Who we are:
Wheat Search Ltd, headquartered at 68 Lombard Street, London, EC3V 9LJ
Company number: 8491523.
What do we do as a firm?
Wheat Search Ltd engages in executive search and a variety of related services.
As such the company gathers personal data to carry out these services to its clients. Personal information is stored, processed and transferred at various stages of these services both during and sometimes after client engagements are completed.
We are committed to engendering a culture of accountability, integrity and confidentiality in all aspects of the organisation in regard to personal data and security.
Purpose of this policy:
The purpose of this policy is to confirm how Wheat Search Ltd uses your personal data. This policy has been amended in response to the General Data Protection Regulation that becomes enforceable in May 2018.
What does this policy cover?
What rights and choices you have when it comes to us using your personal data
How you can contact us
- The different types of data we collect about you
- How and why we collect and use your personal data
- How long we keep your personal data
- What is the legal basis for using your personal data
When, how and why we share your personal data
The data we collect about you:
We use your personal data to match your skills, experience and education with a potential employer. Initially we would collect basic information in relation to your name, contact details and job role in order to share with a potential employer. Once we have your permission we may gather and share more personal information from you in the form of a CV, compensation details and references, in assessing your suitability.
We may also need to collect sensitive personal information about you that may include your nationality, visa status and other information relating to any background screening we are required to provide future employers through our contractual obligations. We would only collect this information if you provide us with your consent to do so.
How do we collect your personal data?
We may collect personal data about you from the following sources:
- From you directly
- Publicly available sources
- LinkedIn or other social networking sites
- Corporate websites
- References – by word of mouth
If you are not already known to Wheat Search Ltd and we collect any of your personal data, we will let you know within 30 days of doing so. This will initially be via phone or email.
If we collect any sensitive personal data (as outlined above), for such data, we require your explicit consent.
Why do we collect your personal data?
We collect personal data to enable us to match you to career opportunities that we have been engaged to work on by our clients. This may be for a permanent employment opportunity, temporary opportunity or a consulting engagement. Collecting and exchanging personal data is an essential process in order to assess suitability for potential roles, to build market insight and our client obligations.
This is the legitimate interest as to why we collect and use your personal data.
How long do we keep your data for?
We will only keep your personal data for as long as we need to fulfil our client obligations or our legal requirements.
We have initially agreed to operate on the recommendation of the Association of Executive Search and Leadership Consultants (AESC) of holding data for 6 years. If there is no contact between you and Wheat Search Ltd during this time, all your personal data will be securely deleted.
Legal basis for holding your data:
The basis for holding your personal data is determined on one or more of the following reasons:
- Legitimate interest (outlined above) and where we will ensure the data is accurate and we have been transparent with you
- Wheat Search Ltd.’s contractual obligations
- Legal obligations under applicable law to retain records for a certain period
- Your consent
- Potential disputes
- If you withdraw consent and request to be removed
- Change in guidelines relating to data protection.
Who do we share your personal data with?
We will only share your personal data with clients who have a contractual agreement with Wheat Search Ltd to hire a position that may be relevant to you.
With your permission, we may be required to transfer your personal data outside the EAA for a suitable role opportunity with one of our clients. Privacy laws in these countries may be different to your home country. Where we do transfer your data to a country which has not been deemed to provide adequate data protection standards we always have security measures in place to protect your data.
Your basic personal data is also available to Wheat Search Ltd employees.
Wheat Search Ltd has a legitimate business interest in processing data to service its clients’ obligations. Processing would include, but not be restricted to, updating and keeping information accurate relating to: contact details; address; employment status; employers; roles; titles; compensation and a track record of correspondence through email, telephone conversations, face to face meetings or other communication. We recognise we have a requirement to ensure this data is accurate for the purposes of legitimate interest, contractual obligations and most importantly your rights as an individual.
Bank account data processing would only be incurred for those on the Wheat Search payroll for contracting purposes.
What are your rights?
By law you have certain rights available to you regarding your personal data. Further information is available from your country data regulator.
- The right to be informed – you have the right to be provided with transparent, coherent information about how we use your data and your rights in relation to the use of your data. That is why we’ve provided this policy.
- The right of access – you have the right to access your information (if we are processing it) and certain other information (such as provided in this policy). This is so you are aware and check we are using it in accordance with the data protection law.
- The right to rectification – you have the right to have your information corrected if it is inaccurate or incomplete.
- The right to erasure – this enables you to request the deletion or removal of your information where there is no compelling reason for us to continue using it. There are exceptions to the right to erasure.
- The right to restrict processing – You have the right to “block” or surpass further use of your information. When processing is restricted, we can still store your information, but may not use it further. We will keep a list of those who have asked for it to be restricted so that their request is respected.
- The right to object to processing – you have the right to object to certain types of processing, including processing for direct marketing, including for the purposes of potential opportunities.
- The right to lodge a complaint – you have the right to make a complaint about the way we handle or process your data with your national data protection regulator.
- The right to withdraw consent – if you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). This includes your right to withdraw your consent with us for marketing purposes.
Access to your information:
You may request information about the personal data we hold. Subject access requests should be sent to email@example.com. Handling of these requests will be free of charge but we may charge a reasonable fee if we receive repeated or excessive requests or further copies of the same information. We will respond within 30 days of submitting the request.
Updates to this Policy:
We will keep this policy updated in response to changes in data privacy law and any changes to our business. Please review this policy for updates.
How do you contact us?
If you are unhappy with how we have handled your personal data, or have further questions on the processing of your personal data please contact us at: firstname.lastname@example.org or at:
68 Lombard Street