The Harvey Nash Group, including all Harvey Nash Group subsidiary companies together, (“Harvey Nash”) is a leading global recruitment consultancy and outsourcing company working on an annual basis with thousands of candidates and clients world-wide.
Our reputation as a recruiter is reliant on the trust of people we work with, and consequently the effective and professional use of the information you provide us is paramount.
Your privacy is important to us, and we are committed to protecting and safeguarding your data privacy rights.
We respect your right to privacy. Our overall aim is to ensure that our collection and use of personal information is appropriate to the provision of services to you and is in accordance with applicable data protection laws.
Important definitions in this policy
What does Harvey Nash do?
Where does Harvey Nash collect data from?
What information do we collect on Candidates?
What information do we collect on Client contacts?
What is our lawful basis for processing your personal data?
How do we share your personal information and who do we share it with?
Personal information, cookies and websites
How we safeguard your personal data
Your rights, complaints, questions and suggestions
Profiling, Anonymous data & Third party sites
“You” are a candidate, potential candidate, consultant, client contact or contact at any other organisation involved in the introduction and/or supply of a candidate’s services, such as a contact at a recruitment process outsourcing company, personal service company or umbrella company.
References in this policy to:
It does not cover any use of your personal information by:
The core of what we do is twofold.
Firstly, it is to provide services to help candidates develop their careers. We do this through assessing and matching people with potential job opportunities, as well as providing wider services to help them in their careers, such as invitations to networking events and opportunities to take part in research.
Secondly, we work with clients to provide recruitment, consultancy and outsourcing services to help them solve recruitment, talent, technology and other related challenges.
Candidates: the personal information we collect about you where “you” are a candidate or placed consultant.
Harvey Nash aims to collect the minimum data it needs to perform its role. Typically, this is name, address, job title and contact details. In addition, if you are a candidate being considered for a role it may also include your CV / resume as well as other details about your skills and experience.
We may also collect other personally identifiable data, for instance we may be engaged in equal opportunity monitoring, or need information to complete a contract for you or our client. This data can include age, identity card number, passport number, driver license number, address, email address, user ID and passwords, gender, date of birth, marital status, occupation, income range, bank account details, financial information, contact information such as telephone, mobile, nationality, personal website or social media links or other data which may be required by local regulations.
Referees and emergency contacts: we collect basic contact details (such as name, title, address, email and tel) so that we can contact you for a reference or as an emergency contact for one of our candidates/or contractors.
Client contacts: the personal information we collect about you where “you” are a contact at one of our clients or at an MSP, umbrella company or personal service company involved in the supply of a person’s services to a hirer.
We need to collect information about you as an essential part of providing our Services.
We may collect personal information about you when:
we will usually collect the following information from or about you:
We use the data we gather to perform a number of tasks, including:
Client contacts: We use the information collected from clients to ensure that we provide business services to you. This will involve identifying candidates that will meet your requirements, or providing other business services from our portfolio.
Suppliers: we use the data collected to ensure the business arrangements between us run smoothly.
Referees and emergency contacts: we use the data collected to contact you for a reference or to contact you as a candidate’s emergency contact in the event of an accident or other emergency.
Our lawful basis for processing your data
We consider that it is necessary for our legitimate interests as a recruitment business to process your personal data. At different stages in the recruitment processes we also have other lawful grounds for processing your data such as compliance with our legal obligations and where it is necessary for the performance of contracts related to the recruitment process.
A full statement of our legitimate interest may be found here.
We think you will have an expectation that if you are looking for employment or have posted your CV or other professional information on a job board or professional networking site, that you are happy for us to collect and use your personal data to provide our recruitment services to you and to share that information with prospective employers.
During the recruitment process the client may want additional information (such as the results from psychometric evaluations or skills tests) or to confirm your references, qualifications and criminal record, where appropriate and in accordance with local laws. We may also need to use your personal information for internal administrative purposes, such as contract administration, payroll and invoicing. We also have our own obligations under law and we may be required to share your data in connection with those legal requirements.
Where we are required by law to obtain your consent to the processing of your personal data we will obtain it.
