Privacy Policy for KDC Resource

Last Updated: [31/10/2024]

KDC Resource (“we,” “us,” or “our”) is a recruitment business that provides work-finding services to clients and job-seekers. To deliver these services, we need to process personal data (including sensitive personal data), meaning that we act as a data controller. This privacy policy outlines how we collect, use, and protect your personal information in line with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

If you have any questions about this policy, please contact us at dataprotection@kdcresource.com.

Contents

1. Collection and Use of Personal Data

a. Purpose of Processing and Legal Basis

We collect and process personal data (including sensitive data) to provide work-finding services, including contacting you about opportunities, assessing your suitability, updating our databases, arranging payments, and managing relationships with you and our clients. If you opt-in, we may also send marketing communications. You can unsubscribe anytime by clicking “unsubscribe” in our messages.

Our legal bases for processing personal data are:

  • Your consent
  • Our legitimate interests
  • Compliance with legal obligations
  • Fulfillment of contractual obligations

b. Legitimate Interests

We may process your data based on legitimate interests where it aligns with your expectations. Our legitimate interests include:

  • Managing our database and keeping records up-to-date
  • Providing work-finding services to you and clients
  • Seeking consent where necessary
  • Informing you about relevant services

c. Statutory/Contractual Requirements

We may need to collect personal data to fulfill legal and contractual requirements (e.g., for employment, tax, immigration compliance, or safeguarding). Without this data, we may not be able to provide work-finding services.

d. Data Recipients

We may share your data with:

  • Clients for work opportunities
  • Former employers for references
  • Payroll service providers and payment intermediaries
  • Partner recruitment agencies
  • Other companies within the KDC Group

2. Information Collection from Other Sources

a. Categories of Data

We may collect the following data:

  • Personal Data: Name, address, contact details, National Insurance number, nationality, IP address
  • Sensitive Data: Health information, criminal convictions

b. Data Sources

We may source personal data from:

  • Job boards (e.g., CV Library, LinkedIn)
  • Referees
  • Software providers supporting our services
  • Cookies as outlined in Section 7
  • Other companies within the KDC Group

3. Overseas Transfers

We may transfer your data outside the European Economic Area (EEA) for work-finding services. We ensure data protection and security standards are in place when handling your data outside the EEA.

4. Data Retention

We retain your data only as long as necessary for work-finding services or as required by law, such as payroll and tax records for HMRC. Upon expiry of the retention period, we may request your consent to extend it or delete your data if no consent is provided.

5. Your Rights

Under GDPR, you have rights regarding your data:

  • Right to be informed about our data processing
  • Right of access to your data
  • Right to rectification of inaccurate data
  • Right to erasure in certain circumstances
  • Right to restrict processing
  • Right to data portability
  • Right to object based on legitimate interests
  • Right not to be subject to automated decision-making and profiling
  • Right to withdraw consent at any time by contacting dataprotection@kdcresource.com


You may still receive processing notifications in cases where it’s legally required.

6. Automated Decision-Making

We do not make automated decisions based on your data without human intervention.

7. Cookies

Our website uses cookies to improve user experience. You can manage cookies through browser settings. Note that some website features may not function if cookies are disabled.

8. Log Files

We use IP addresses to analyze trends, administer the site, and track user movements, which are not linked to personally identifiable information.

9. Links to External Sites

KDC Resource’s website may link to external sites, and we are not responsible for their privacy practices. Please review their privacy policies when leaving our site.

10. Sale of Business

In the event of a sale or merger, your data may be transferred to new owners. We will inform you of any material changes to this policy.

11. Data Security

We implement robust security measures, including:

  • Firewalls with threat detection
  • Two-Factor Authentication for remote access
  • Unique logins and permissions for staff based on their roles


While we strive to protect your data, we cannot guarantee full security for internet-transmitted data. For additional security questions, email dataprotection@kdcresource.com.

12. Policy Updates

We may update this policy periodically and post revisions with effective dates. Material changes will be communicated to you.

13. Complaints or Queries

For questions or complaints about this policy, contact dataprotection@kdcresource.com.
If you believe your data protection rights are not upheld, you may also contact the UK Information Commissioner’s Office at 0303 123 1113 or ico.org.uk/concerns.