Privacy Policy of ThistleBridge HR
At ThistleBridge HR, we are committed to protecting the privacy and security of the personal information we collect and process in the course of providing our human resources services. This Privacy Policy outlines how we collect, use, store, share, and protect your information, and your rights in relation to your personal data.
Who We Are
ThistleBridge HR is a human resources services provider based in Edinburgh, Scotland. We offer a comprehensive suite of services including Recruitment and Talent Acquisition, Employee Relations Consulting, Payroll Management, Training and Development Programs, HR Compliance and Advisory, and Workforce Planning.
Our contact details are:
ThistleBridge HR
2847 Heather Lane, Suite 4B
Edinburgh, EH12 5QQ
United Kingdom
Information We Collect
We collect various types of personal information depending on the nature of the services we are providing. This may include:
- For Recruitment and Talent Acquisition: CVs, résumés, application forms, contact details (name, address, email, phone number), employment history, educational background, professional qualifications, references, salary expectations, and other information related to job applications.
- For Payroll Management: Bank account details, national insurance numbers, tax codes, salary information, pension details, and other financial information necessary for payroll processing.
- For Employee Relations, Training, and Advisory Services: Information related to employee performance, disciplinary records, grievances, training needs, diversity information (where voluntarily provided and legally permissible), feedback, and other HR-related data.
- General Inquiries and Website Usage: Contact information provided through our website forms or direct communication, IP addresses, browser types, operating systems, and information about your interaction with our online platform (e.g., pages visited, time spent).
How We Use Your Information
We use your personal information for the following purposes, based on legal grounds:
- To provide our services: This includes facilitating recruitment processes, managing payroll, delivering training programs, providing HR advice, and fulfilling our contractual obligations. The legal basis for this processing is typically the performance of a contract with you or your employer, or to take steps at your request before entering into a contract.
- To comply with legal and regulatory obligations: Such as tax laws, employment laws, and health and safety regulations. The legal basis for this processing is compliance with a legal obligation.
- For legitimate business interests: Including improving our services, managing our business operations, internal record keeping, and ensuring the security of our systems. We ensure these interests do not override your fundamental rights and freedoms.
- With your consent: In some cases, we may ask for your explicit consent to process your information for specific purposes, such as marketing communications (if applicable). You have the right to withdraw your consent at any time.
Information Sharing and Disclosure
We do not sell your personal data. We may share your information with:
- Clients and employers: When providing recruitment or employee relations services, we may share relevant personal data with prospective employers or your current employer as part of our service delivery.
- Service Providers: We work with trusted third-party service providers who assist us in operating our business (e.g., IT support, cloud hosting, payment processors). These providers are contractually bound to protect your data and only use it for the purposes we specify.
- Professional Advisors: Such as lawyers, accountants, and auditors, where necessary for the provision of their services to us.
- Law Enforcement or Regulatory Bodies: If required by law or in response to a valid legal process, or to protect our rights or the safety of others.
Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include data encryption, secured networks, access controls, and regular security assessments. We also ensure that any third parties we share data with have adequate security measures in place.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The precise retention period will depend on the type of data and the specific service provided. For example, recruitment data may be kept for a period after an application is made to comply with legal obligations or for legitimate business interests related to future opportunities. Payroll data is stored in accordance with tax and financial regulations.
Your Data Protection Rights
Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, you have certain rights regarding your personal data. These include:
- The right to be informed: About how your personal data is collected and used.
- The right of access: To request a copy of the personal data we hold about you.
- The right to rectification: To request correction of inaccurate or incomplete data.
- The right to erasure ("the right to be forgotten"): To request the deletion of your personal data under certain circumstances.
- The right to restrict processing: To request that we limit the way we use your data under certain conditions.
- The right to data portability: To request that we transfer your data to another organization or directly to you, under certain conditions.
- The right to object: To our processing of your personal data if it is based on legitimate interests or direct marketing.
- Rights in relation to automated decision-making and profiling: To not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before processing your request.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on our website. We encourage you to review this policy periodically.
Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
ThistleBridge HR
2847 Heather Lane, Suite 4B
Edinburgh, EH12 5QQ
United Kingdom
Complaints
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues, if you believe your data protection rights have been infringed.