bfpeople understands that your privacy is important and that you care about how your personal data is used and shared. We will only collect and use personal data in a manner that is consistent with our obligations and your rights under the law.
What does this policy cover?
bfpeople is a recruitment and business psychology consulting firm. We support organisations in the recruitment, assessment, development and retention of their key talent. We operate throughout the United Kingdom, and world-wide.
bfpeople is the trading name of BFP Projects Limited, a limited company registered in England under company number 6845577, whose registered address is 16 Jubilee Parkway, Jubilee Business Park, Derby, DE21 4BJ.
What information do we collect?
We collect information (“Personal data”) that is used to provide our services to you as a candidate or as a client.
You might provide information through visiting, or completing forms or surveys, on our site, by sending an email to us or by applying to a job advertised in third party media. We may also receive information if you use other websites we subscribe to. This includes, public and commercial databases, job boards and CV databases, social media platforms and any information that is in the public domain. We may also collect data from telephone and face to face discussions as well as through electronic, or online communications.
We may also collect information about you from clients when engaged on projects, for example during assessment, development or coaching assignments.
We may collect some, or all, of the following personal and non-personal data:
Your name; date of birth; gender; business/company name; job title; profession; career history and qualifications; contact information such as email addresses and telephone numbers; demographic information such as post code, preferences, and interests; where appropriate, information about your renumeration; your nationality, visa and “right to work” information; information from referees and employers; IP address; web browser type and version; operating system; a list of URLs starting with a referring site and your activity on Our Site; any other information you provide to us.
You have the following rights under the GDPR, which this Policy and our use of personal data have been designed to uphold:
The right to be informed about our collection and use of personal data; the right of access to the personal data we hold about you; the right to rectification if any personal data we hold about you is inaccurate or incomplete; the right to ask us to delete any personal data we hold about you; the right to restrict (i.e. prevent) the processing of your personal data; the right to obtain a copy of your personal data to re-use with another service or organisation); the right to object to us using your personal data for particular business purposes
If you have any cause for complaint about how we use your data, please contact us we will do our best to solve the problem for you.
For further information about your rights, please contact the Information Commissioner’s Office.
How we use your data
Our use of your personal data will always have a lawful basis, either because it is necessary for the performance of our business or a contract with you, because you have consented to our use of your personal data (e.g. by submitting your CV or subscribing to emails), or because it is in our legitimate interests. Specifically, we may use your data for the following purposes:
Carrying out our business, or contract with you; providing and managing your Account; providing and managing your access to our site; personalising and tailoring your experience on our site; supplying our products and services to you; personalising and tailoring our products and services for you; replying to emails from you; supplying you with information you have requested; analysing your use of our site and gathering feedback to enable us to continually improve Our site and your user experience;
We may also use your data for marketing purposes which may include contacting you by email, telephone, text message and/or post with information, news and offers on our products and services. You can opt out of receiving this information at the point that you first complete a form on our site, or at any time by sending an email.
You have the right to withdraw your consent to us using your personal data at any time, and to request that we delete it.
Due to the nature of our business (recruitment, assessment, coaching and development) it is common that candidates and clients are in contact with us regularly, often over many years. We are also obliged to retain records for many aspects of our business – e.g. if you have been interviewed for, or placed, in a job role with a client. Therefore, we will retain your personal details until you request us to permanently delete them.
Do We Share Your Data?
We will never share your personal data with anyone, or any third party, unless it is for the sole purpose of carrying out our business with you – and then only with your permission.
We may share your data with our clients in the delivery of our services (e.g. if you are shortlisted for a recruitment assignment or your employer sponsors an assessment, development or coaching project). This will only happen with your knowledge and permission.
We may share your data with member companies of our global network, Executive Resources International. This will only happen with your knowledge and permission.
We may use third parties to supply products and services to you on our behalf. These may include associate consultants or firms, payment processing, publishers of psychometric tests and questionnaires, search engine facilities, advertising, and marketing. We will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights and our obligations.
We may compile statistics about the use of our site including data on traffic, usage patterns, user numbers, sales, and other information. All such data will be anonymised and will not include any personally identifying data, or any anonymised data that can be combined with other data and used to identify you. We may, from time to time, share such data with third parties such as prospective investors, affiliates, partners, and advertisers. Data will only be shared and used within the bounds of the law.
We may be legally required to share your personal data, for example, where we are involved in legal proceedings, or where we are complying with legal requirements, a court order, or a government authority.
What happens if our business changes hands?
We may expand or reduce our business and this may involve the sale and/or the transfer of control of all, or part, of our business. Any personal data that you have provided will be transferred to the new owner if it is relevant. The new owner will be permitted to use that data only for the same purposes for which it was originally collected by us.
If any of your data is to be transferred in this way, you will be contacted in advance and informed of the changes. When contacted you will be given the choice to have your data deleted or withheld from the new owner.
Where do we store your Data?
We only keep your personal data for as long as we need to in order to use it as described above and/or for as long as we have your permission to keep it.
Some or all of your data may be stored outside of the European Economic Area. You are deemed to accept and agree to this by using our site and submitting information to us. If we do store data outside the EEA, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK and under the GDPR.
Data security is very important to us and we have taken suitable measures to safeguard and secure all data collected. The steps we take include:
- We subscribe to Microsoft Office 365 which offers industry-leading security measures and privacy policies to safeguard data.
- Our website is secured with SSL, the standard security technology for establishing an encrypted link between a web server and a browser. This ensures that all data passed between the web server and browsers remain private.
- Our database and CRM, which stores candidate and client information is encrypted and has a secure connection from our browsers to the database service.
- The database network is gated and screened by certified Intrusion Detection/ Intrusion Prevention Systems. All accesses of data are controlled and audited.
- Access to all bfpeople data sources is controlled using multi-factor authentication and controls are in place to restrict the ability to download or alter data.
Your right to withhold information
How can you access your data?
You have the right to ask for a copy of any of your personal data held by us (where such data is held). Under the GDPR, no fee is payable and we will provide any and all information in response to your request free of charge. We will supply this information as soon as practical and we may contact you to confirm your identity and the details of your request. We will only supply information that is associated with the email address that you use to send your request.
Third party Cookies used on our site include advertising services, pixel tags and website analytics services – a set of tools used to collect and analyse usage statistics, enabling us to better understand how people use our site.
Before Cookies are placed on your computer or device, you will be shown a pop-up bar requesting your consent to set those Cookies. By giving your consent to the placing of Cookies you are enabling us to provide the best possible experience and service to you. You may, if you wish, deny consent to the placing of Cookies; however certain features of our site may not function fully or as intended.
You can also change your browser settings to manage the cookies that are stored on your computer. For help with configuring this for your specific browser, visit this site.
BFP Projects Limited is registered with the Information Commissioner’s Office: Registration Number Z3323284