Client contacts and other third parties involved in the supply of resourcing services (e.g. umbrella companies and personal service companies)
We collect, store and use your name and contact details for our legitimate interests, so that we can:
This allows you to be contacted to receive and administer any Services which you or your organisation has requested. The exchange of personal data of our candidates and client contacts is an essential part of what we do as a recruitment business and, as such, it is in our legitimate interests to process your data for such purpose.
In the case of contacts at umbrella companies and personal service companies this allows you to be contacted to receive, on behalf of your employer, details of current and future assignments, related timesheet data and payment details.
We do not believe that this storage and use of your personal information will unduly prejudice your rights or freedoms.
All users of the Site and our Services
We collect, store and use your personal information for the following purposes:
Sometimes, our use of your personal information is for purposes which are ancillary to the provision of the Site and then Services, or which are desirable in order to make them to operate more effectively. In those circumstances, we believe we have a legitimate interest in handling your personal information, and do not believe that this storage and use of your personal information will unduly prejudice your rights or freedoms.
Your personal data provided to us is processed by Harvey Nash Group plc. We will ensure that:
Referees: unless you specify otherwise we may share your information with any of our group companies and client(s) in relation to whose vacancy your reference was given.
We will disclose information under the following circumstances:
Service and Site usage information: When we share anonymous information generated by our Services with our clients.
Third-party service providers: When we share information with third-party service companies for them to facilitate and support us in the provision of the Services. This includes:
Merger or acquisition: When we need to transfer information about you if we are acquired by or merged with another company. If we are involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified by email and/or a prominent notice on our Site of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.
Recruitment and resourcing services: When we are using your personal information in the context of our recruitment and resourcing services, then we may share your personal information with clients where we believe that you may be appropriate for a particular role or vacancy with that client.
Umbrella companies and personal service companies: When you inform us that you are supplying or intend to supply your services via Harvey Nash to a client through an umbrella company or personal service company.
Recruitment Process Outsourcing and Managed Service Providers: In certain cases, there may be an organisation such as a managed service provider acting as a gateway for the supply of Services made via Harvey Nash to the hirer. Where this is the case, we will share your information with such organisations to the extent that it is necessary for the purposes of the supply.
Where personal information is shared with clients, hirers, umbrella companies, personal services companies or managed service providers in the circumstances described above, then those organisations will handle your personal information in line with their own privacy policies.
We want to make sure that your data is stored and transferred in a way which is secure. We will only transfer data outside of the European economic area where the recipient is compliant with the data protection legislation and the means of transfer provides approved safeguards. These will include contractual clauses, the EU – US privacy shield framework, or where the country concerned has been found adequate by the European commission in respect to the levels of data protection.
Harvey Nash is a global company and to effectively provide the best service to our clients we may utilise a business processing outsourcing (BPO) service in Vietnam to help identify candidates for potential roles. This service helps us to respond more quickly to client services by identifying potential candidates and sending this information back to the responsible consultant. The BPO we use is run by a part of the Harvey Nash Group called Nash Tech. We have ensured that we have an appropriate business relationship to ensure privacy of your data.
We may send your information between Harvey Nash entities which may exist outside of Europe, to overseas clients or to clients within your country who may in turn transfer your data internationally.
The data may also be stored on cloud-based storage for parts of our overall business process.
Our website may offer you the opportunity to pass your personal information to us in relation to a particular role which is of interest to you. This information may be routed through one of our 3rd party suppliers before it is delivered electronically to us. All of our 3rd party suppliers have been vetted to ensure that they will meet our own privacy and security standards in the collection and processing of your personal information.
Technologies such as cookies, beacons, tags and scripts are used by us and our affiliates, or analytics or service providers. These technologies are used in analysing trends, administering the Site, tracking users’ movements around the Site and to gather demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis.
Harvey Nash is passionate about protecting your information. To this end we have put in place appropriate measures that are designed to prevent unauthorised access to and misuse of your personal data. These include measures to deal with any suspected data breach. If you suspect any misuse or loss of or unauthorised access to your personal information, please let us know immediately by emailing DPO@harveynash.com.
Your information is held on servers hosted by us or our Internet Services Provider. The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.
We don’t keep data for any longer than is necessary. For most people where we have limited contact it will be for a maximum of two years from the date of last contact with us. Where we have engaged with you more extensively, for instance we have worked with you as client, or interviewed / placed you as a candidate, we may retain data longer.
