Privacy Policy

This Privacy Policy covers our use of personal information which we collect through our web site online
services or through our direct contact with you. Whitehall Recruitment Ltd is committed to protecting
your personal data in our dealings with you. Please read this Privacy Policy carefully so you can
understand how we collect and use the personal information that you provide to us.

1. Who is responsible for the personal information collected on this site?
Whitehall Recruitment Ltd is a company registered in England and Wales (Registration number 1677902)
and whose registered address is John de Mierre House, Bridge Road, Haywards Heath, West Sussex,
RH16 1UA.

2. Information collection and use
We will use information supplied by you (including, without limitation, sensitive personal data) to aid
the recruitment process and associated administrative functions. This involves us, amongst other things,
processing and storing information (including, without limitation, sensitive personal data) and passing or
making available online such information to prospective employers and clients; information about
vacancies and placements will be passed to candidates and may be posted directly onto the website.
You consent to us using information provided by you (including, without limitation, personal data) in
each of these ways.

We may collect and aggregate data from the information supplied by you to help us to understand our
users as a group so that we can provide you with a better service. We may also share aggregate
information with selected third parties, without disclosing your name or identifying information.
We will process any data which you provide in completing the online registration or application forms
and any further forms, assessments or personal details which you complete or provide to us when using
this site in accordance with UK data protection best practice.

As part of the services offered to you through our site, the information you provide to us may be
transferred to countries outside of the European Economic Area (“EEA”). This may happen if any of our
servers are from time to time located in a country outside of the EEA or one of our service providers is
located in a country outside of the EEA. These countries may not have similar data protection laws to the
EEA. If we transfer your information outside of the EEA in this way, we will take the appropriate steps to
ensure that your privacy rights continue to be protected.

In addition, if you use our services while you are outside the EEA, your information may be transferred
outside the EEA in order to provide you with those services. Except as set out in this privacy policy, we
will not disclose any personally identifiable information without your permission unless we are legally
entitled or required to do so (for example, if required to do so by legal process or for the purposes of
prevention of fraud or other crime) or if we believe that such action is necessary to protect and/or
defend our rights, property or personal safety and those of our users/customers etc.

3. Collection of non-personal information IP addresses
We may collect non-personal information about you such as the type of internet browsers you use or
the web site from which you linked to our site. An IP address is an assigned number, similar to a
telephone number, which allows your computer to communicate over the Internet. It does not identify
you as an individual. We may also aggregate details which you have submitted to the site (for example,
your age and the town where you live). You cannot be identified from this information and it is only used
to assist us in providing an effective service on this web site. However, it does sometimes enable us to
identify which organisations have visited this website. We use this information to compile statistical data
on the use of our website to track how users navigate through our site in order to enable us to evaluate
and improve our site.

4. Data Protection
We will not collect any personal information about you from your browsing of the website unless you
agree to collection and use of your personal data. The information that you give us is termed “personal
data” under the Data Protection Act 1998 (the “Act”). We therefore follow the principles set out in that
Act when we process your personal data. All the personal data that we obtain from you is held on one of
our databases and may be only used by Whitehall Recruitment who shall for the purposes of the Act be
a “data controller”.

Please note that clicking on to links on our website may result in you transferring to another website,
where data privacy practices may be different to that of Whitehall Recruitment Limited. Visitors should
review the other websites’ privacy policies, as we have no control over what happens to information
that is submitted to or collected by these third parties.

To enquire about your personal data or, if you have any questions relating to our data privacy, please
contact Whitehall Recruitment Limited. We will provide you with a readable copy of the personal data
that we keep about you within 40 days; we will require proof of your identity. We allow you to challenge
the data that we hold and, where appropriate, you may have the data erased, rectified, amended or
completed. We reserve the right to refuse to provide our visitors with a copy of their personal data but
will give reasons for our refusal. You will be able to challenge our decision to refuse to provide you with
a copy of our personal data.

5. Keeping our records accurate
We aim to keep our information about you as accurate as possible. If you would like to review or change
the details you have supplied us with please contact The Data Protection Officer, Whitehall
Recruitment Limited, John de Mierre House, Bridge Road, Haywards Heath, West Sussex, RH16 1UA.

6. Changes to this Privacy Policy
If we make any changes to this Privacy Policy these changes will be detailed on our web page in order to
ensure that you are fully aware of what information is collected, how it is used and under what
circumstances it will be disclosed.

7. Security
We have implemented technologies and policies to protect our data storage and to protect your
personal information from unauthorised access, improper use or disclosure, unauthorised modification
or unlawful destruction or accidental loss. We will update these measures as new technology becomes
available, as appropriate.