Privacy

Waymont Consulting is committed to protecting your personal data and respecting your privacy in compliance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). All data collected and stored, processed and shared is done so for the purposes of Waymont’s or a third party’s legitimate interests.

This privacy notice outlines how we collect and use your personal data, why we may disclose it to others and how we keep it secure.

Visitors to the Website

We do not log visits to our website or use cookies.

Email

Any emails sent to info@waymont.com or recruit@waymont.com are subject to GDPR. We will collect, store and use the personal data you provide in order to process your enquiry. For more information regarding recruitment, see Employees and Job Candidates.

We will not share any personal data provided with a third party without prior consent.

We do not use your personal data for marketing purposes.

Customers

This applies to all previous, existing and potential customers.

We may need your personal data to enable us to perform the work required under a contract or to take necessary steps before or after fulfilling that contract, or to comply with legal requirements. We may therefore collect, store and use your personal data in order to arrange meetings, issue proposals, deliver goods and services, satisfy warranties or for other related services that you request, or to comply with legal obligations.

Personal data collected may include your name, postal address, email address, phone number, works/staff ID, financial and bank account details.

Personal data may be stored for up to 7 years for tax records.

We will not share any personal data provided with a third party without prior consent.

We do not use your personal data for marketing purposes.

Contractors and Suppliers

This applies to all previous, existing and potential contractors / suppliers.

We will collect, store and use your personal data in order to arrange meetings, discuss work, or any related services requested by the end customer, to pay you and to comply with legal requirements.

You will be required to sign a confidentiality agreement (NDA) with us before any personal customer information can be shared for the legitimate interests of providing the services they have requested. You will be advised of your legal obligations in relation to confidentiality and professional secrecy.

Personal data collected may include your name, postal address, email address, phone number, ID and/or tax number, payment and delivery conditions, financial and bank account details. If you work on site we may ask for you to inform us of any medical conditions that could affect your work or for which we need to make special provision.

Personal data may be stored for up to 7 years for tax records.

We will not share any personal data provided with a third party without prior consent.

We do not use your personal data for marketing purposes.

Employees and Job Candidates

Employees and job candidates have the right to be informed about how their information is being processed, the purpose and legal basis for the processing and the legitimate interests of the Waymont or third party.

For candidates who have applied either directly or through an agent but have not been employed, their name and date of birth will be retained for up to 4 years, passport details and any interview material  (including CVs, cover letters, interview notes and forms) will be held for up to 2 years.

For employees (either permanent or temporary) the following information will be retained for the duration of employment plus 3 years: interview materials (including CVs, cover letters, interview notes and forms); passport details; general personal details such as full name, phone numbers, address (including personal email); next of kin; bank details; National Insurance number; car registration and driving license details; salary details (including pay rises) and disciplinary letters (if applicable); training / appraisal and similar records. Medical and H&S records will be held for the duration of employment plus 41 years in case of potential health related insurance claims.

Your personal data may be shared with third parties for the purpose of identity verification, right to work checks, criminal records check, payroll, pensions, life assurance and income protection schemes. We will ensure that those third parties are compliant with GDPR.

We will not share any personal data provided with a third party without prior consent.

We do not use your personal data for marketing purposes.

Storage and Security Measures

All personal data is stored on an internal server, which is backed up to encrypted storage media and stored securely to a secure offsite facility. Access is restricted to those who have a legitimate reason for accessing and / or processing that data.

Breaches of Personal Data

Waymont will report any serious data breach to the supervisory authority within 72 hours of discovering / being informed of them. If a breach is likely to result in a high risk to the rights and freedoms of individuals they will be informed directly.

Your data access rights

In accordance with the European General Data Protection Regulation (EU) 2016/679 you are entitled to request a copy of your personal data that we hold. You are also entitled to ask us to rectify, erase and restrict processing of your personal data and you can also object to this processing.

We will respond to your requests and concerns as soon as possible and no later than one month after receiving notification of your request and/or concerns. Our contact details can be found be found here.

Any requests which are manifestly unfounded or excessive might incur an administrative fee or Waymont will simply refuse to provide the requested information.

You have a right to make a complaint

If you have any concerns about how we process your personal data, you have the right to make a complaint with the ICO in the United Kingdom (where we are based) or with the supervisory authority in the country in which you are based.

Changes to this privacy notice

This privacy notice will be reviewed and updated as necessary. It was last updated on 24^th May 2018.