Privacy Statement

Data Privacy Notice

Real-Time Consultants Limited ("we" or "us") trading as RT Consulting is a provider of change and transformation consultancy services, committed to protecting and respecting your privacy.

This statement (together with our Terms of Use and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us will be processed by us.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

For the purpose of the EU General Data Protection Regulation, the data controller is Real-Time Consultants Ltd (Z5459808), Registered at Teme House, Whittington Road, Worcester, WR5 2RY. England.

Data we collect

In order to provide the best possible service to our associates and clients the data we collect, store and process relating to you may include:

As an Associate:

• Your name
• Your address
• Your email address
• Your Telephone number
• Your CV/ Work History
• Your Job Preferences: Role, Location, Salary
• Work related information you provide: Education & Training Certificates
• Our communications with you by email and telephone
• Any Communications with the client relating to the role and you as the consultant

As a Client Contact:

• Your name
• Your email address
• Your telephone number
• The company you work for and you role in that company
• Our communications with you by email and telephone relating to consultants we have provided for roles at your company.

If we assign you to a client the data we collect, store and process relating to you will include:

• Passport
• Visas & Work Permits where applicable
• Date of Birth
• National Insurance number
• Offers and Placements
• Employment References
• Outcome of Criminal Record and Security Clearance checks where applicable
• Financial Information including payroll details and HMRC data
• Our communications with you by email and telephone
• Any Communications with the client relating to your assignment

If the contract of employment is directly with us, the data we collect, store and process relating to you will include:

• Bank details
• Timesheets
• Salary
• Salary adjustments
• Payment records

Where we obtain your information

Associates:

• Registering or applying for jobs via our website
• CV or application from Job boards
• LinkedIn profile
• Referral by friends / colleagues

Clients:

• Directly from you
• From your company website
• Via a colleague identifying you as a point of contact
• From third parties including associates, LinkedIn and networking.

How we use your data

We will process and store your data in order to provide our services to you, and for contractual and legal reasons if we have assigned you to a project, or assigned a consultant with your company.

We may process sensitive personal data where it has been included in the information you provide us, e.g. if you include information in your CV. We may also be required to conduct a criminal records check against your details. We have processes to limit our use and disclosure of this sensitive data other than where required by law.

Our legal basis for processing your data

The EU General Data Protection Regulation (GDPR) legal basis under which we collect, process and retain data about you is classified as

• "Contract" – It will be necessary to process your personal data in order to fulfil the obligations of providing a service to you, or to take steps to enter into a contract with you.
• "Legitimate Interest" - We are a business engaged in the provision of consultancy services and we will need to process your data in order to provide these services.
• "Legal Obligation" – We may be legally required to process and retain your personal data for inspection by a law enforcement agency or government body.
• "Consent" - We may rely on your consent to process your personal data for one or more specific purposes. You have the right to withdraw your consent to this particular processing at any time

How we share your data

We will only share your information with prospective clients with your express consent.

Disclosure of your information

We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 736 of the Companies Act 1985.

We may disclose your personal information to third parties:

• In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
• If Real-Time Consultants Ltd or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms of Use and other agreements; or to protect the rights, property, or safety of Real-Time Consultants Ltd, our customers, or others.

Your Rights

You have the right to access and view the personal data we hold about you. You have the right to have the personal data we hold about you to be changed, corrected or deleted. You have the right to ask us not to process your personal data for marketing purposes. You can exercise the right at any time by contacting us at compliance@rtc.co.uk.

Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.

Please check these policies before you submit any personal data to these websites.

Data Retention and Right to be forgotten

We keep your data in accordance with the following data retention periods:

• If you have been assigned to a client and the contract was through us then we must legally keep your record for up to 7 years after the contract completed.
• If we have assigned a consultant to your company and the contract was through us then we must legally keep all records that relate to the consultant that may be inspected by law for up to 7 years after the contract completed.

Otherwise, we will keep your record for up to 2 years and thereafter will either gain your consent to continue processing your data or remove you completely from our systems.

Under the GDPR there is a "right to be forgotten" which is only relevant where there is no legal requirement for us to retain the information as defined above. If there is no legal requirement for us to keep your information and you request to be deleted this will be done within 14 days of your request.

Some of your data may still exist within our systems but this data will be put beyond use and cannot be readily accessed by operational staff, systems or processes.

Cookies Policy

IP addresses and cookies

We may collect information, including information collected through Google Tag Manager, Google Analytics and Google Search Console ( tagmanager.google.com, www.google.com/analytics, www.tawk.to/, www.google.com/webmasters, about your computer, including where available your IP address, operating system and browser type, for system administration. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.

Cookies contain information that is transferred to your computer's hard drive. They help us to improve the Sites and to deliver a better and more personalised service.
They enable us:

• To estimate our audience size and usage pattern.
• To store information about your preferences, and so allow us to customise the Sites according to your individual interests.
• To speed up your searches.
• To recognise you when you return to the Site.

You may refuse to accept cookies, however, if you select this setting you may be unable to access certain parts of the Sites.

Where your data will be stored

All your data will be stored securely on our IT system in the UK.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Some basic personal data is provided to an email service provider (when consented to) for the purpose of email marketing.

Access to your Data

Access to your data is restricted to our staff that have a legitimate reason to see it, all of which are bound by confidentiality clauses.

What if you have Objections?

If you have an objection to the data that is being stored relating to you, how it is being processed, who has access to it etc. these should be raised to the DPO compliance@rtc.co.uk who will investigate and take the appropriate action.

Who you should contact if data needs amending?

If the data we hold on you changes please inform the DPO at compliance@rtc.co.uk who will process your request.

How do you access the data we hold on you?

For access to your data please consult with the DPO at compliance@rtc.co.uk.

Changes to our Privacy Statement

Any changes we may make to our privacy statement in the future will be posted on this page and, where appropriate, notified to you by e-mail.

Contact

Questions, comments and requests regarding this privacy statement are welcomed and should be addressed to compliance@rtc.co.uk.