1. ABOUT US

We value the personal data that individuals, clients and organisations choose to share with us and we take their privacy very seriously. This Privacy Notice sets out the categories of personal data we may ask you to supply, why we need that data, how we will use it and how long we will retain it. We are a data controller for the purpose of all personal data we process and our contact details are as follows: Home Hospitality Ltd, Old Anglo House, Mitton Street, Stourport, DY13 9AQ lauren@homehospitality.co.uk 07845 822 638 We undertake to draw this Privacy Notice to the attention of all relevant parties, and should you engage our services we will take it to mean that you are satisfied with its contents. Should you have any concerns or wish to discuss the contents of this notice further, please contact Lauren at lauren@homehospitality.co.uk. We may update this notice from time to time. When we do, we will publish any material changes on our website or, where necessary, we will inform you using other communication channels.

2. CLIENT DATA

Where you engage our services, we will inevitably process some of your personal data. This policy sets out what data will be typically need, what we will do with it and how long we will keep it. What personal data might we need? We will only collect the personal data necessary to facilitate our interaction with you, this means information without which we would not be able to provide you with the requested services. Categories of personal data we may collect from you include: a) Your name; and b) Your contact details (email address, phone number). We do not seek to obtain personal data that falls outside the scope of this Privacy Notice and we kindly request that individuals do not furnish us with any unnecessary personal data. In accordance with data protection legislation we may destroy personal data supplied to us where we do not believe we have a sufficient legal basis to retain it. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. Why do we need your personal data? In order to process your personal data, we must have a good reason (a ‘legal basis’) for doing so. We process your personal data for the following reasons: a) Processing is undertaken for a legitimate interest pursued by us. If we have provided you with our services we may contact you about other services, promotions or offers we think may be of interest to you; b) Processing is necessary for the performance of a contract we have with you, such as us providing you with products or services you have requested; and/or c) Processing is required of us by law, for example, where we have a legal obligation to retain client records or to help us establish, exercise or defend legal claims. How will we use your personal data? We may use your data in the following ways: a) To provide you with the services detailed on our website; b) For marketing purposes: keeping you informed about our services; c) To comply with our legal obligations; and d) To help us to establish, exercise or defend legal claims;

3. CANDIDATE DATA

In order to provide you with our recruitment services we will need to process your personal data. This policy sets out what data will typically need, what we will do with it and how long we will keep it. Where we do not obtain your personal data directly from you, for example from LinkedIn or another recruiter, we will let you know the identity of the third-party that supplied us with your information. What personal data might we need? We will only collect the personal data necessary to facilitate our interaction with you, this means information without which we would not be able to provide you with our services. Categories of personal data we may collect from you include: a) Your name; b) Your contact details (email, address, phone number); c) Your CV; and/or d) Your career history. We do not seek to obtain personal data that falls outside the scope of this Privacy Notice and we kindly request that individuals do not furnish us with any unnecessary personal data. In accordance with data protection legislation we may destroy personal data supplied to us where we do not believe we have a sufficient legal basis to retain it. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. Why do we need your personal data? In order to process your personal data, we must have a good reason (a ‘legal basis’) for doing so. We process your personal data for the following reasons: a) Processing is undertaken for a legitimate interest pursued by us. If you have sent us your CV or posted it online, we take this to mean that you are happy for us to contact you regarding any recruitment opportunities we think may be suitable for you; b) Processing is necessary for the performance of a contract we have with you, such as an agreement to provide you with work-finding services; and/or c) Processing is required of us by law, for example, where we have a legal obligation to retain information or to help us establish, exercise or defend legal claims. How will we use your personal data? We may use your data in the following ways: a) To provide you with our recruitment services, such as sending your CV and associated information to potential employers; b) For marketing purposes to keep you informed about our services; c) To comply with our legal obligations; and d) To help us to establish, exercise or defend legal claims.

4. THIRD PARTY PROCESSORS

From time to time, only where necessary to facilitate our relationship with you, we may transfer your personal data to our third- party data processors. Processors have obligations under the data protection legislation with regards to your data as well as obligations in accordance with their contractual relationship with us. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. We will alert you to your information being transferred to a third party processors in advance.

5. MARKETING

Where we have already provided you with our services in some way we may contact you with regards to other services, promotions or events that we believe you may be interested in. If you do not wish to hear from us, please let us know. If you have given us your consent to contact you by email or other means for marketing purposes we will only use the personal data provided for this purpose and your details will not be passed to any third parties. You have the right to withdraw your consent for processing at any time and should you wish to do so, please contact us or follow the unsubscribe option in the email you receive. Once we have received notification that you have withdrawn your consent, we will no longer contact you for marketing purposes and, subject to our retention policy, we will dispose of your personal data securely.

6. RETAINING YOUR PERSONAL DATA

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. We have legal obligations as a company and as a recruiter, to retain records containing personal data, even after the main purpose of our relationship has ended. In accordance with our obligations, legal documents will be retained for 6 years, after which archived files are destroyed. Nevertheless, for all personal data, once our obligation to retain the data ceases, we will cease processing and destroy it. We maintain appropriate security measures to prevent the misuse, loss or disclosure of your personal data. For candidate data, where we have not had any significant communication with you for ten years, we will delete your personal data, save where we believe in good faith that the law or any relevant regulators require us to keep it. Significant communication includes contact initiated by you or us concerning recruitment or other services and where you send us any updated CV or contact information.

7. YOUR RIGHTS

You have the right to access the personal data we hold for you and the right to request that your personal data be rectified, erased or transported to another data controller. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. You may also request that we erase all your data that we hold or that we restrict processing. Should you wish to exercise any of these rights, please contact Home Hospitality using the contact information provided above. You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.