Privacy Policy

Talent4Performance Ltd

Privacy Policy

Last updated 3 September 2024, in accordance with the requirements of the General Data Protection Regulation (GDPR).

Introduction

Talent4Performance Limited is a UK consultancy specialising in the development of people and organisations to improve performance.

This privacy policy sets out how Talent4Performance Ltd, registered in England and Wales, number 09557488, uses and protects any information that you provide when using our website or engaging with our services.  Talent4Performance Ltd (‘T4P’) is committed to protecting your privacy and we comply with the Data Protection laws applicable to the UK.

Talent4Performance Ltd is registered with the Information Commissioner’s Office (ICO) as a data controller registration number: ZA567405.

This privacy policy describes how we collect and process your personal data. It also explains how we store and handle your data, who can see it, and how we keep it safe.

It is likely that we’ll need to make changes to this policy from time to time, but we’ll keep you informed, and you can always check the current document on our website at www.talent4performance.co.uk/privacy_policy

If any of your personal details change, please let us know by emailing Alli Gibbons at Alli@talent4performance.co.uk. You can also email Alli if you have any questions about our privacy policy, or your personal data.

Our approach to privacy

We take very seriously our obligations and responsibilities in relation to safeguarding your confidential information and processing your personal data. We will not share your data with third parties for marketing purposes, and we will only share your data when necessary to provide a business service you have requested, or if legally obliged to do so.

In order to deliver our services, and to carry out other business functions, we rely on the following lawful conditions for processing personal data:

  • Consent – the individual has given their consent to the processing of their personal data.
  • Contractual – processing of personal data is necessary for the performance of a contract to which the individual is a party, or for T4P to take pre-contractual steps at the request of the individual.
  • Legal Obligation – processing of personal data is necessary for compliance with a legal obligation to which T4P is subject.
  • Legitimate Interests – processing is necessary under the legitimate interests of T4P or an associated third party, unless these interests are overridden by the individual’s interests or fundamental rights.

We will be clear and transparent with you about which lawful basis is used when processing your personal data.

How do we collect personal data?

The main ways we collect personal data direct from you are when you:

  • give us your business card at a networking event or exhibition
  • email one of our team directly, or via our website
  • book a meeting with us
  • book to attend an event
  • enter prize draws or competitions
  • engage with us on social media
  • sign up to our newsletters or ask us to send you articles or other information
  • ask for details of our products or services, whether by phone, email, via social media or in person
  • attend any of our workshops or training programmes
  • complete any training evaluation forms
  • take the Harrison Assessment questionnaire
  • use our website or online learning programmes.

Your personal data may sometimes be provided to us by a third party, such as your employer, in which case it is the third party’s responsibility to ensure that they have the correct lawful basis in place so share this data with T4P.

We may also receive data from third parties such as analytics providers, advertising networks and search information providers such as Google, LinkedIn and Facebook, based outside the EU.

What sort of personal data do we collect?

We may collect the following personal data from you:

  • Your name
  • Your email address
  • Your postal address
  • Your phone number
  • Your social media usernames
  • Your date of birth (if you are under 18 years of age)
  • Your business name
  • Your financial / bank account details
  • Photographs of you at events, either online or in person
  • Video recordings of you at events, either online or in person
  • Your marketing and communication preferences
  • Information about your work preferences
  • Information relating to your eligibility for a job role, including your skills, qualifications, experience, driving licence, permit to work etc.
  • Your CV and application covering letter
  • Any other information that you directly provide to us, whether by phone, email, social media, contact form, in person or otherwise, such as when entering a competition or completing a survey or feedback form
  • Any personal data you post on our website and data about how you use our website
  • Technical data such as your IP address, login data, details about your browser, length of visit to pages on our website, page views, navigation paths, number of times you use our website, time zone settings and other technology on the devices you use to access our website.

