GDPR Compliance

1. Our Commitment

Newstone Talent Solutions Ltd is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We recognise the importance of protecting personal data and ensuring that individuals' privacy rights are respected and upheld.

2. Data Controller

Newstone Talent Solutions Ltd is the data controller for personal data collected through our website and recruitment services. Our registered office is in London, United Kingdom. Company number 11366729.

3. Lawful Basis for Processing

We process personal data on the following lawful bases under UK GDPR:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as marketing communications.
• Contract: Where processing is necessary for the performance of a contract with you, such as providing recruitment services.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: Where processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and interests.

4. Individual Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right to be informed: You have the right to be informed about the collection and use of your personal data.
• Right of access: You have the right to request access to your personal data and receive a copy.
• Right to rectification: You have the right to have inaccurate personal data corrected or completed if it is incomplete.
• Right to erasure: You have the right to request the deletion or removal of your personal data where there is no compelling reason for its continued processing.
• Right to restrict processing: You have the right to request the restriction or suppression of your personal data.
• Right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
• Right to object: You have the right to object to processing based on legitimate interests or direct marketing.
• Rights related to automated decision making: You have the right not to be subject to a decision based solely on automated processing.

5. Data Protection Measures

We have implemented comprehensive technical and organisational measures to ensure the security of personal data:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication procedures
• Staff training on data protection and confidentiality
• Incident response and breach notification procedures
• Regular review and update of security measures

6. International Transfers

We primarily process personal data within the United Kingdom and the European Economic Area. Where we transfer personal data outside these areas, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to protect your data in accordance with UK GDPR requirements.

7. Data Breach Procedures

In the unlikely event of a personal data breach, we have procedures in place to detect, report, and investigate the breach. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.

8. Making a Complaint

If you have any concerns about our data protection practices, please contact us in the first instance. You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. The ICO can be contacted at ico.org.uk.

9. Contact Information

For all data protection matters, including exercising your rights under GDPR, please contact us at info@newstonetalent.com or write to the Data Protection Officer at Newstone Talent Solutions Ltd, London, United Kingdom.