This notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a regulation which replaces the Data Protection Regulation (Directive 95/46/EC) The Regulation aims to harmonise data protection legislation across EU member states, enhancing privacy rights for individuals and providing a strict framework within which commercial organisations can legally operate.
Your rights under the GDPR are set out in this notice, and were last updated on 28/10/2024
What information do you collect?
In order to carry out our core consulting activities, B2E Consulting (“B2E” or “the Firm”) will collect, hold (in hard copy and computer readable form) and process your personal data, which may include: your name, address and post code; private and corporate e-mail address and phone number; financial information and compliance documentation; references verifying your qualifications and experience and your right to work in the United Kingdom; curriculum vitae and photograph; employment details and preferences; links to your professional profiles available in the public domain e.g. LinkedIn, Twitter, Facebook for Business or corporate website.
If B2E supplies you to a client, we are required by law to collect proof of identification and proof of the right to work in the UK. We may also need to collect sensitive personal data relating to you, including any disabilities we need to take into account to help you in a role, National Insurance number and criminal offences or proceedings. In order to complete our contract obligations to you, if we supply you to a client, we will also need to collect your company’s bank account details.
Any diversity data that we collect can only ever be viewed as an aggregrate as part of our diversity monitoring – it can never be viewed at individual level and will never be disclosed to a client.
How do you collect this information?
The information we collect about you will be provided by you, either by filling out a form on our website or by corresponding with us by phone, e-mail or otherwise. It will also include information you provide when you register to use our website, subscribe to our services, attend our events, participate in discussion boards or other social media functions on our website, enter a competition, promotion or survey, and when you report a problem with our site.
We may also obtain information about you from other sources such as LinkedIn, corporate websites, job board websites, online CV libraries, your business card, personal recommendations, and any relevant social media sites. In this case – and within 30 days of collecting – we will inform you that we hold this personal data, the source the data originated from, whether it came from publicly accessible sources, and for what purpose we intend to retain and process your personal data.
Where do you store my personal data?
All information stored on our recruitment software (Firefish) is secured through the Microsoft Azure Infrastructure and located at two data centres locations within Europe. Firefish’s primary centre is located in Microsoft’s Western European centre, and these facilities are secured by a series of measures, including (but not limited to) biometric access, security alarm systems and round-the-clock security staff.
What will you do with my personal data?
We will send you targeted emails based on:
- roles we think you will be interested in
- a newsletter every 2 months
- invitations to events and training workshops
- account administration
You can change your email preferences or opt out at any time by updating your profile at https://www.b2econsulting.com/consultant-area/
If we supply you to a client, we will use your data to facilitate the submittal of timesheets and payment of invoices. We will also use it, as required by law, in our reporting to HRMC.
Choice and transparency
Every email we send through our bulk mailer will include an opt out link. In addition:
- every time you apply for a role you are required to check your personal data and confirm your email preferences
- once every 2 months we will send you a reminder to ensure the personal data we hold for you is accurate
- outside of these times, you can log into our portal and change your personal data and email preferences at any time
Who will you share my personal data with?
B2E Consulting will share your personal data with the 3rd party SaaS suppliers (Firefish, Mailjet and Timesheet Portal) that we use to provide our business platforms. We have confirmed that they are fully GDPR compliant, and their data security policies can be provided on request.
We will only disclose or transfer your personal data (including sensitive data) to other parties or prospective employers with your explicit prior consent, or if it is required by law to do so. However we may share an anonymised version of your CV with potential clients as an example of the capability of our community, and we may use anonymous summarised data in the same way.
B2E will never sell, share (or gift) your data to a 3rd party outside of this.
B2E may transfer and disclose personal data, as set out above, regardless of the country of residence of the prospective employer to whom the data is to be transferred. Countries outside the European Economic Area may not have equivalent regulations regarding the processing of personal data, but where the disclosure or transfer is to a prospective employer outside the European Economic Area, B2E will confirm your authorisation and will take reasonable steps to ensure that your rights and freedoms in relation to the processing of the relevant personal data are adequately protected.
How long do you keep my data for?
We retain different types of data for differing periods of time. The criteria we use to determine whether we should retain your personal data and how long for includes:
- The nature of the personal data
- Its perceived accuracy
- Your engagement levels with our services
- Our legal obligations following an offer or when a placement has been made.
We may archive part or all of your personal data, or retain it on our financial systems but delete all or part of it from our recruitment software system. On removal, we may anonymise parts of your data – particularly following a request for suppression or deletion of your data – to ensure we do not re-enter your personal data to our database, unless you have requested us to do so.
Our current retention period for data on consultants who have not been placed, or are no longer showing any signs of engagement with our website, is 5 years.
Where we have supplied you to a client, your financial data and Supplier Diversity information will be deleted at the end of your project.
How can I check that my data is accurate?
B2E will send you regular reminders to check and update your data, and you will be checking your details every time you apply for a role. You can also check and update your data by clicking here at any time and logging in using your email address.
If your personal data is held on our timesheet portal, you can request (or will be provided with) a login to confirm that the data held there is correct.
B2E takes every reasonable precaution to ensure that we only hold up-to-date information about any member of our community. Your co-operation in helping us to keep your own personal data accurate, by updating it yourself or by informing us of any change of name or change of address is an important aspect of this.
Your rights
GDPR provides you with the following rights:
- The right to be informed about the personal data we process on you
- The right of access to the personal data we process on you
- The right to rectification of your personal data
- The right to erasure of your personal data in certain circumstances
- The right to restrict processing of your personal data
- The right to data portability in certain circumstances
- The right to object to the processing of your personal data
- The right not to be subjected to automated decision-making and profiling.
We encourage you to log in to your profile through our website to ensure your data is accurate, complete and up to date at all times.
Changes to our privacy notice
Any changes we make to our privacy notice in future will be posted on this page and, where appropriate, you will be notified by e-mail.
Who do I talk to if I have any concerns?
If you make a written request to the Data Protection Manager, you are entitled to receive a copy of your personal data held by B2E, which we will make available within a month. Such requests may be made free of charge at reasonable intervals, but if we feel that they are excessive, we may charge a small administrative fee.
Please email any questions, concerns or comments you have to the Data Protection Manager at info@b2econsulting.com or write to The Data Protection Manager, B2E Consulting, 2nd Floor, Winchester House, 19 Bedford Row, London, WC1R 4EB.
ICO – Data Protection Registration Number Z1053925