your concerns have not been resolved you have the right to contact the Information Commissioner’s Office (ICO) - the UK supervisory authority for data protection issues.
ICO organisation name: Riverbright Limited
ICO registration reference: ZA103141