We will delete it after that time except where we need to keep any personal information to comply with our legal obligations, resolve disputes, or enforce our agreements.
For more information on our data retention policy please contact DPO@harveynash.com.
You have certain rights in relation to your personal information. If you would like further information in relation to these or would like to exercise any of them, please contact us via email at DPO@harveynash.com at any time.
Harvey Nash tries to meet the highest standards when collecting and using personal information. We take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate.
If you wish to complain about this policy or any of the procedures set out in it please contact our Data Protection Officer via DPO@harveynash.com.
In the EEA, you may also make a complaint to our supervisory body for data protection matters (the Information Commissioner’s Office in the UK) or seek a remedy through local courts if you believe your rights have been breached.
Periodically we may send you information that we think you will find interesting or to ask for your expertise in completing a survey. We may also send you information to:
Subject to any applicable local laws and requirements we will not, as a matter of course, seek your consent when sending marketing materials relating to the above but we will always give you the option to unsubscribe of any such mails.
Where we have previously engaged with you (for example where you have submitted an application or CV to us) or where you have posted your details on a job board we will assume that you have given permission for us to contact you with details of roles which we believe will be of interest to you. You will have the right to withdraw such permission at any time.
Harvey Nash does not utilise any form of automated profiling at this time. All of our recruitment activities involve human decision-making during the process. This may change in the future if we implement automated technologies or machine learning, but we will only do so where appropriate and in accordance with local laws and regulations. Any changes to this policy will be notified as set out below.
We collect anonymised details about visitors to our website for the purposes of aggregate statistics or reporting purposes. However, no single individual will be identifiable from the anonymised details we collect for these purposes.
Third party sites:
We may collect personal data when :
we may collect the following information from or about you:
You can update your CV or personal data at any time by forwarding a copy to firstname.lastname@example.org
We collect, store and use information that we obtain in relation to you for our legitimate interests:
This storage and use of your personal information allows you to be contacted about roles which may be of interest to you, now or in the future, and we do not believe that this storage and use will unduly prejudice your rights or freedoms.
We will store and use your personal information in order to comply with relevant legal obligations to which Harvey Nash is subject, including carrying out:
Where you are successful in securing temporary assignment work with one of our clients we will store and use your personal information for the purposes of completing and administering contracts with your chosen personal service company or umbrella company and for processing payment to such company in respect of services you have performed for our client. Such processing will be for our legitimate interests so that we can provide Services to you and our client. We do not believe that this storage and use of your personal information will unduly prejudice your rights or freedoms.
Such processing will also be necessary for the performance of a contract to which you are party (i.e. your contract with the umbrella company or your personal service company relating to the supply of assignment services) and/or in order to take steps prior to you entering into such contract.
If our client requires us to collect, store and use your health data and/or any Disclosure and Baring Checks we will, on our client’s behalf, seek your consent to processing such data. You can withdraw your consent at any stage but this may prevent us from being able to deliver our recruitment services to you.
The relevant circumstances are:
In some, relatively limited, circumstances we need to handle your personal information in a certain way to be able to comply with our legal obligations. For example if we:
A cookie (small text files that store information on your hard drive) may be used in the processing of your personal data. A copy of this text file is sent to your computer and/or device whenever it communicates with our server. Cookies help us to understand which sections of our websites are frequently visited. With this information we are able to adapt our website to suit your demands and provide you with a more customised and personalised user experience. We may collect the following information during your visit to our website and/or the fully qualified domain name from which you accessed our site, or alternatively, your IP address:
Some webpages may require you to provide a limited amount of personal information in order to enjoy certain services on a website (system login credentials, email addresses and contact information). This personal information will only be used for its intended purpose, i.e. to respond to your message or deliver the requested services. You may configure your browser to accept all cookies, reject all cookies, or notify you when a cookie is sent.
You have the right to request that we:
We will consider all such requests and provide our response within a reasonable period (and in any event within any time period required by applicable law). Please note, however, that certain personal information may be exempt from such requests in certain circumstances.
If an exception applies, we will tell you this when responding to your request. We may request you provide us with information necessary to confirm your identity before responding to any request you make.
You may request to unsubscribe from job alerts and marketing material at any time. If you wish to contact us with respect to the above matters please email us at DPO@harveynash.com.