GDPR

Who we are

Our website address is: http://www.nutsandmay.co.uk.

Status and classification of Lawful Basis

Nuts and May Limited are a “data controller”
This means that we are responsible for deciding how we hold and use personal information about you. You are being provided access to this privacy notice because your details have been retained by us either through interactions as a recruitment consultancy or as part of the accumulation of our professional network in the course of carrying consultancy services. It makes you aware of how and why your personal data will be used, namely for the purposes of operating our IT contract consultancy, and how long it will usually be retained for. It provides you with certain information that must be provided under the General Data Protection Regulation ((EU) 2016/679) (GDPR).
We operate under the classification of “Legitimate Interest”
This means that we would use your data in a manner which you would reasonably expect and have a minimal impact on your privacy.

How is your personal information collected (personal interaction)?

We may collect personal information about you from the following sources:
(a) Direct from you.
(b) Through your peer network.
(c) From third party social media sites such as LinkedIn, Facebook and Twitter.

How is your personal information collected (website visits)?

We may collect and process Your Data in the following circumstances:

Whenever you provide Your Data to us when reporting a problem with our Site, making an enquiry or contacting us for any other reason. If you contact us, we may keep a record of that correspondence;

By utilising Googles Analytics services, we may collect information about your device, including where available your IP address, information about your device’s operating system, browser type and your location as defined by Google down to a city location. We have configured Google Analytics to automatically delete any data greater that 14 months old (Googles current minimum term).

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day

How long we retain your data:

If you leave a comment, the comment and its metadata are retained indefinitely.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

How we will use information about you

Your information is used to maintain interpersonal relationships and business to business links.
Predominantly this tends to focus on the following areas:

a) Sourcing new roles or contract opportunities for consultants within Nuts and May Limited

b) Maintaining relationships with Recruitment Agencies to facilitate introductions into clients where recruitment services are required

c) Maintaining networking opportunities to discuss and share good practice

Data sharing

We will never share your personal information with third parties until we obtain your consent to do so, and this will only be for the reasons outlined above. At the point of obtaining your consent, we will disclose to you the third parties which your personal information will be shared with.
By acknowledging that we use Google Analytics during your first visit to our website, you also acknowledge that your collected data will be managed in line with Googles Data Processing terms.

Rights of access, correction, erasure, and restriction

Under certain circumstances, by law you have the right to:
(a) Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
(b) Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
(c) Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
(d) Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
(e) Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
(f) Request the transfer of your personal information to another party.
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact us.

This does not include any data we are obliged to keep for administrative, legal, or security purposes.