This policy explains when and why we collect personal information about people who visit our website and register with us: how we use it; the conditions under which we may disclose it to others; and how we keep your information secure.
For the purpose of the United Kingdom General Data Protection Regulation (GDPR), the Data Controller is Precise Consultants Limited (Company Reg. No. 08517073 - Registered Office: 14 Devonshire Sqaure, London, EC2M 4YT, UK). Precise Consultants is registered with the Information Commissioner’s Office (the supervisory body in the UK) under registration reference: ZA114256.
We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information, by which you can be identified, when using this website; you can be assured that it will only be used in accordance with this privacy policy.
Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. By using our website, you’re agreeing to be bound by this Policy.
Our Data Protection Appointed Person is Derya Aydogan our Operations Director, who can be contacted at derya@preciseconsultants.com or +44 (0) 2033 250 616.
Precise Consultants processes your information to provide you with our services. In some cases, we collect information to meet our legal and contractual obligations. We will never collect any unnecessary personal data from you and do not process your information in any way, other than as specified in this notice.
The personal information we collect includes your name, address, contact details, IP address, including sensitive personal data (medical details, information in your CV and other application documents such as passports and other certificates); and information regarding what pages are accessed and when; If you contact us, we keep a record of that correspondence; We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them; Details of your visits to our website including, but not limited to, location data, communication data, and the resources that you access; We may be required to take up references, credit checks and other lawful checks.
Special Categories Data - where we obtain and process any special category information, we do so in complete compliance with the Article 9 requirements and have high-level encryptions and protections on all such data. Explicit consent is required before this type of data can be processed and shared. Within our industry, special categories of data would be recording languages, physical conditions such as medical reports and allergies, and genetic and biometric data (bideltoid shoulder measurements, PPE and ID’s). Where we rely on consent for processing, this is explicit, with the right to modify or remove consent being clearly signposted.
Precise Consultants will not in any case submit your details to any client or other third party without your permission.
We obtain information about you when you use our website, for example, when you contact us about our services, when you apply for a job, when you register for a personal profile, when you submit your CV and when you sign up to receive our fortnightly newsletter. By providing any personal information, the User will agree to the collection and use of the data in accordance with this Privacy Policy.
The personal information provided by the User may be retained by Precise Consultants to keep track of the User's access to the website, to create a profile of the User to better serve it, or to contact the User either electronically or otherwise. Precise Consultants does not intend to retain User's personal information longer than is necessary for the purpose for which it was collected.
We will use your information and the subsequent information we collect about you in the following ways:
We mainly collect your personal data for the performance of a contract or to provide a service.
Precise Consultants takes your privacy very seriously and will never disclose or share your data without your consent; unless required to do so by law. We only retain your data for as long as is necessary and for the purpose(s) specified in this notice.
Precise Consultants’ lawful basis for processing non-sensitive data is ‘legitimate interests’. We confirm that we hold your data on our database with the sole purpose of finding you jobs that match your skill sets and experience. Upon placement stage, when the processing of sensitive categories of data is required as per our clients’ requirements for HSE purposes – we will rely on your consent before processing and sharing this type of data.
Precise Consultants’ lawful basis for processing non-sensitive client data is ‘legitimate interests’. We confirm that we hold your data on our database with the sole purpose of providing qualified personnel for project requirements you have. We do not process any high-risk categories of data of yours.
The data that we collect from you is stored on Bullhorn (our CRM platform) and Outlook (our email server) and may be sent across to our clients and their end clients, for placement purposes, only upon receiving your permission for this type of sharing. Data will in some instances also be shared with payroll companies but only as per your instructions.
We have agreements in place with all of our Data Processors to ensure your data is processed safely. All Processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy notice, the data protection laws and any other appropriate confidentiality and security measures. Our Data Processors are Xero (accounting software), Bullhorn (CRM provider), Microsoft Outlook (email server), Red Door IT (specialist IT company), Benchmark (direct marketing mailing platform), SurveyMonkey (customer satisfaction forms) and Top Resourcing (CV formatting company).
In addition to the primary stakeholders involved in data handling, sensitive data may also be shared with various additional third parties. These include medical assistance providers, particularly in emergencies where prompt medical intervention is necessary. Travel suppliers may also receive sensitive data to facilitate travel arrangements and ensure smooth logistical operations. Furthermore, insurance brokers and underwriters may access such data for conducting sanctions checks, managing insurance-related clearances, and to process claims efficiently.
Where you have chosen a password, which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We do not store this information on our end. We ask you not to share a password with anyone.
We only ever retain personal information for as long as is necessary and we have strict review and retention policies in place to meet these obligations. These are available upon request.
Any documentation we have of yours with expiry dates (passports, medical and safety certificates, GHIC/EHIC, Seaman’s Books, Emergency Contact Forms and Payslip permissions.) we will delete safely from our CRM platform upon expiry. We will keep your personal details on our system until you request us to remove this data. Precise Consultants will first check whether there is a regulatory reason we need to keep this data; the regulatory reason would outweigh the individual's rights under the GDPR. For example, we are required under UK tax law to keep your basic personal data (name, address, contact details) for a minimum of 6 years, after which time it will be destroyed.
Where you have consented to us using your details for direct marketing, we will keep such data until you notify us otherwise and/or withdraw your consent.
As per the UK General Data Protection Regulation (GDPR), the user (data subject) is entitled to the following:
Please note: Precise Consultants will not give out information that affects the privacy of someone else (i.e. we will not disclose any data that allows the individual to identify a third party).
If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.
We may share your personal data with:
We may also disclose your personal data to third parties:
In order to obtain references about you from those third parties if required within the scope of our Services
When we share your personal data as described above, such personal data may be transferred outside the UK.
In the event that we transfer your personal data internationally, we will only do so in line with applicable law, and we will require that there is an adequate level of protection for your personal data, and that appropriate security measures are in place.
Your personal data may be transferred from the UK to countries located within the EEA and to countries located outside of the EEA (such as the United States). In such cases, we will require that the following safeguards are observed:
Precise Consultants takes the privacy and security of individuals and their personal information very seriously and take every reasonable measure and precaution to protect and secure the personal data that we process. We have robust information security policies and procedures in place to protect personal information from unauthorized access, alteration, disclosure or destruction and have several layers of security measures including, but not limited to: a bi-annual information security training program, code of conduct, SSL security, firewalls, asset disposal strategies, internet and emails usage strategies, data retention and erasure policies, access authentications, no BYOD strategy, cyber insurance, malware protection, highest level of database encryptions on data entry fields and files, email encryption, access controls, password policies, desk policies, encryptions, data backup strategies, pseudonymization, access restrictions, and 24/7 specialist IT support.
You are not obligated to provide your personal information to us, however, as this information is required for us to provide you with our services, we will not be able to offer some/all our services without it.
We only process your personal information in compliance with this privacy notice and in accordance with the relevant data protection laws. If, however you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information, you have the right to lodge a complaint with the supervisory authority.
Please contact the Information Commissioner’s Office, the UK’s supervisory body, to complain.
Last updated: 23/10/2023