Orridge & Co Ltd understands your privacy is important, this privacy statement explains what personal data Orridge & Co Ltd may process, how it may be processed and for what purpose.
Visitors to our website
For details on what cookies are and how Orridge uses them when you visit our website see https://www.orridge.eu/en/policies/cookies/
Google Analytics & Lead Forensics
When someone visits https://www.orridge.eu we use a third-party services, Google Analytics & Lead Forensics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow either Google or Lead Forensics to make, any attempt to find out the identities of those visiting our website.
People who email us
We use Transport Layer Security (TLS) to encrypt and protect email traffic in line with government cybersecurity recommendations. If your email service does not support TLS, you should be aware that any emails we send or receive may not be protected in transit.
We will also monitor any emails sent to us, including file attachments, for viruses or malicious software.
Third Party Service Providers
We may pass your information to our third-party service providers, agents, subcontractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf (for example to send you mailings). However, when we use third party service providers, we disclose only the personal data that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own purposes., please see the relevant section below based on the purpose of information.
General Enquiries;
We ask you for your personal details including name and contact details, this is for the purpose on contacting you as requested and you have the option to allow us to keep your details, so we can contact you in the future if we feel the services we provide may be of interest to you; we do not pass or sell your details to other parties for any reason than our business contact to you.
General Enquiries: Third Parties and the data shared with them
DMC Software Solutions, an Xperience Group business, provide our ACT CRM service, personal data is stored with this service provider but is not available for their use, data is stored and transmitted using encryption.
Dotmailer Ltd, provide email marketing services to us, limited personal data may be shared at times to enable marketing campaigns to be performed.
Job Applicants
What will we do with the information you provide to us?
All the information you provide during the process will only be used to progress your application, or to fulfil legal or regulatory requirements if necessary.
We will not share any of the information you provide during the recruitment process with any third parties for marketing purposes or store any of your information outside of the European Economic Area. The information you provide will be held securely by us whether the information is in electronic or physical format.
We will use the contact details you provide to us to contact you to progress your application. We will use the other information you provide to assess your suitability for the role you have applied for.
What information do we ask for and why?
The information we ask for is used to assess your suitability for employment by Orridge & Co Ltd. You do not have to provide what we ask for, but it might affect your application if you do not.
Job Enquiry via company website
We ask you for your personal details including name, address and contact details, how you heard about us and that you agree to us keeping your details for 6 months. We will also ask you to provide optional information about: –
- Whether you are currently studying in the UK.
- Your ability to drive, including, if you own a car, your driving licence type and licence number.
- Your weekend availability to work.
Job Application stage
We usually collect personal data directly from you when you apply for a role with us, such as your name, address, contact information, work and educational history, achievements and test results. We may also collect personal data about you from third parties, such as professional recruiting firms, your references, prior employers, to the extent this is permitted by applicable law.
Sensitive personal data is a subset of personal data and includes ethnicity, health, sexual orientation, as well as other categories as prescribed by law. We do not seek to obtain and will not collect such data about a candidate unless permitted to do so by applicable laws (e.g. equal opportunity monitoring).
Data from right to work documents including passport, birth certificate and immigration documents may be recorded when required by employment law.
Company Employees
What information we hold and what we do with the information
As your employer, the Company needs to keep and process information about you for normal employment purposes. The information we hold, and process will be used for our management and administrative use only. We will keep and use it to enable us to run the business and manage our relationship with you effectively, lawfully and appropriately, during the recruitment process, whilst you are working for us, at the time when your employment ends and after you have left. This includes using information to enable us to comply with the employment contract, to comply with any legal requirements, pursue the legitimate interests of the Company and protect our legal position in the event of legal proceedings. If you do not provide this data, we may be unable, in some circumstances, to comply with our obligations and we will tell you about the implications of that if applicable.
In carrying out our business of stocktaking for clients, we may sometimes need to process your data to pursue our legitimate business interests, for example to allow you access to clients’ sites by obtaining security clearance for you, such as airport security, government building or shopping centres, also to prevent fraud, administrative purposes or reporting potential crimes. We will never process your data where these interests are overridden by your own interests.
