Privacy Policy

At ITUS Limited we process personal data for 5 main reasons:

  • To act as agents to our clients and associated functions in that role;
  • As employers;
  • In the performance of a supplier contract;
  • For the prevention or detection of crime;
  • If we have permission from the user, or where otherwise allowed by law, to market services to them.

Who we share information with:

We will not share your information with any third parties UNLESS

  • It is necessary in the performance of our contractual obligation to you;
  • They are a third party data processor acting on our instruction;
  • We are required to by law.

Clients

IITUS is the data controller for the information you provide for the duration of our client/agent relationship unless otherwise stated. If you have any queries about the process or how we handle your information please contact us

In the negotiation stage we will process some of your personal data by consent to explore the possibility of our professional relationship. If that relationship does not proceed to a mutually agreed contract we will retain only such data as we are required to by law and in accordance with our retention policy.

When you become our client we will collect contact information such as name, location, job title, email address and telephone number. We may also hold information including, but not limited to, copies of passports, National Insurance numbers, all contact details including those of next of kin, driving licences, bank account details, dates of birth, VAT information, Power of Attorney, beneficiaries, trustees, wills, passports of those who represent the estates of the deceased and unions.

In addition we will process financial information which can include, but is not limited to, pension details and social security numbers, accountant details, visa details (for working abroad), accident reports along with insurance and medical records.

We will process this data because the processing is necessary for the performance of our mutually agreed contract.

In relation to the special category data we hold about you we will process this in accordance with Article 9(2)(a) of the GDPR, i.e. that we have your explicit consent to the processing of such data.

In certain circumstances we may hold information about criminal convictions or offences which you may have incurred. If this is the case we will process this data in accordance with Article 10 of the GDPR (and/or any subsequent legislation contained in the Data Protection Bill). In any event we will only process the information if it is required for providing your rights and freedoms. We do not keep a comprehensive register of our clients’ criminal convictions.

Where we store your personal data

The majority of our client data is stored on a centralised computer system managed by a data processor. Most members of staff have access to this system to enable them to act on your behalf. Where there is special category data or information relating to criminal convictions this will be kept by the agent and/or assistant in a secure place where access is restricted.

Employees

ITUS is the data controller for the information you provide during the employment and application process unless otherwise stated. If you have any queries about the process or how we handle your information please contact us.

What will we do with the information you provide to us?

All of the information you provide during the process will only be used for the purpose of undertaking the assignment for you, or to fulfil legal or regulatory requirements if necessary.

We will not share any of the information you provide during the process with any third parties for marketing purposes or store any of your information outside of the European Economic Area. The information you provide will be held securely by us and/or our data processors whether the information is in electronic or physical format.

What information do we ask for, and why?

We do not collect more information than we need to fulfil our stated purposes and will not retain it for longer than is necessary.

The information we ask for is used to gain an understanding of your needs and prepare our internal scoping documents

ITUS is the data controller for the information you provide for the duration of our contractual relationship unless otherwise stated. If you have any queries about the process or how we handle your information please contact us.

In the negotiation stage we may process some of your personal data by consent to explore the possibility of our professional relationship. If that relationship does not proceed to a mutually agreed contract we will retain only such data as we are required to by law and in accordance with our retention policy.

We will process this data because the processing is necessary for the performance of our mutually agreed contract.

In relation to the special category data we hold about you we will process this in accordance with Article 9(2)(b) of the GDPR, i.e. that that the processing is necessary for the purposes of carrying out the obligations and exercising specific rights of ITUS or of the data subject in the field of investigations in so far as it is authorised by Union or Member State law or a collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject.

Where information is kept

Data is kept in electronic and hard copy files securely and accessed only by the managing partner and his team

Use of data processors

Data processors are third parties who provide elements of our insurance schemes. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.

Use of other third parties

Some third parties with whom we share your data are data controllers in their own right in which case they will have their own retention periods.

We have contracts with all third parties to ensure the security of your data that we share with them.

How long is the information retained for?

The information you provide during the assignment process will be retained by us as part of your client file for the duration of the assignment plus 6 years. This includes your criminal records declaration, records of any security checks and references.

Information generated throughout the assessment process, for example interview notes, is retained by us for one year following the closure of the campaign.

Visitors to our website

We do not use cookies on our website so do not track any personal information about visitors to our website.

Others

There may be other individuals with whom we do business and for whom we hold personal data, such as those who work for supplier companies. We process this information in accordance with our contracts with those organisations.

Your Rights

Under current UK data protection legislation, you have rights as an individual which you can exercise in relation to the information we hold about you.

You can read more about these rights here – https://ico.org.uk/for-the-public/is-my-information-being-handled-correctly/