Privacy Policy

1. Important information and who we are

Purpose of this privacy notice

This notice describes how we gather and handle your personal information through this website, and through telephone and email contact with us. This site is not intended for children and we do not knowingly collect data about them.

Please read this notice alongside any other privacy information we give you when we collect your personal data, so that you are fully aware of how and why we are using it.

Controller

Archer Resourcing Limited is the controller responsible for your personal data. We are referred to below as Archer, we, us or our.

Changes to this notice, and your duty to inform us of changes

Previous versions of this notice are available on request. Please keep us informed if your personal information changes during your relationship with us.

Third party links

This website may include links to third party sites, plug-ins and applications. We do not control those sites and are not responsible for their privacy practices. Please read the privacy notice of every site you visit before sharing information with it.

2. What data do we collect about you?

Personal data means any information that identifies an individual. It does not include data where the identifiers have been removed. We may collect, use, store and transfer the following kinds of personal data about you:

• Identity data - first name, maiden name, last name, title, marital status, date of birth and gender.
• Contact data - address, email address and telephone numbers.
• Transaction data - details of job applications and survey participation.
• Technical data - IP address, login data, browser type and version, time zone and location, operating system and other device technology.
• Usage data - information about how you use this website.
• Marketing and communications data - your marketing preferences and preferred communication channels.
• Special categories of data - health information and criminal history, where relevant to a role.

We may ask for additional personal data when you apply for a job, and will process it for that purpose.

We also collect aggregated data such as statistical or demographic data. This is not personal data in law, because it does not directly or indirectly identify you. If we combine aggregated data with your personal data so that it can identify you, we treat the combined data as personal data.

If you fail to provide personal data

Where we need to collect personal data by law, or under the terms of a contract with you, and you do not provide it when asked, we may not be able to provide the service in question. We will tell you if that is the case at the time.

Hotjar

We use Hotjar to understand how people use our site so we can improve it. Hotjar collects behavioural data including de-identified IP addresses, screen size, device type, browser information, country-level location and preferred language. Hotjar stores this as a pseudonymised profile and is contractually prohibited from selling it.

3. How do we collect your data?

Direct interactions

You may give us your data by filling in forms, or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you apply for a job, ask us to contact you, subscribe to a service or publication, request marketing material, or give us feedback.

Automated technologies or interactions

As you use this website we automatically collect technical and usage data about your equipment, browsing actions and patterns. We collect this using cookies, server logs and similar technologies.

Third parties or publicly available sources

• Technical and usage data from analytics providers such as Google, based outside the EU.
• Identity, contact, special category and marketing data from affiliate companies, including payroll providers, recruitment agencies and employment businesses.
• Identity and contact data from publicly available sources such as recruitment websites.

4. How do we use your data?

We will only use your personal data when the law allows us to. Most commonly we will use it where we need to provide the services you have asked for, where it is necessary for our legitimate interests and your rights do not override those interests, or where we need to comply with a legal or regulatory obligation.

We do not generally rely on consent as a legal basis, other than for sending third party direct marketing by email or text. You can withdraw consent to marketing at any time by contacting us.

Marketing

We use your identity, contact, transaction, technical and usage data to form a view of what we think you may want or need. You will receive marketing from us if you have requested information, or applied for a role, and have not opted out.

Third party marketing

We will get your express opt-in consent before we share your personal data with any company outside Archer for marketing purposes.

Opting out

You can ask us to stop sending you marketing messages at any time by following the opt-out links in any message, or by contacting us. Opting out of marketing does not apply to personal data you have given us in the course of a job application.

Cookies

Cookies are small files placed on your browser or device that help us distinguish between users and improve your experience. You can set your browser to refuse cookies or to alert you when a site sets one, but some parts of this site may then become inaccessible or stop working properly.

• Strictly necessary cookies - required for the website to operate.
• Analytical and performance cookies - let us count visitors and see how they move around the site.
• Functionality cookies - recognise you when you return and remember your preferences.
• Targeting cookies - record your visit, the pages you viewed and the links you followed, and may be shared with third parties.

