Vetting Solutions provides innovative and effective pre-employment screening and background checks to the public and private sectors. Vetting Solutions is the controller and responsible for your personal data when you register or visit our Site. When you engage with us to use the products or services that we provide, Vetting Solutions acts as a processor, in that we process the personal data you provide in accordance with your instructions as data controller.
Our full details are:
Data Protection Officer
Vetting Solutions Limited
Basepoint Business Centre
377-399 London Road
Telephone: +44 (0)1276 415818
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
Information you provide on a voluntary basis
We may collect, store and process personal information about you in the course of our business, including through your use of our website, when you contact or request information from us, when you engage us to provide our products or services or as a result of your relationship with one or more of our staff or clients. This information may include:
The provision of such information is voluntary, however, failure to provide certain information may affect your experience of our website, as well as the goods and/or services we are able to offer. Some of the information may include sensitive information, the processing of which is either based on a legal obligation or on your freely-given consent (which can be withdrawn at any time), as appropriate in each case.
Personal data we collect automatically
When you visit our website, certain information may automatically be collected and stored on our servers for the purpose of system administration, security, backup and technical support and for statistical use. Such information may comprise may include:
We may use your information for the following purposes:
Fulfilment of Services
We collect and maintain personal information that you voluntarily submit to us during your use of the Site and/or our Services to enable us to perform the Services.
What is our legal basis? It is necessary for us to process your information to perform our obligations in accordance with any contract that we may have with you. It is in our legitimate interest or a third party's legitimate interest to use your personal information in such a way to ensure that we provide the very best client service we can to you or others.
Our Site uses various user interfaces to allow you to request information about our Services including electronic enquiry forms and a telephone enquiry service. Contact information may be requested in each case, together with details of other personal information that is relevant to your Service enquiry. This information is used in order to enable us to respond to your requests.
What is our legal basis? It is in our legitimate interest or a third party's legitimate interest to use your personal information in such a way to ensure that we provide the very best client service we can to you or others.
We use your personal information for the following business administration and legal compliance purposes:
What is our legal basis? Where we use your personal information in connection with a business transition, to enforce our legal rights, or to protect the rights of third parties it is in our or a third party's legitimate interest to do so. For all other purposes described in this section, it is our legal obligation to use your personal information to comply with any legal obligations imposed upon us.
We use your personal information for the following recruitment purposes:
What is our legal basis? Where we use your personal information in connection with recruitment it will be in connection with us taking steps at your request to enter a contract we may have with you or it is in our legitimate interest to use personal information in such a way to ensure that we can make the best recruitment decisions for Vetting Solutions. We will not process any special category data except where we are able to do so under applicable legislation or with your explicit consent.
We carry out the following marketing activities using your personal information:
We use information that we observe about you from your interactions with our Site, our email communications to you and/or with Services to send you marketing communications.
What is our legal basis? It is in our legitimate interest to use your personal information for marketing purposes. We will only send you marketing communications where you have consented to receive such marketing communications, or where we have a lawful right to do so.
Client insight and analysis
We analyse your contact details with other personal information that we observe about you from your interactions with our Site, our email communications to you and/or with our Services such as the Services you have viewed.
By using this information, we are able to measure the effectiveness of our content and how visitors use our Site and our Services. This allows us to learn what pages of our Site are most attractive to our visitors, which parts of our Site are the most interesting and what kind of offers our registered users like to see. We also use this information for marketing purposes (see the marketing section above for further details).
What is our legal basis? Where your personal information is not in an anonymous form, it is in our legitimate interest to use your personal information in such a way to ensure that we provide the very best products and services to you and our other clients. Any other purposes for which we wish to use your personal information that are not listed above, or any other changes we propose to make to the existing purposes will be notified to you using your contact details, where available.
Legal basis to use or process your personal information
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
We share personal information with third parties who perform services on our behalf. These third parties are not authorised by us to use or disclose the information, except as necessary to perform services on our behalf or comply with legal requirements. We may share personal information with analytics and search engine providers that assist us in the improvement and optimisation of our website. Where a condition of us entering into a contract with you, we may share personal information with credit reference agencies for the purpose of assessing your credit score.
We may also share the personal information we obtain with our affiliates, subsidiaries and other group companies. If we share your personal information with such persons, we will ensure that an adequate level of protection is in place to protect your personal information in accordance with applicable law.
We may also disclose information about you in the following circumstances:
We reserve the right to transfer any information we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganisation, dissolution or liquidation), but only where we have first taken reasonable steps to ensure the security and confidentiality of your information.
In order to provide the Services, we may need to transfer your personal information to locations outside the jurisdiction in which you provide it. If you are based within the European Economic Area (EEA), please note that where necessary to deliver the Services, this may involve the transfer of your personal information to countries outside the EEA. Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring an appropriate safeguard is implemented.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
For visitors to the Site, we will retain relevant personal information for at least three years from the date of our last interaction with you and in compliance with our obligations under the EU General Data Protection Regulation or similar legislation around the world, or for longer if we are required to do so according to our regulatory obligations or professional indemnity obligations.
For Service provision to any client, we will retain relevant personal information for at least six years from the date of our last interaction with that client and in compliance with our obligations under the EU General Data Protection Regulation or similar legislation around the world, or for longer as we are required to do so according to our regulatory obligations or professional indemnity obligations. We may then destroy such files without further notice or liability.
If personal information is only useful for a short period e.g. for specific marketing campaigns, we may delete it.
You have the following rights in relation to the personal information we hold about you:
Your right of access
If you ask us, we'll confirm whether we're processing your personal information and, if necessary, provide you with a copy of that personal information (along with certain other details). You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
Your right to rectification
If the personal information we hold about you is inaccurate or incomplete, you are entitled to request to have it rectified. If you are entitled to rectification and if we've shared your personal information with others, we'll let them know about the rectification where possible. If you ask us, where possible and lawful to do so, we'll also tell you who we've shared your personal information with so that you can contact them directly.
Your right to erasure
You can ask us to delete or remove your personal information in some circumstances such as where we no longer need it or if you withdraw your consent (where applicable). If you are entitled to erasure and if we've shared your personal information with others, we'll let them know about the erasure where possible. If you ask us, where it is possible and lawful for us to do so, we'll also tell you who we've shared your personal information with so that you can contact them directly.
Your right to restrict processing
You can ask us to 'block' or suppress the processing of your personal information in certain circumstances, such as where you contest the accuracy of that personal information or you object to us. If you are entitled to restriction and if we've shared your personal information with others, we'll let them know about the restriction where it is possible for us to do so. If you ask us, where it is possible and lawful for us to do so, we'll also tell you who we've shared your personal information with so that you can contact them directly.
Your right to data portability
You have the right, in certain circumstances, to obtain personal information you've provided us with (in a structured, commonly used and machine-readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.
Your right to object
You can ask us to stop processing your personal information, and we will do so, if we are:
Your right to withdraw consent
If we rely on your consent (or explicit consent) as our legal basis for processing your personal information, you have the right to withdraw that consent at any time.
Your right to lodge a complaint with the supervisory authority
If you have a concern about any aspect of our privacy practices, including the way we've handled your personal information, you can report it to the relevant Supervisory Authority.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Please note that some of these rights may be limited where we have an overriding interest or legal obligation to continue to process the data or where data may be exempt from disclosure due to reasons of legal professional privilege or professional secrecy obligations.
Published 24th May 2018