How we may use your data

We may use your data to:

  • Fulfill our contractual commitments to you, by processing orders, providing products and services, responding to enquiries related to the order and dealing with complaints
  • Process financial transactions to enable you to purchase our products or services
  • Keep records of orders placed and communications in relation to these
  • Send you customer communications about enhancements to products or services you have bought
  • Respond to any enquiries you make about our products or services
  • Keep records of our communications with you
  • Invite you to complete surveys, provide feedback or enter into competitions or prize draws
  • Deliver relevant website content and advertisements to you, including personalising your experience and monitoring your use of our website and online services.
  • Send you marketing communications and deliver relevant advertisements to you, where we are allowed by law to do so, and to understand the effectiveness of our marketing communications and advertising
  • Administer, manage and protect our business and website
  • Obtain professional advice
  • Carry out credit checks
  • Bring legal claims against you if you breach a contract or fail to make payment
  • Comply with any legal obligations we are subject to or as required by a government authority.

Why we use your data

You will always be told what we intend to do with any personal data we collect from you, however the main reasons are to:

  • support the delivery of contracted services and products, or
  • achieve our marketing and sales strategies.

More specifically, these may take the form of the following scenarios:

  1. Delivery of contracted services

When receiving a service (eg assessment, survey, workshop, coaching) we are contracted to deliver, the information you provide will only be used for the stated purposes and/or those you consent to. This may include product research and development, administrative and legal purposes, statistical analysis, or service maintenance and development. In this scenario, we would be relying on contractual necessity as the primary legal basis for processing personal data. The personal data you provide here will either be anonymised or deleted after two years.

We may need to provide your personal data to one of our Associates (an independent practitioner authorised to deliver T4P services), or a Client Practitioner (a colleague in your organisation authorised to deliver T4P services), where one or more of these is involved in the delivery of the T4P service. Please see the section titled ‘Who has access to your personal data’ for more information on how we make sure your data remains secure in these circumstances.

Depending on the service we are delivering to your company, we may also ask for more detailed information about your employment such as the department or team you work in, your length of employment and professional performance goals. When receiving coaching from T4P, information considered sensitive may emerge during the course of discussions with your T4P coach. These relationships are bound by strict confidence, and any notes collated by your T4P coach are treated accordingly.

  1. Other interactions

 2.1 Accessing online services and resources

We may collect data from you when you use online services and resources such as our website, learning management system, webinar registrations or downloading e-books and white papers. We may also collect information to better understand how visitors use our website and interact with our marketing content, so we can offer timely and relevant information.

2.2 In person contact at networking events and exhibitions

We may collect data from you in person when we meet you informally at events where we are networking generally, or where we may be exhibiting.

In either scenario 2.1 or 2.2 your data may be used for the following:

  • For our own internal records
  • To improve the products and services we provide
  • To contact you in response to a specific enquiry
  • To customise our website for user needs and preferences
  • To send you promotional emails about products, services, offers and other things we think might be relevant to you
  • To contact you via email, telephone or mail for market research reasons.

In these two scenarios, we would be relying on legitimate interests and where required, consent, as the primary legal bases for processing personal data. T4P will only keep data for as long as is necessary to meet these purposes. We will never share, sell or rent individual personal information to an external party without your advance permission, or unless ordered by a court of law. The personal data you provide to us is only available to relevant employees and contracted service providers. If required by law, T4P may disclose data to government and/or enforcement agencies.

If we intend to use your data for a new purpose outside of those detailed in the policy, this policy will be updated to keep you informed of the same; should consent be required from affected individuals, then it will be sought. T4P will never supply your data to third parties for marketing purposes.

Keeping personal data secure

Our website and online services are protected by firewalls and we have implemented security policies, rules and technical measures to protect the data in our control. These security measures are designed to prevent unauthorised access, improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss.

Any information you provide us with when using our services is stored on secure cloud-based systems. Direct access to these databases is restricted to authorised personnel and their appointed agents only. We have taken every reasonable step to ensure that your personal data is held securely at all times, and that access to these are closely monitored. We use security measures to protect against the loss, misuse and alteration of data within our systems.

Please be aware however, that no internet or email transmission is ever fully secure or error free. You should take special care in deciding what personal data you send to us via email and keep this in mind when disclosing any personal data to us via the internet.

