Your rights at a glance
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights over your personal data:
| Right | What it means |
|---|---|
| Right to be informed | To be told how we collect and use your personal data. Our Privacy Policy does this. |
| Right of access | To get a copy of the personal data we hold about you. This is often called a “subject access request”. |
| Right to rectification | To have inaccurate data corrected, or incomplete data completed. |
| Right to erasure | To have your data deleted in certain circumstances. This is sometimes called the “right to be forgotten”. |
| Right to restrict processing | To ask us to limit how we use your data, for example while we check that it is accurate. |
| Right to data portability | To receive data you gave us in a structured, machine-readable format, or have it sent to another organisation. |
| Right to object | To object to processing based on our legitimate interests, and to stop direct marketing at any time. |
| Rights relating to automated decisions | Not to be subject to decisions based solely on automated processing that significantly affect you. We do not make decisions in this way. |
| Right to withdraw consent | Where we rely on your consent, to withdraw it at any time. This does not affect processing that took place before you withdrew it. |
How to make a request
You can make a request in writing or verbally. To help us respond quickly, please:
- email info@xpert-career.com with the subject “Data protection request”, or write to us at 30 Riverhead Close, London, England, E17 5PY;
- tell us which right you want to use;
- give your full name and contact details, and any other names you have used with us; and
- include any details that help us find your information, such as the role you applied for or the dates you dealt with us.
Verifying your identity
To protect your personal data, we may need to confirm your identity before we act on your request. We will only ask for information that is reasonable and proportionate. If you make a request on behalf of someone else, we will need evidence that you have authority to act for them.
How long it takes and cost
- We will respond without undue delay and within one month of receiving your request, or of verifying your identity if we need to.
- If your request is complex, or you have made several requests, we may extend this by up to two further months. If we do, we will tell you within the first month and explain why.
- When responding to a subject access request, we will carry out reasonable and proportionate searches for your information.
- Making a request is free of charge. We may charge a reasonable fee, or refuse to act, only if a request is manifestly unfounded or excessive. If we do, we will explain why.
When we may not be able to help
Some rights do not apply in every situation. For example, we may need to keep certain records to meet a legal obligation, such as tax or right-to-work records, even if you ask us to delete them. If we cannot fully meet your request, we will explain why and tell you about your right to complain.
Complaints
If you are unhappy with how we have handled your request or your personal data, please contact us first and we will do our best to resolve it. We will acknowledge your complaint within 30 days. You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint
Contact us
Xpert-Career Ltd
30 Riverhead Close, London, England, E17 5PY
Email: info@xpert-career.com
Telephone: +44 7473 963234