EJ Legal respects your privacy and is committed to protecting your personal data. This privacy notice provides information on how we collect and process your personal data through our website, and when you contact us by phone, email, or by writing to us.
1. Purpose and scope of privacy notice: data controller contact information
EJ Legal is a specialist legal recruitment agency and our website and services are intended for adults aged 18 and over: we do not knowingly collect data relating to children.
It is important that you read this privacy notice together with any other privacy or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.
EJ Legal Limited is the controller and responsible for your personal data (collectively referred to as “EJ”, "we", "us" or "our" in this privacy notice). EJ Legal Limited is a company incorporated in England under registration number 02636241 and with registered office at First Floor Thavies Inn House 3-4, Holborn Circus, London, EC1N 2HA.
We have appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice or the ways in which EJ processes your personal data, please contact the data privacy manager email on email@example.com or by writing to EJ Legal Limited, 76 Canon Street, London, EC4N 6AE, marking the letter for the attention of The DPO.
You have the righto make a complaint at any time to the Information Commissioner's Office (ICO),the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
2. The data we collect about you
Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you. This includes your full name, marital status, title, date of birth, gender, contact details including personal and business email addresses and phone numbers; your job title and role, current and previous employers, your education, academic record and professional qualifications, your notice period, current salary and other relevant information that you may provide when you send a CV to us or engage us to source candidates for you, roles that you have been put forward for and interviews that you have attended, roles that may be of interest to you based on your profile and what you have told us; information about how you use our website.
3. How is your personal data collected?
4. How we use your personal data and the lawful basis for doing so
We will use your personal data as required for the services that we provide as a specialist legal recruitment agency: these uses include presenting roles or candidate profiles that may be of interest to you; managing the recruitment and interview process for clients and candidates; and using data analytics to improve our website. The lawful basis for us doing so is that this is necessary for the performance of a contract with you and/or for our legitimate interests in the efficient running our recruitment business and to keep our website updated and relevant. If you do not agree to our processing of your personal data as required to manage the recruitment process then we will not be able to present roles or candidates to you.
5. Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.
6. Sharing your personal data
We will only share your personal data with: (a) our third party service providers of our cloud back-up storage system; (b) other third parties, where such disclosure is necessary to comply with applicable laws; (c) the acquirer(s), in a reorganisation or sale of our company or assets, (d) employers or candidates who will need to receive your personal data as required for the recruitment process; (e) we may also share personal data with Dandi Legal Limited, an affiliate company of EJ Legal. We may discuss candidates with our client(s) on a no names basis but we do not provide a C.V. or any identifying information without the candidate's express consent.
7. International transfers
As a general rule, we do not transfer your personal data outside the European Economic Area (EEA).We will only transfer candidate data outside of the EEA where a candidate is applying for a role outside of the EEA and the hiring manager is based outside of the EEA, in which case any transfer of the candidate’s personal data would only take place with the candidate’s prior written consent.
9. Data security
We have put in place appropriate technical and organisational measures to prevent your personal data from being accidentally lost, accessed in an unauthorised way, altered or disclosed. We have put in place procedures to deal with any suspected personal data breach and will notify the ICO and/or you of a personal data breach where we are legally required to do so.
10. Data retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements, and in line with our data retention policy.
11. Your legal rights and how to exercise them
You have the following data protection rights in relation to your personal data that apply in certain circumstances:
Right to erasure: You can ask us to erase or delete all or some of your personal data.
Change or correct data: You can also ask us to update the data we hold about you.
Object to, or limit, our use of your data: You can ask us to stop using all or some of your personal data or to limit our use of it.
Subject access requests and portability right: you can ask us for a copy of your personal data and can ask for a copy of personal data you provided in machine readable form.
If you wish to exercise any of the rights set out above, please contact firstname.lastname@example.org.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.