Data Processing Notice for Contractors

Skillsearch is committed to protecting the privacy and security of your personal data as a contractor undertaking a
contract assignment through us.

We are legally required to inform you as a contractor about the basis on which we will hold, process and store your
personal data when we manage and administer a contract assignment on your behalf as a recruitment company.
These obligations are imposed on Skillsearch by the General Data Protection Regulation.

This Data Processing Notice sets out:

• Why we collect your personal data

• What personal data is collected
• How your personal data is held, shared, and stored as part of Skillsearch’s recruitment service.

Skillsearch defines our recruitment service (“Recruitment Service”) to mean:

• The registration and retaining of your personal data on our systems

• Assessing your personal data for its relevance to job roles for our clients on whose behalf we are acting
• Acting on your behalf as a recruitment agency by the submission of your personal data to our clients, the
arranging of interviews, relationship and offer management
• To keep you informed about new job roles that we register that match your skills and experience either
by phone, email or SMS
• The provision of general careers advice
• The administration of a contract (e.g. timesheets/payments/client liaison as required).

Throughout this notice we use the term “processing” to cover all activities involving your personal data, including
collecting, handling, storing, sharing, accessing, using, transferring and disposing of the data.

1. Why do we need to process your personal data?

We need to process your personal data in order for us to provide our Recruitment Service or, alternatively, as may
be required by law or regulatory requirements. We also hold your personal data in order to keep you informed about
other job opportunities and other recruitment related marketing activity such as salary surveys, legal events and
other information that we believe may be of interest to you. We are obliged to inform you that your personal data is
lawfully held and processed by Skillsearch and that we have a legitimate interest in holding your data for this specific
purpose.

2. What personal data may we process as part of the Recruitment Service

• Personal details (e.g., name, address, email address, telephone number(s), photo)
• Companies’ House records and filing information in relation to any limited company vehicle which you
use as a personal service company (“PSC”) and any office which you hold in the PSC (e.g. Director)
• Employment history (e.g. employer, dates, job titles, job description, previous employers)
• Contract rate
• Academic history (e.g. dates, institutions, professional qualifications and skills)
• Current and previous employer references (to include regulated references where necessary)
• Right to work in the UK (e.g. passport, photo driving licence)
• Bank account details, national insurance number, P45/P46 if you work for Skillsearch in a temporary
capacity
• Assessment results (e.g. psychometric, video or telephone assessments).

Registered in England & Wales No. 05735564. VAT No. GB 884 6420 95.
Registered office: Fourth Floor, Huntingdon House, 20 North Street, Brighton, BN1 1EB
In accordance with the Employment Agencies and Employment Business Regulations 2003,
Skillsearch conducts business as an Employment Agency and Employment Business.
As part of the Recruitment Service we may also capture some sensitive personal data about you (e.g. disability
information). We do this in order to make reasonable adjustments to our recruitment service.

3. Who do we share your personal data with?

Skillsearch will collect, process and hold your personal data on our systems in order to identify suitable roles for
you. Only with your consent will your personal profile be shared with and distributed to clients (or organisations
acting on behalf of our clients). Some of these clients may be located outside the European Economic Area (EEA).

As part of the Recruitment Service your personal data will also be shared internally and/or externally with the
following parties:

• Skillsearch’s employees and internal accounts function

• Clients of Skillsearch
• Companies who provide candidate interview and assessment services on our clients’ behalf
• Academic institutions (e.g. if we need to verify your qualifications)
• Third-party suppliers (or potential suppliers) who provide services to Skillsearch in relation to your contract
(e.g. external accounting functions, time recording portals and Skillsearch’s bank)).

4. Data security

Skillsearch has put in place appropriate security measures to prevent your personal data from being accidentally
lost, used, or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal
data to those employees, agents, contractors and other third parties who have a business need to know. They will
only process your personal data on our instructions, and they are subject to a duty of confidentiality. We will notify
you and any applicable regulator of a suspected breach where we are legally required to do so.

5. Data retention

Skillsearch will retain your personal data for as long as necessary in order to provide the Recruitment Service to
you and for the purposes of satisfying any legal, accounting, regulatory or reporting requirements.

6. Your rights in connection with the processing of your personal data

Skillsearch is obliged to inform you that you have the right to:

Request access to your personal data by means of a data subject access request. This enables you to receive a
copy of the personal data that we hold about you.

Request correction of your personal data

Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there
is no legitimate reason for us continuing to process it. You also have the right to ask us to delete or remove your
personal data where you have exercised your right to object to processing.

Object to processing of your personal data in circumstances where we are relying on a legitimate interest (or
those of a third party) and there is something about your particular situation which makes you want to object to
processing on this ground. You also have the right to object where we are processing your personal data for direct
marketing purposes

Request the restriction of processing of your personal data. This enables you to ask us to suspend processing
your personal data, for example if you want us to establish its accuracy or the reason for processing it.
Request the transfer of your personal data to another party

Withdraw your consent to the collection, processing and transfer of your personal data (“Opt-out”). You have the
right to Opt-out at any time. Once we have received notification that you have Opted-out we will no longer process
your personal data for the purpose of providing you with the Recruitment Service, unless we have another legitimate
basis for doing so in law

Please note that you will not usually need to pay a fee to access your personal data or to exercise any other rights.
However, Skillsearch may charge a reasonable fee if your access request for access is excessive. In such
circumstances, Skillsearch reserve the right to refuse to comply with the request.

To Opt-out or withdraw your consent please visit our website at https://www.skillsearch.com/optout

To make any other changes to how we process your personal data please email dataprotection@skillsearch.com
supplying your name and contact details.

8. Data Protection Officer

Skillsearch has appointed a Data Protection Officer (DPO), Richard Fisher, to oversee compliance with this notice.
If you have any questions about this notice or how we handle your personal data, please contact the Data Protection
Officer via email at dataprotection@skillsearch.com. You have the right to make a complaint at any time to the
Information Commissioner’s Office (ICO) which is the UK supervisory authority for data protection issues.

9. Criminal records checks

Skillsearch may ask questions about any prior civil or criminal proceedings you may have been subject to and may
also conduct criminal record checks.

10. Fraud prevention agencies

Skillsearch may undertake searches about you at fraud prevention agencies. This information may be accessed
from the UK and other countries and used by law enforcement agencies and by us and other employers (and
potential employers) to prevent fraud.

11. Regulatory screening

Skillsearch may undertake searches across any regulatory bodies or websites which are relevant to your
professional qualification(s).

13. Processing Conditions

Our entitlement to process your personal data is governed by a number of processing conditions. What this means
is that we must inform you that your personal data is lawfully held and processed by Skillsearch and that we have
a legitimate interest in holding your data in order to provide the Recruitment Service to you.
We have assessed our legitimate interest by applying a balance test to ensure that our right to hold and process
your personal data is not outweighed by risks to your rights, freedoms, and interests as a data subject.

This processing will always be fair and lawful and will at all times comply with the principles of applicable privacy
laws in the country where you have applied to be employed.

Skillsearch do not need your consent if we use special categories of your personal data in accordance with our
written policy to carry out our legal obligations. In limited circumstances, Skillsearch may approach you for your
written consent to allow us to process certain particularly sensitive data. If we do so, we will provide you with full
details of the information that we would like and the reason we need it, so that you can carefully consider whether
you wish to consent.

Changes to this Data Processing Notice

Skillsearch reserve the right to update this Data Processing Notice at any time. We may also notify you in other
ways from time to time about the processing of your personal data.