Privacy Policy

1. Introduction

CG & P Site Services Ltd ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit cgp-recruitment.co.uk (the "Website") in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our Website, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Website.

2. Data Controller

CG & P Site Services Ltd is the data controller responsible for your personal data. We are registered in England and Wales under company number 15397387.

3. Information We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Contact Information: Name, email address, telephone number, postal address
• Account Information: Username, password, and other registration details (if applicable)
• Communication Data: Information from enquiries, feedback, or correspondence you send to us
• Job Application Data: CV, employment history, qualifications, and other recruitment-related information

3.2 Information We Collect Automatically

• Technical Data: IP address, browser type and version, operating system, device information
• Usage Data: Pages visited, time spent on pages, links clicked, referring website
• Location Data: General geographic location based on IP address
• Cookies and Similar Technologies: See Section 11 (Cookie Policy) for details

4. Legal Basis for Processing

We process your personal data under the following legal bases as defined by UK GDPR:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you, or to take steps at your request before entering into a contract
• Legal Obligation: Processing is necessary for compliance with a legal obligation
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party (provided your interests and rights do not override those interests)

5. How We Use Your Information

We use your personal data for the following purposes:

• To provide and maintain our Website and services
• To process job applications and manage recruitment activities
• To communicate with you, respond to enquiries, and provide customer service
• To improve our Website, services, and user experience
• To send marketing communications (with your consent)
• To comply with legal obligations and resolve disputes
• To detect and prevent fraud, security breaches, and other illegal activities
• To analyse Website usage and conduct business analytics

6. Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

6.1 Service Providers

We may share data with third-party service providers who perform services on our behalf, including:

• Website hosting and cloud storage providers
• Email and communication service providers
• Analytics and performance monitoring services
• IT support and maintenance providers

6.2 Legal Requirements

We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., courts, regulatory bodies, law enforcement).

6.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your personal data may be transferred. We will notify you of any such change and the choices you may have.

6.4 With Your Consent

We may share your data for any other purpose with your explicit consent.

7. International Data Transfers

Some of our service providers may be located outside the United Kingdom. When we transfer your personal data outside the UK, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK authorities
• Adequacy decisions recognising that certain countries provide adequate data protection
• Other legally approved transfer mechanisms

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Job Applications: Up to 6 months after the recruitment process concludes (unless you consent to longer retention for future opportunities)
• Marketing Consents: Until you withdraw consent or for a maximum of 2 years of inactivity
• Website Analytics: Typically 26 months
• Legal/Accounting Records: As required by UK law (typically 6-7 years)

After the retention period expires, we will securely delete or anonymise your personal data.

9. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

9.1 Right of Access

You have the right to request copies of your personal data (Subject Access Request). We may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data in certain circumstances.

9.4 Right to Restrict Processing

You have the right to request restriction of processing your personal data in certain circumstances.

9.5 Right to Data Portability

You have the right to request transfer of your personal data to another organisation or directly to you in a structured, commonly used, machine-readable format.

9.6 Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests or where we use your data for direct marketing.

9.7 Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you.

9.8 Right to Withdraw Consent

Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time.

10. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection and security
• Secure backup and disaster recovery procedures

However, please note that no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

11. Cookie Policy

Our Website uses cookies and similar tracking technologies. Cookies are small text files placed on your device to collect standard internet log information and visitor behaviour information.

11.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Website to function properly
• Performance Cookies: Collect information about how visitors use the Website (e.g., Google Analytics)
• Functionality Cookies: Remember your preferences and choices
• Targeting/Advertising Cookies: Deliver relevant advertisements (if applicable)

11.2 Managing Cookies

You can control and/or delete cookies as you wish. You can delete all cookies already on your device and set most browsers to prevent them from being placed. However, if you do this, you may have to manually adjust some preferences every time you visit our Website, and some services and functionalities may not work.

For more information about cookies, visit www.allaboutcookies.org

12. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We recommend reviewing the privacy policies of any third-party websites you visit.

13. Children's Privacy

Our Website and services are not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal data without parental consent, please contact us, and we will take steps to delete such information.

14. Marketing Communications

With your consent, we may send you marketing communications about our services, job opportunities, and updates. You can opt out of receiving marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at chris@cgp-recruitment.co.uk
• Updating your preferences in your account settings (if applicable)

Please note that even if you opt out of marketing communications, we may still send you service-related communications (e.g., account notifications, legal updates).

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Effective Date"
• Sending an email notification (if you have provided your email address)
• Displaying a prominent notice on our Website

We encourage you to review this Privacy Policy periodically. Your continued use of the Website after changes are posted constitutes your acceptance of the updated policy.

16. Right to Complain

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

However, we would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us at: