Data privacy statement for candidates
Bud Financial Limited and its group companies (“we”, “our” or “us”) is providing this Data Privacy Statement to you because you are applying to work with us as an employee, worker or contractor.
This Data Privacy Statement sets out the basis on which we will process your personal information. Please read it carefully to understand our practices regarding your personal information and how we will use it.
If you applied to work with us through a third party service provider (such as Workable) you should read this Data Privacy Statement in conjunction with the data privacy statement that applies to applications made via the service provider. If you are unsure where to find this, please contact us using the details below.
Bud Financial Limited is the data controller of the personal data of its prospective employees, workers and contractors, and is subject to applicable data protection laws.
If you have any questions about this data privacy statement or your Information, or wish to exercise any of your rights as described in this Data Privacy Statement or under applicable data protection laws, you can contact the Data Protection Officer:
By email: [email protected]
What types of data are protected
This Data Privacy Statement applies to your “personal data”, which is any information relating to you as an identified or identifiable person. This data is referred to in this Data Privacy Statement as “Information”).
Special categories of personal data
Within the broad range of Information, the following are “special categories of personal data” which are subject to a greater degree of protection:
physical or mental health;
racial or ethnic origin;
trade union membership;
sexual life; and
genetic and biometric data.
What information we collect
Information you give us
You may give us Information by filling in forms online, by corresponding with us by phone, email, in person, or otherwise, or via a recruitment agency or other third party.
Information we collect about you
The Information that we may collect about you includes, but is not limited to, the following:
contact details (such as phone numbers and email addresses);
date of birth;
copies of your passport, driving licence and similar documents;
education history, training and professional experience;
current and past employment details;
immigration status and work permits;
languages spoken and level of proficiency;
other information given in your CV.
Special categories of personal data
Information includes such “special categories of personal data” (see the description provided above) as you and any medical professionals provide to us.
Information provided by third parties
We may also collect Information from external sources, such as those that are commercially available to us.
Some of the Information we collect (as described in section 4), and additional Information, may be provided to us by recruitment agencies or websites with whom you have registered an interest. Such recruitment agencies support our recruitment processes under a duty of confidentiality.
During the recruitment process, we may also research Information regarding your skills, experience or qualifications and comments and opinions made public on social networking sites such as LinkedIn, Facebook, Instagram and Twitter.
We may also receive Information from organisations that carry out pre-employment screening checks, credit reference agencies, fraud prevention agencies and referees.
Data relating to criminal convictions and offences
We may also collect and store personal data relating to criminal convictions and offences. This data is only processed:
if you have given your explicit consent to the processing; or
if it is necessary for the purposes of performing or exercising our or your obligations or rights under law; or
if it is necessary for the prevention or detection of an unlawful act and it is necessary for reasons of substantial public interest; or
in connection with any legal proceedings (including prospective legal proceedings) and/or the obtaining of legal advice.
What we do with your data and on what basis
We process Information (other than special categories of personal data) for the reasons listed below. The legal justification for the processing of the Information is, in each case, one or more of these reasons. Specific examples are given – some of which may overlap, as there may be more than one reason for processing Information.
Where we have a legal or regulatory obligation
UK and EU law and certain rules and regulations require us to process Information in order to comply with our legal or regulatory obligations. In order for us to do so, we may process Information for the following purposes (where applicable):
preventing illegal working;
complying with health and safety obligations;
ensuring the safety and security of our systems;
carrying out equal opportunities monitoring;
responding to government statistical monitoring;
liaising with HMRC and other government entities or agencies in relation to attachments of earnings and similar deductions;
assessing fitness and propriety of individuals for regulatory purposes;
obtaining regulatory references; and
communicating with the Prudential Regulation Authority, Financial Conduct Authority or other public or regulatory bodies.
Where we have a legitimate interest
Data protection law allows us to process Information where it is necessary for the purposes of our legitimate interests. We consider it to be in our legitimate interests to process Information for the following purposes:
recruitment processes (including negotiation and communicating with you in relation to your application);
considering your suitability for employment/work, taking up references, and conducting appropriate checks;
dealing with any legal disputes involving you or other prospective, current or former employees, workers or contractors;
monitoring equal opportunities;
reporting to government entities.
If you do not agree with the processing of Information on the basis that it is in our legitimate interests to do so, please inform us using the contact details at the beginning of this Data Privacy Statement, following which we shall cease to process Information for that purpose, unless certain exceptions apply: see “Right to object to processing in certain circumstances” under “Your rights” below.
