Privacy Policy

GlobalStep Limited (“GlobalStep”) respects your right to privacy. The following Privacy Policy explains our privacy practices and how GlobalStep may collect, use, and/or share personal information and your rights in relation to it.

We may collect, use and store your personal data, as described in this Privacy Policy and as described when we collect data from you.

We reserve the right to amend this Privacy Policy from time to time without prior notice.  You are advised to check our website https://www.globalstep.co.uk/privacy-policy regularly for any amendments (but amendments will not be made retrospectively).

How do we collect information from you?

Personal information is defined slightly differently across the world. To guarantee your privacy and the protection of your information, we define it as any information that could be used to identify you or another individual.

You can provide your personal data if you wish. We only collect personal data that you want to provide to us or that is needed to provide the service you have requested.

We collect personal information about you in a variety of ways. For example, data might be contained in application forms, CVs or resumes, obtained from your passport or other identity documents, or collected through interviews or other forms of assessment. In this section we explain the different ways we collect personal information about you and the ways in which that information will be used.

Information you share with us

GlobalStep collects a range of personal information that you share with us when you:

  • contact us;
  • apply for a job through our website, external recruiter and/or social media;
  • apply for a work experience placement through our website, external recruiter and/or social media;
  • apply for a course through our website, external recruiter and/or social media;

Through these interactions you may share with us:

  • your name, address and contact details, including email address and telephone number;
  • details of your qualifications, skills, experience and employment history;
  • whether or not you have a disability for which the organisation needs to make reasonable adjustments;
  • information about your entitlement to work in the UK; and
  • any other personal information you include in your interactions with us.

We may also ask for additional information to assist us with our recruitment process and in the event you are offered a position at GlobalStep.

You may also share details of other people with us; for example, if somebody else referred the job to you. In those circumstances, you will need to check with that person that they are happy for you to share their personal information with us, and for us to use it in accordance with this Privacy Policy.

Information we collect from other sources

GlobalStep may collect personal information about you from other sources, including but not limited to, previous employers, your references and recruitment agencies. We may also use third party services to ensure our compliance with legal obligations, by verifying that the information you have provided is accurate.

We collect as little personal information as possible during the recruitment processes; if you are successful, then we will undertake more detailed pre-employment screening and vetting.

Social Media

You may use social media to discover a career opportunity or contact us about a career at GlobalStep.  We also use social media (such as LinkedIn), job boards and online sites to find and contact potential candidates for roles at GlobalStep(thereby collecting some personal information about potential candidates from those sites).

If you use social media (such as Facebook, Twitter or LinkedIn) and make your profile(s) visible to the public, we may review your social media profile(s). We do this primarily (though not exclusively) where it is relevant to the role for which you are applying.

Social media sites, job boards and similar online sites may have their own privacy policies explaining how they use and share your personal information. You should carefully review those privacy policies before you use these sites to make sure that you are happy with how your personal information is being collected and shared.

How do we use your personal information?

We use your personal information in the following ways:

  • to facilitate any application you make to GlobalStep;
  • to respond to your queries and requests;
  • to communicate with you;
  • to carry out administrative tasks within GlobalStep;
  • to carry out vetting of staff members;
  • to establish, exercise or defend our legal rights;
  • to comply with our legal, regulatory and professional obligations; and
  • otherwise for the lawful operation of our business.

On what basis does GlobalStep process personal information?

We need to process your personal information to take steps at your request prior to entering into a contract with you. We may also need to process your personal information to enter into a contract with you.

In some cases, we need to process your personal information to ensure that we are complying with our legal obligations. For example, it is mandatory to check a successful applicant’s eligibility to work in the UK before employment starts.

We also use your personal information where it is necessary for the purposes of our legitimate interests. For example, we may use your personal information to fulfil our services, to analyse and improve our internal processes, and to contact you regarding any queries you have made through our website.

In some instances, GlobalStep may process sensitive personal information such as medical information. This allows us to prevent discrimination within the workplace and ensure a safe work environment for all our employees. We will only handle that information where you have given us your consent – this includes where you have voluntarily provided us with information that we have marked as optional.

How we protect your personal data?

We take the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the proper performance of their duties. We do this by having in place a range of appropriate technical and organisational measures, which include measures to deal with any suspected data breach.

Please note however that where you are transmitting information to us over the internet this can never be guaranteed to be 100% secure.

If you suspect any loss, misuse or unauthorised access of your personal information, please let us know immediately. Details of how to contact us can be found in the “How to contact us” section of this Privacy Policy.

Who has access to the information you provide us?

Dependent upon the nature of your enquiry, your information may be shared internally amongst the relevant departments within GlobalStep. For example, those applying for jobs may have their personal information shared with members of the human resources and recruitment teams, interviewers involved in the recruitment process and IT staff responsible for setting up trials and provisioning accounts. However, your information is only shared if access to the data is necessary for the performance of their roles.

GlobalStep may also share your personal data with third parties such as those who assist us in providing our products and services and who perform technical operations, but only with your consent.

How long do we keep your information?

We apply a general rule of keeping personal data only for as long as required to fulfil the purposes for which it was collected. However, in some circumstances, we may retain personal data for longer periods of time, for instance where we are required to do so in accordance with legal, tax and accounting requirements, or if required to do so by a legal process, legal authority, or other governmental entity having authority to make the request, for so long as required.

In specific circumstances, we may also retain your personal data for longer periods of time corresponding to a statute of limitation, so that we have an accurate record of your dealings with us in the event of any complaints or challenges.

Your rights

As a data subject, you have a number of rights regarding the handling of your personal information. Subject to applicable law, you may have some or all the following rights available to you:

The right of access:

You have the right to obtain a copy of your personal data as well as other supplementary information we hold. You are only entitled to your own personal data, and not to information relating to other people (unless the information is also about you or you are acting on behalf of someone).

The right of rectification:

You have the right to have inaccurate personal data rectified. You may also be able to have incomplete personal data completed – although this will depend on the purposes for the processing.

The right to erasure:

You have the right to have your personal data erased. This is also known as the ‘right to be forgotten’. This right is not absolute and only applies in certain circumstances, such as when your personal data is no longer necessary in relation to the purposes for which it was collected or processed.

The right to restrict processing:

You have the right to request the restriction or suppression of your personal data. This is not an absolute right and only applies in certain circumstances. This is an alternative to requesting the erasure of your data.

The right to data portability:

You have the right to receive a copy of personal data you have provided in a structured, commonly used and machine-readable format. This also gives you the right to request that your personal data be transmitted directly to another data controller.

The right to object:

You have the right to object to the processing of your personal data in certain circumstances. For example, if we are using your data because we deem it necessary for our legitimate interests to do so, and you do not agree, you have the right to object.

The right to withdraw consent:

Where we have obtained your consent to process your personal data for certain activities, you may withdraw your consent at any time.

We will respond to your requests within 30 days, although we may be allowed to extend this period in certain cases. We may ask for a proof of identity before processing your requests, to prevent unauthorised disclosure of personal data. We may refuse to comply with a request if the request is manifestly unfounded or excessive.

Right to lodge a complaint with a supervisory authority:

You also have the right to lodge a complaint with the supervisory authority, or the ICO details of which can be found here:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
0303 123 1113

How to contact us?

Please address any questions, comments and requests about your data to our human resources team:

hr.uk@globalstep.com

We can be also be contacted at:

GlobalStep Limited
Interpower House
Windsor Way
Aldershot
Hampshire GU11 1JG
+44 (0) 1252 345 850