CRA Group Limited Privacy Policy

CRA Group Limited Privacy Policy

Date of last update: 14 November 2023

Introduction

Welcome to the website of CRA Group Limited ("we," "us," or "our"). This Privacy Policy is designed to inform you about how we collect, use, disclose, and safeguard your personal information when you visit our website or use our services.

Our Contact Details

If you have any questions about this Privacy Policy or how we collect and use your personal information, please contact us at:

  • Company name: CRA Group Limited
  • Registered address: CRA Group Limited, Invicta Park, 1 Sandpit Rd, Dartford DA1 5BU
  • Phone Number: 020 3771 9931
  • E-mail: company@cragroup.org.uk

Scope of this Privacy Policy

This Privacy Policy covers data collected and processed during the use of our website. When you navigate to third-party websites, the privacy policies of those websites will apply.

For any direct correspondence with us or any other data processing not covered by this Privacy Policy, the applicable privacy policy will be communicated to you.

Personal Information We Collect (Job Seekers)

We collect the following personal information from Job Seekers:

  • Information collected during registration, including name, desired work location, email address, telephone number, current employment details, desired salary, desired job type, skills, and marketing preferences.
  • Information in your CV, covering your name, photograph, gender, driving license status, address, contact details, employment and education history, skills, and interests.
  • Information in your covering letter, including name, employment and education details, skills, and salary information.
  • Additional information provided in your account profile, such as employment history, qualifications, skills, and contact details.

For security and internal reporting purposes, we automatically collect information about your use of the service.

We discourage the inclusion of sensitive information, and we do not request information classified as "sensitive" under data protection legislation.

How We Collect Personal Information (Job Seekers)

Most personal information is directly provided by Job Seekers during registration, profile updates, or CV submissions. Additionally, data may be collected automatically through cookies and other technologies.

Job Seekers are advised not to provide unnecessary personal data and to ensure accuracy and regular updates of their CVs and profiles.

Personal Information We Collect (Recruiters)

We collect the following personal information from Recruiters:

  • Information collected during registration, including name, company details, email address, and telephone number.
  • Additional user information when requesting multiple users for an account.
  • Information collected when creating a recruiter directory entry.
  • Payment data, processed by our third-party payment provider QuickBooks.

For security and internal reporting purposes, we automatically collect information about Recruiters' use of the service.

How We Collect Personal Information (Recruiters)

Most personal information is directly provided by Recruiters during registration, account management, or purchase transactions. Additionally, data may be collected automatically through cookies and other technologies.

Recruiters are advised not to provide unnecessary personal data and to ensure accuracy and security in their account information.

Legal Basis for Processing Information

We collect and process personal information based on:

  1. Contractual: To fulfil contracts, such as sending a Job Seeker's CV to a Recruiter or creating user accounts.
  2. Legal: Disclosure of information where legally required, such as responding to governmental requests or law enforcement requirements.
  3. Legitimate Interest: Processing personal information when we have a legitimate interest that does not override privacy rights.

In some cases, we rely on Consent, particularly for marketing communications. Consent can be withdrawn at any time.

How We Use Personal Information (Job Seekers)

When Job Seekers register, we use their personal data to set up an account, make their CV searchable to Recruiters, and send job alerts. We may also use the data to send marketing emails, provide information about jobs, and improve our services.

How We Use Personal Information (Recruiters)

For Recruiters, we use personal information to set up accounts, add or remove users, send candidate alerts, and manage and administer accounts. We may also use the data to improve and develop services and introduce new offerings.

Disclosure of Your Information

We may share personal information with:

  1. Recruiters: By default, Job Seeker information is shared with Recruiters. Job Seekers can control the extent of data shared when registering and within their dashboard.
  2. Service Providers: We share information with service providers helping us perform our services, ensuring privacy arrangements and contractual limitations.
  3. Payment Processors: Our third-party payment provider QuickBooks processes all website purchases.
  4. Business Transfers: Information may be shared during mergers, sales, or acquisitions.
  5. Agencies and Authorities: Information may be disclosed to meet legal or regulatory obligations.

Data Storage and Security

Personal information is generally stored inside the European Economic Area (EEA). Circumstances outside our control may lead to data transfer to third-party service providers outside the EEA.

We implement encryption, internal policies, supplier vetting, and data backups to ensure data security. However, no method of internet transmission or storage is 100% secure.

Data Retention

We retain personal information as long as necessary to fulfil the purposes for which it was collected. Job Seeker profiles, CVs, and site usage data are stored until deletion requests.

Recruiter registration, contact details, credit use, and job posting information are retained until deletion requests or account closure.

Contacting You

We may contact you for reasons including important service changes, job alerts, marketing emails (with consent), information about services, and transactional emails.

Cookies and Tracking Pixels

We use cookies to enhance your browsing experience. Our Cookie Policy is available here.

Tracking pixels in marketing emails provide insights into customer engagement and campaign effectiveness.

Children and Minors

Our services are not intended for individuals under the age of eighteen (18), and we request Job Seekers refrain from providing information related to children.

Your Data Protection Rights

Under data protection law, you have rights including access, rectification, erasure, restriction of processing, objection to processing, and data portability. You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you Please contact t.pascall@cragroup.org.uk to exercise your right.

Changes to Privacy Policy

We regularly review this Privacy Policy and reserve the right to change it at any time. The updated version will be available on our website.

Please refer to the “Effective from” date at the top of these terms to see when this Privacy Policy was last updated.