At Eastside People, we are committed to protecting your personal data and handling it with transparency and integrity. This privacy policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Eastside Consulting Ltd, trading as Eastside People is the data controller responsible for your personal data. If you have any questions about this privacy statement or how your data is handled, please contact us at:
- [email protected]
- 0203 821 6174
- Eastside People, Canopi, 82 Tanner Street, London SE1 3GN.
2. Why we collect your personal data
We collect and process your personal data for the following purposes:
- Responding to your enquiries or requests.
- Providing our services to you.
- Administering events or training sessions.
- Surveys for sector research
- Recruitment and employment purposes.
- Marketing and communication purposes (where consent is given).
- Complying with legal and regulatory obligations.
- Improving our website and user experience through cookies.
3. Legal basis for processing
We rely on the following legal bases to process your personal data:
- Your consent (where required).
- Performance of a contract or to take steps at your request before entering a contract.
- Compliance with a legal obligation.
- Our legitimate interests, where such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
4. Types of personal data we collect
Depending on your interaction with us, we may collect the following personal data:
- Name, address, email, and telephone number.
- Job title and organisation (if applicable).
- CVs, covering letters, and employment history.
- Communication preferences and marketing consents.
- Feedback, survey responses, and event attendance data.
- Technical data such as IP address, browser type, and cookies.
5. Recruitment and CV data
If you apply for a job or submit a CV to Eastside People, we will use your personal data to process your application and assess your suitability for the role. We will retain CVs and application data for up to 12 months after the closing date of the vacancy, even if your application is unsuccessful, in case future opportunities arise. After this period, your data will be securely deleted unless you give us consent to retain it for longer.
6. Sharing your personal data
We do not sell your personal data. We may share your information with:
- trusted service providers and contractors who assist us in delivering our services
- regulatory bodies or legal authorities when required by law
- organisations involved in events or recruitment processes, with your consent.
7. International data transfers
If your personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO).
8. Data retention
We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements. This includes the following retention periods for specific categories of data:
- Enquiries and contact form data: Retained for up to 5 years after last contact.
- Client and partner contact data: Retained for the duration of the relationship, up to 6 years thereafter for legal purposes, and up to 20 years where this relates to a client project.
- Recruitment and CV data: Retained for up to three years if the application is unsuccessful unless consent is given for longer.
- Financial and transaction data: Retained for at least 6 years in line with accounting standards and up to 20 years where this relates to a client project.
- Website usage and analytics cookie data: Retained for no longer than 2 years.
9. Your data protection rights
Under the UK General Data Protection Regulation (UK GDPR), you have the following rights in relation to your personal data:
- Right of access. You can request a copy of the personal data we hold about you.
- Right to rectification. You can ask us to correct inaccurate or incomplete data.
- Right to erasure. You can request the deletion of your data, also known as the ‘right to be forgotten’.
- Right to restrict processing. You can ask us to limit the way we use your data in certain circumstances.
- Right to object. You can object to our processing of your data when processing is based on our legitimate interests or for marketing purposes.
- Right to data portability. You can ask us to transfer your data to another service provider in a usable format.
- Right to withdraw consent. Where we rely on your consent to process data, you can withdraw it at any time.
- Right to lodge a complaint. You have the right to raise concerns with the Information Commissioner’s Office (ICO) if you believe we have not complied with data protection laws.
To exercise any of your rights, please contact us at: [email protected].
10. Automated decision-making
We do not use automated decision-making or profiling with legal or similarly significant effects.
Please read our policy on AI in recruitment here.
11. Cookies and website usage
Our website may use cookies and similar technologies to enhance your experience. You can manage your cookie preferences through your browser settings or by using the cookie preferences button in the bottom left corner of our website.
12. Updates to this privacy statement
We may update this policy occasionally to reflect changes in our practices or legal obligations. Please check our website for the latest version.