Third parties such as advertising networks and analytics providers may also set cookies that we do not control. Other than strictly necessary cookies, all cookies expire after two years.

Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another compatible reason. If we need to use your data for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so.

5. Disclosures of your personal data

We may share your personal data with:

• The third parties set out in the glossary at the end of this notice.
• Third parties to whom we may sell, transfer or merge parts of our business. If our business changes hands, the new owners may use your data in the same way as set out here.
• Banks and finance providers, where relevant.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our service providers to use your personal data for their own purposes, and only permit them to process it for specified purposes and in accordance with our instructions.

6. International transfers

Some of our external third parties are based outside the UK and the European Economic Area, so processing your personal data may involve a transfer of data out of those areas.

Whenever we transfer your personal data out of the UK or the EEA, we take steps to ensure a similar degree of protection is afforded to it. Please contact us if you would like details of the specific transfer mechanism we rely on.

7. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed without authorisation, altered or disclosed. We limit access to your personal data to those employees, agents, contractors and third parties who have a genuine business need to know it, and they are subject to a duty of confidentiality.

We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.

8. Data retention

We will only keep your personal data for as long as is necessary to fulfil the purposes we collected it for, including any legal, accounting or reporting requirements.

To decide the appropriate retention period we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, whether we can achieve those purposes another way, and the applicable legal requirements.

You may ask us to delete your data in some circumstances - see your legal rights below. We will retain a minimal record of your request where you have asked to be removed from a mailing list, so that we do not contact you again in error.

We may anonymise your personal data for research or statistical purposes, in which case we may use that information indefinitely without further notice to you.

9. Your legal rights

Under data protection law you have a number of rights in relation to your personal data:

• Request access to your personal data, so you can check we are processing it lawfully.
• Request correction of incomplete or inaccurate data, though we may need to verify the accuracy of what you tell us.
• Request erasure where there is no good reason for us to continue processing it, where you have objected, where processing was unlawful, or where we are legally required to erase it. We may not always be able to comply, and will tell you why at the time.
• Object to processing where we rely on a legitimate interest and something about your situation makes you want to object. You may also object at any time to processing for direct marketing.
• Request restriction of processing - for example while we establish the accuracy of data, or while we consider an objection you have raised.
• Request transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format. This applies only to automated information you initially consented to us using, or that we used to perform a contract with you.
• Withdraw consent at any time where we rely on consent. This does not affect the lawfulness of any processing carried out beforehand.

Exercising your rights

Contact the Data Privacy Manager using the details at the top of this notice.

No fee usually required

You will not have to pay a fee to access your personal data or to exercise any of your other rights. We may charge a reasonable fee, or refuse to comply, if your request is clearly unfounded, repetitive or excessive.

What we may need from you

We may need to request specific information to help us confirm your identity, which is a security measure to make sure personal data is not disclosed to anyone who has no right to receive it.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it may take longer if your request is particularly complex or you have made a number of requests, in which case we will notify you and keep you updated.

10. Glossary

Lawful basis

• Legitimate interest - our interest in conducting and managing our business so we can give you the best service and the most secure experience. We weigh the potential impact on you before we process your personal data for our legitimate interests, and we do not use your data for activities where our interests are overridden by the impact on you, unless we have your consent or are otherwise required or permitted by law.
• Performance of contract - processing your data where it is necessary to perform a contract you are party to, or to take steps at your request before entering into one.
• Comply with a legal obligation - processing your data where it is necessary for compliance with a legal or regulatory obligation.

Third parties

• Service providers acting as processors, including those based in the USA, who provide IT, cloud storage, mailing and system administration services.
• Companies and organisations advertising vacancies.
• Affiliate companies, including payroll providers, employment businesses and recruitment agencies.
• Professional advisers including lawyers, bankers, auditors and insurers based in the UK, who provide consultancy, banking, legal, insurance and accounting services.
• HM Revenue & Customs, regulators and other authorities based in the UK who require reporting of processing activities in certain circumstances.