What Type(s) of Information We May Collect

• Personal details which will include your name (including any middle names) or any other name you may have been previously known by, your date of birth, your contact details including your home address and any former addresses, telephone numbers, email addresses, your marital status, and other identifiers such as your passport and driving licence numbers (including the retention of copies of such documents).
• Sensitive information, (categorised under GDPR as special categories of information) such as health information as part of our obligations to ensure your health and welfare within the work environment.
• Bank account details and payment card details for the purposes of making or receiving payments, paying salaries, and complying with our obligations to tax authorities.
• Your employment history, qualifications, and details from any references you may provide to enable us to establish your suitability for employment with us.
• Financial information required to ensure our compliance with any obligations under Proceeds of Crime legislation.

What Processing of Personal Data We May Do

We will collect and process information about you in the following circumstances: 

Information you provide to us:

• When you apply for a position of employment (part-time, full-time, agency, or temporary) to assess your suitability for the position.
• When you enquire about or purchase any of our products or services to provide that product or service to you.
• When you send an email, letter, fax or telephone us for any reason to allow us to respond to you.

Information we may gain because of the relationship between you and us:

• We may record telephone conversations both to and from us.
• Website activity including cookies and IP addresses.

Information we gain from other sources about you:

• Credit Reference Agencies.
• Fraud Prevention Agencies.
• Medical Practitioners.
• Electoral Roll.
• Government agencies.
• To comply with any legal obligation as a consequence of a lawful order of a court of law or other competent authority.
• To share with other business functions within our group of companies.
• To share with third parties who we may employ to support the delivery of any of our services or products to you.
• We will not share your data for the purposes of direct marketing.

Why Your Information Will be Processed

• Where the processing is carried out in accordance with a contractual obligation between you and us.
• Where we are required to fulfil a legal requirement.
• Where the processing is required to protect the vital interests of the data subject or of another natural person.
• Where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
• We will also process your information to ensure that our requirement to document our processing activity for the purposes of audit, either internally or externally, complies with

Employee Rights under PDPL

Employees have rights to any data subject under the PDPL:

1. Right to Access

Employees can request a copy of all personal data held by the employer. Includes the purposes of processing and the recipients of their data.

2. Right to Rectification

Employees can request corrections if their personal data is inaccurate or incomplete.

3. Right to Erasure / Deletion

Employees can request deletion of personal data that is no longer necessary, unless legally required to retain it (e.g., payroll records for a certain number ofyears).

4. Right to Object

Employees can object to certain processing if it is not required for contract fulfillment, legal obligation, or legitimate interest.

5. Right to Withdraw Consent

If processing is based on employee consent (e.g., optional wellness programs), they may withdraw consent at any time.

6. Right to Data Portability

Employees may request their personal data in a structured, machine-readable format, if technically feasible.

Subject Access Requests

You have a right to obtain a copy of personal data we hold. You have the right to obtain:

• Confirmation from us that we are processing your personal data.
• A copy of your personal data.
• Any other supplementary information, which will include:
• the purposes of our processing;
• the categories of personal data concerned;
  • the recipients or categories of recipient we disclose the personal data to;
  • our retention period for storing your personal data or, our criteria for determining how long we will store it;
  • the existence of your right to request rectification, erasure or restriction or to object to such
• processing;
  • the right to lodge a complaint with the ICO or another supervisory authority;
  • information about the source of the data, where it was not obtained directly from the
• individual;
• the existence of automated decision-making (including profiling); and
• the safeguards we provide if we transfer personal data to a third world country or international organisation.

Fees for Processing a Subject Access Request (SAR)

Fees for making a subject access request will not be payable, unless the following circumstances apply:

• The request is manifestly unfounded;
• The request is excessive;
• Additional copies of data already provided under a subject access request are requested.

Complaints

If you have any cause for complaint in the way your data is processed, then please contact our Office Manager detailed above at your earliest opportunity.

You may also make a complaint to the local supervisory authority, e.g in the UAE this is the UAE Data Protection Office.

Disposal of Documents Containing Personal Data

Hard Copy (Paper) Documents;

• Paper documents containing personal data must NOT be disposed of by placing in a wastepaper basket. They MUST be placed in the confidential waste cabinets. On collection by an appointed sub-contractor, the documents will be safely and securely shredded and destroyed.
• Legal documents shall be disposed of in accordance with the requirements laid down by the relevant regulatory bodies.
• Shredding must be used to dispose of 'contract' or 'consent' documents.

Electronic Documents & End of Life Devices;

• Documents should be deleted when they are no longer required.
• When an existing device is to be re-used by a new/different employee, all personal data
• must be deleted from the device prior to being assigned.
• All end of life devices and hard disks will be sent to an external company for certified
• data deletion and destruction/re-use of the particular device.