The sort of information we hold includes your application form and references, your contract of employment and any amendments to it; correspondence with or about you, for example letters to you about a pay rise or, at your request, a letter to your mortgage company confirming your salary; information needed for payroll, benefits and expenses purposes; contact and emergency contact details; records of holiday, sickness and other absence; information needed for equal opportunities monitoring policy; and records relating to your career history, such as training records, appraisals, other performance measures and, where appropriate, disciplinary and grievance records and any other such requirements.
Where necessary, we may keep information relating to your health, which could include reasons for absence and GP reports and notes. This information will be used to comply with our health and safety and occupational health obligations – to consider how your health affects your ability to do your job and whether any adjustments to your job might be appropriate. We will also need this data to administer and manage statutory and company sick pay.
We will not share any of the information you provide during the recruitment process with any third parties for marketing purposes or store any of your information outside of the European Economic Area. The information you provide will be held securely by us whether the information is in electronic or physical format.
We will use the contact details you provide to us to contact you to progress your application. We will use the other information you provide to assess your suitability for the role you have applied for.
Third Parties and the data shared with them
We share data with:-
- Other Christie group companies for the purpose of managing our business and providing payroll and other benefits and services to you as an employee.
- Government bodies as required by law or to validate your details, for example HMRC, DVLA and DWP.
- Ceridian/SDworx and WageStream for provision of Payroll services. Pension service providers Goddard Perry, Salvus Pensions and Scottish Widows.
- Car hire and leasing companies – Enterprise, Nexus and Arval UK, as well as insurance and car repair services -Autoglass; Insurance company Allianz; Driving license checking service with Licence Check Limited.
- Suppliers of business consumables, courier services and other business products, including Lyreco, XDP, TNT, Royal Mail and Refresh Cartridges.
- Business services providers -Microsoft Office 365, AWS, Vivantio helpdesk, Intercity Technologies telephony services, Druva data backup services.
Your rights
Under the Data Protection Act 1998 and the General Data Protection Regulation (GDPR) (EU) 2016/679, you have rights as an individual which you can exercise in relation to the information we hold about you.
You can read more about these rights here https://ico.org.uk/for-the-public/is-my-information-being-handled-correctly/
Access to personal information
Orridge & Co Ltd intends to be as open as it can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ‘subject access request’. If a subject access request is made, and we do hold information about you we will:
- Give you a description of it;
- Tell you why we are holding it;
- Tell you who it could be disclosed to; and
- Let you have a copy of the information in an intelligible form.
To make a request for any personal information we may hold, you need to put the request in writing addressing it to our Data Protection Officer via email at dpo@orridge.eu or writing to the address provided below.
If we do hold information about you, you can ask us to correct any mistakes by, once again, contacting the Data Protection Officer.
How long we keep information
Information pertaining to current client contracts or employment contracts will be kept for 7 years after the contract ends or is terminated to ensure the business covers any legal requirements.
Contact information for current, previous or prospective clients is retained indefinitely, this is to allow us to perform marketing for our services and products, marketing preferences and personal data is regularly reviewed to maintain accuracy, at any time anyone on the client database can request us to delete data about them, data will be removed unless required to be retained for legal purposes.
You can also get further information on
- Agreements we have with other organisations for sharing information.
- Circumstances where we pass on personal data without consent, for example to prevent and detect crime and to produce anonymised statistics.
- Our instructions to staff on how to collect, use and delete personal data; and
- How we check that the information we hold is accurate and up to date.
If you want to make a complaint about the way we have processed your personal information, you can contact us, once again, by contacting the Data Protection Officer.
If you are still not satisfied with the way your complaint was handled, you can refer your complaint to the UK Information Commissioner’s Office. https://ico.org.uk/concerns/
Changes to this privacy notice
We keep our privacy notice under regular review. This privacy notice was last updated on 24 May 2018.
Links to other websites
This privacy notice does not cover any links within this site linking to other websites. We encourage you to read the privacy statements on any other websites you visit.
Complaints or queries
We try to meet the highest standards when collecting and using personal data. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate.
How to contact us
If you want to request information about our privacy policy, you can email us at dpo@orridge.eu or write to:
Data Protection Officer
Orridge & Co
Centre House
Court Parade
Aldridge
West Midlands
WS9 8LT
