We take our privacy seriously and are committed to protecting and respecting your privacy. Our policy applies to job applicants, business stakeholders and other third parties.

Our policy sets out the basis on which any personal data we that collect from you, or that you provide us, will be processed by us.

For applicable privacy legislation, the data controller is Brilliant Professional Services Limited. Our registration number with the Information Commissioner’s Office (ICO) is ZB657386. Our company registration number is 104 152 21. Our Registered Address is 1st Floor Isabella House 12 Union Court Richmond upon Thames London TW9 1AA.

Questions regarding this policy should be directed to our Data Protection Officer (DPO) who can be contacted at denton.muil@brilliantps.co.uk. The DPO is responsible for ensuring compliance with relevant data protection legislation and with this policy. Any questions about the operation of this policy or any concerns that the policy has not been followed should be referred to our DPOr.

1. THE INFORMATION WE HOLD
We collect, store, and use personal data (referred to in our privacy policy as personal information) as well as special categories of personal data (referred to in our privacy policy as sensitive personal information):

Job Applicants
Personal contact details such as name, title, address, telephone number, and e-mail address.

Recruitment information (including personal information such as copies of right to work documents, CV or cover letter sent as part of our application process).

Recruitment information contained on your CV submitted directly to us.
Information provided to us via recruitment partners in relation to your application for employment with us.
Information collected during your application including psychometric and personal profiling data.
Sensitive personal information including data relating to your health and other sensitive information where appropriate.

Business stakeholders
Contact details such as name, title, business telephone number and e-mail address.
Information that you provide, or that we collect during our interactions with you or your employer.
Other personal information you provide to us via our digital platforms, for example, the “Let’s connect” sections of our website.
Personal information provided to us by third-party service providers we work with.

General
When you visit our offices, images and videos are recorded by our security systems.
Information collected when you visit our offices via our visitor sign-in process, including your name, identity number, company details and vehicle registration number.

Any personal information you disclose to us during your interactions with us.
Information gathered by cookies used on our digital platforms. Our digital platforms may use cookies to distinguish you from other users of our platforms. This helps us deliver a Brilliant experience when you browse and allows us to improve your experience on our digital platforms.
Information provided to us by service providers we work with.

2. HOW WE USE YOUR PERSONAL INFORMATION
We will only use your personal information when the law allows us to. Some of the grounds on which we can use your personal information are as follows:

• You have given your consent for us to do so.
• In pursuit of our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• We need to enter or execute a contract we have entered with you, for example an employment contract.
• We have a legal obligation to fulfil.

Specific uses of your personal information include:

• To process an application for employment with us
• To carry out right to work checks.
• To carry out health checks.
• To carry out
• Disclosure and Barring Service (DBS) checks where necessary.
• Dealing with enquiries made via the “Let’s connect” buttons on our website so that we can give information about our business.
• Contact details so that we can tell you about our solutions and keep you updated about changes in our business.
• To do business with you.
• Where you have given us contact details to us to supply marketing information and market insights.
• To secure our premises and the people working at our premises.
• To comply with health and safety legislation.
• To maintain and enhance our digital platforms.
• To ensure that our digital platforms deliver relevant content on all the devices you use to interact with us.
• To trusted third party service providers and entities within the Brilliant Professional Services Group.
• To contact you if for permission to use your information for a purpose not set out in this policy.

3. CHANGE OF PURPOSE
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

4. THIRD PARTIES
We require third parties to respect the security of your personal information and to treat it in accordance with the law. Your personal information may be shared with:

• Technical support providers.
• Recruitment partners looking for Brilliant people to work in our business.
• Professional advisers such as bankers, lawyers, accountants, tax advisers, insurers, and business consultants.
• Marketing consultants and agencies.
• Third party software suppliers.
• Suppliers hosting our equipment in their data centres.
• Where relevant, contactors which assist us in delivering our services.

5. DATA RETENTION
We keep your personal data for as long as it is needed. Our data retention periods are based on the size, volume, nature and sensitivity of the data, the potential risk of unauthorised use or disclosure, the purposes for which the data is being used, and the legal requirements for holding the data.

Job Applicants
If your job application is successful, we will retain your data for the duration of your employment and for as long as future job opportunities are available.
Where your application for employment is unsuccessful, we will keep your personal information for as long as future job opportunities with us are available.

Business stakeholders
We will keep your personal information for as long as our business relationship continues, or for as long as there is an opportunity to do business with you in future.
We will deliver regular insights until you confirm that you no longer wish to receive them.

Security
Any data collected through our visitor sign-in system is stored for at least 365 days.
Any data collected through our CCTV system is stored for no longer than 365 days.

6. WHERE WE STORE YOUR PERSONAL DATA
Electronic versions of your personal information are stored on our servers.
Where we use trusted third-party service providers, your personal data may also be stored in accordance with their practices and procedures. We require third parties to respect your personal data and to treat it in accordance with the law.

7. RIGHTS OF ACCESS, CORRECTION, ERASURE AND RESTRICTION
By law you have the right to:

• Ask for access to your personal data, to receive a copy of the data we hold about you and to check that we are processing it lawfully.
• Ask for a correction of personal data we hold about you.
• Ask for the deletion of your personal data when there is no good reason for us to continuing processing it.
• Ask us to stop processing personal data.
• Ask for the restriction of processing of your personal data.
• Ask for the transfer of your personal data to another party.

To request to review, verify, correct, or delete of your personal data, object to the processing of your personal data, or request a copy of your personal information for a third party, contact our DPO in writing using the contact details provided.

8. ACCESS FEES
You will not need to pay to access your personal data. Unreasonable requests for data will be charged for or refused by us.

9. YOU NEED
To confirm your identity and right to access any personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to parties that have no right to receive it.

10. RIGHT TO WITHDRAW CONSENT
In limited circumstances where you may have provided your consent to the collection, processing, and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact our DPO in writing.

Where we are giving you marketing information, you can change your marketing preferences by using the unsubscribe button at the bottom of our marketing e-mails.

Once we have received notification that you have withdrawn your consent, we will no longer process your personal information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so.

11. FAILURE TO PROVIDE PERSONAL INFORMATION
If you fail to provide certain information when asked, we may not be able to execute the contract we have entered with you (such as providing you with our solutions), or we may be prevented from complying with our legal obligations.

12. RIGHT TO COMPLAIN
You have the right to make a complaint if you wish to do so. The organisation with oversight of our processing is the Information Commissioner’s Office(ICO), which can be contacted in writing at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, by telephone (0303 123 1113) or by e-mail (casework@ico.org.uk).

13. CHANGES TO THIS PRIVACY NOTICE
We may change this policy at any time, and any changes will become effective immediately. Changes we make to our privacy policy will be posted on this page and, where appropriate, notified to you.