Privacy Policy

1. Introduction

Chelmark Staffing ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.chelmark.co.uk and use our recruitment services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

We collect information in the following ways:

2.1 Information You Provide Directly

• Job Application Data: When you apply for a position, we collect your name, email address, phone number, CV/resume, work experience, qualifications, and any additional information you provide in your application.
• Contact Form Data: When you contact us through our website, we collect your name, email, phone number, and message content.
• Chat Widget Data: Conversations in our live chat widget are recorded to improve our service and respond to your inquiries.
• Account Information: If you create an account, we collect login credentials and profile information.

2.2 Information Collected Automatically

• Usage Data: We collect information about how you interact with our website, including pages visited, time spent, links clicked, and referral sources.
• Device Information: We collect information about your device, including IP address, browser type, operating system, and device identifiers.
• Cookies: We use cookies and similar tracking technologies to enhance your experience. See our Cookie Policy for details.

2.3 Special Categories of Data

For certain roles (particularly in Care and Security sectors), we may process special categories of personal data including criminal conviction records and health information, with your explicit consent and in accordance with UK GDPR Article 9.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary to perform recruitment services and employment contracts.
• Legitimate Interests: To improve our services, prevent fraud, and maintain website security.
• Consent: Where you have explicitly consented to processing, such as for marketing communications.
• Legal Obligation: To comply with UK employment law, tax requirements, and regulatory obligations.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Processing and managing job applications
• Matching candidates with suitable positions
• Conducting background checks and DBS clearance verification
• Communicating with you about job opportunities and application status
• Providing customer support through our live chat and contact forms
• Improving our website functionality and user experience
• Complying with legal and regulatory obligations
• Preventing fraud and ensuring website security
• Sending marketing communications (with your consent)

5. Data Sharing and Disclosure

We may share your personal data with:

• Employers: We share candidate information with prospective employers for job matching and recruitment purposes.
• Service Providers: Third-party providers who assist with background checks, DBS verification, and data storage.
• Legal Authorities: When required by law or to protect our legal rights.
• Other Recruitment Partners: With your consent, we may share your profile with affiliated recruitment agencies.

We do not sell your personal data to third parties for marketing purposes. All data sharing is conducted in compliance with UK GDPR requirements.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Specifically:

• Job Applicants: CV and application data retained for 12 months unless you request deletion sooner.
• Placed Candidates: Employment records retained for 7 years for tax and legal compliance.
• Contact Form Submissions: Retained for 2 years for customer service purposes.
• Chat Records: Retained for 6 months for service improvement and dispute resolution.

You may request deletion of your data at any time, subject to legal retention obligations.

7. Your Rights

Under UK GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data we hold.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your data (subject to legal obligations).
• Right to Restrict Processing: Request limitation of how we use your data.
• Right to Data Portability: Request your data in a portable format.
• Right to Object: Object to processing of your data for specific purposes.
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time.

To exercise any of these rights, please contact us at [email protected] or call 0121 269 0130.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• SSL encryption for data transmission
• Secure password protection and authentication
• Regular security audits and vulnerability assessments
• Limited access to personal data (staff need-to-know basis)
• Data processing agreements with all service providers

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your data is primarily processed and stored within the United Kingdom. If we transfer data internationally, we ensure appropriate safeguards are in place in compliance with UK GDPR.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete such information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a revised "Last Updated" date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

13. Data Protection Officer

If you have concerns about our data processing practices, you may also contact the Information Commissioner's Office (ICO):