Special categories of personal data
We may process “special categories of personal data” for the purposes of:
performing or exercising our or your obligations or rights under employment law or other laws, including for assessing suitability for particular jobs and considering whether adjustments may need to be made to accommodate an individual with a disability;
where it is in the public interest, such as for equal opportunities monitoring;
establishing, bringing or defending legal claims; and
in the case of information about your physical or mental health, to enable us to assess your working capacity and for occupational health purposes.
We may also process “special categories of personal data” in other limited circumstances, with your explicit written consent. We do not need your consent to process “special categories of personal data” in circumstances where we already have a legal right to do so and we carry out such processing in accordance with this Data Privacy Statement. If we do ask you for your written consent, we will provide you with full details of the information we are seeking from you and the reason why, in order for you to make an informed decision.
Disclosure of your information to third parties
For the purposes set out in section 7 above, we may share Information with:
our group companies;
professional advisors (including lawyers, accountants and auditors);
organisations carrying out pre-employment screening checks, credit reference agencies and fraud prevention agencies and other third parties involved in our recruitment processes;
legal and regulatory authorities such as the Prudential Regulation Authority and Financial Conduct Authority;
HM Revenue & Customs and other government/state related entities.
We may also disclose Information to third parties where it is in our legitimate interest to do so, including for the following reasons:
in the event that we sell or buy any business or assets, in which case we may disclose Information to the prospective seller or buyer of such business or assets; or
if we are under a duty to disclose or share Information in order to comply with any legal obligation.
Save as set out in this Data Privacy Statement, or as required by law, we do not sell Information or disclose it to any third parties without your consent.
Security of your information
We are committed to ensuring that your Information is safe and we will take all steps reasonably necessary to ensure that your Information is treated securely and in accordance with this Data Privacy Statement.
All Information you provide to us electronically is stored on our secure servers within the United Kingdom, with backups in Europe
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Information, we cannot guarantee the security of your Information transmitted to or stored on our IT system, and any transmission is at your own risk. Once we have received your Information, we will use strict procedures and security features to try to prevent unauthorised access.
How long we keep your information
We will keep your Information for as long as necessary to fulfil the purposes described in this Data Privacy Statement or in the terms of any contract that we enter into or for as long as we are required to do so by law or in order to comply with a regulatory obligation.
Access to your Information and updating your Information
You have the right to access Information that we hold about you, subject to certain limited exceptions provided by law. If you so request, we shall provide you with a copy of Information which we are processing and hold about you (“data subject access request”). For any further copies which you request, we may charge a reasonable fee based on administrative costs.
You also have the right to receive such Information in a structured and commonly used format so that it can be transferred to another data controller (“data portability”).
We want to make sure that your Information is accurate and up to date. You may ask us to correct or remove information which you think is inaccurate.
Right to object to processing in certain circumstances
You also have the right to object, on grounds relating to your particular situation, at any time to the processing of your Information which is based on our legitimate interests. Where you object on this ground, we shall no longer process your Information unless:
the processing is nevertheless necessary for the performance of a contract that you enter into with us; or
the processing is necessary for the establishment, exercise or defence of legal claims; or
we have a legal or regulatory obligation for which the processing of the Information is necessary; or
we can demonstrate that our legitimate interest is sufficiently compelling to override your fundamental rights and freedoms.
Your other rights
You also have the right to request that we rectify your Information if it is inaccurate or incomplete.
In certain limited circumstances, you have the right to request the erasure of your Information (‘right to be forgotten’).
Exercising your rights
You can exercise any of your rights as described in this Data Privacy Statement and under data protection laws by contacting us via the details given in the “Contacting us” box above.
Save as described in this Data Privacy Statement or provided under data protection laws, there is no charge for the exercise of your legal rights. However, if your requests are manifestly unfounded or excessive, in particular because of their repetitive character, we may either: (a) charge a reasonable fee, taking into account the administrative costs of providing the information or taking the action requested; or (b) refuse to act on the request.
Where we have reasonable doubts concerning the identity of the person making the request, we may request additional information necessary to confirm your identity.
We may transfer your Information to members of our group or service providers located in countries that may not offer equivalent data protection or privacy laws to those in the UK or the EU where authorised personnel may access your Information.
Regardless of where your Information is transferred, we shall ensure that your Information is safe and shall take all steps reasonably necessary to put in place appropriate safeguards to ensure that your Information is treated securely and in accordance with this Data Privacy Statement and applicable law. Details regarding these safeguards can be obtained from Data Protection Officer using the contact details given above.
You also have the right to complain to the Information Commissioner’s Office (https://ico.org.uk/) about our data processing activities. The Office has a dedicated helpline at 0303 123 1113.