Controlling your personal data

Any personal data we collect from you or we generate as a result of your interaction with our systems and services belongs to you. Under the data protection laws in the UK you therefore have the right to know if your data is being processed, why and for how long. This will include details of what categories of data we process (storing your name and contact details in a CRM system), whether your data has been disclosed to third parties and their identities, and how to raise a complaint with the information Commissioner’s Office (ICO).

In addition to your right of access to data we process, T4P will uphold other rights afforded to you under the applicable data protection laws in the UK, namely:

  • The right to request that errors in your personal data processed by (or on behalf of) T4P is amended or corrected;
  • The right to erasure of your personal data if those data are no longer needed for their original purpose, or where the processing is based on consent and you withdraw that consent (and no other lawful basis for the processing exists);
  • The right to restrict processing where the relevant personal data either cannot be deleted (eg because the data are required for the purposes of exercising or defending legal claims) or where you do not wish to have the data deleted;
  • The right to object to processing carried out for the purposes of direct marketing, where processing is likely to cause or is causing damage or distress, or where you may be evaluated or subject to decisions on the basis of automated processing;
  • The right to request a copy of the personal data you have provided to us for yourself, or for it to be transferred to another organisation if the processing was based on consent, the provision of business services under a contract, or processing carried out by automated means.

If you believe that any information we are holding about you is incorrect or incomplete, or wish to exercise any of your rights in relation to your personal data, please click here to download the Subject Access Request form. We aim to respond promptly to any enquiries. However, please note that depending on the complexity and scope of your request, it may take up to 30 days for us to provide you with an adequate response.

You can also contact Alli@talent4performance.co.uk to query any aspect of our data processing activities if you have completed (or are about to complete) a diagnostic or psychometric survey with us.

Data breach

We have in place a procedure if a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed in connection with the provision of a public electronic communications service occurs. We will assess the scope and impact of the breach. Based on the assessment of the likely risks to individuals, we will notify the individuals and/or their connected organisations that a data breach has occurred where this may result in a significant risk to the rights and freedoms of individuals, or where we may be in breach of a contractual obligation. Any such notification to individuals will be carried out as soon as reasonably possible and will include information on the nature of the breach, the likely consequences of the breach, measures taken or proposed by T4P to address it, and recommendations for affected individuals to mitigate any potential adverse effects. Such individuals will also be provided advice on how to make a complaint to the ICO.

If, due to the nature of the breach that T4P is required to inform the ICO, we will do so within 72 hours of becoming aware of the essential facts of the breach. Such notification must include at least:

  • your name and contact details
  • the date and time of the breach (or an estimate)
  • the date and time we detected it
  • basic information about the type of breach
  • basic information about the personal data concerned.

You may also contact the ICO directly if you have a serious concern about how your data was handled via the following link: https://ico.org.uk/concerns/

Who has access to your personal data?

The data we collect about you is generally accessed only by authorised T4P directors and employees for legitimate business purposes and providing services as part of a contract. However, if we work with partners or contractors, they may have limited access to your personal data, but only to the extent necessary in order to do their job.

If for example, an individual has completed a work preferences questionnaire, the reports produced from this data will only be provided to the individual and/or their line manager and/or senior managers in their organisation. Other than this, their reports will not be shared with anyone else without their prior consent. If the individual attends a T4P workshop, we would not share his or her profile with a group of their peers. During a workshop, an individual may be invited by the T4P accredited facilitator leading the session to share some information from their report with the group, however this is their personal choice and done at their own discretion.

The following outlines who has access to your personal data, and under what circumstances:

  • T4P directors and other staff who are involved in arranging and delivering the services you request (where privacy is legally covered under their contract of employment)
  • Service partners who are contracted by T4P to arrange and deliver the services you request, and therefore bound under terms within their contract relating to confidentiality and privacy that is to the same standard and level as T4P employees
  • Associates/Approved Practitioners who are contracted by T4P to provide services to you on our behalf, and therefore bound under terms within their contract relating to confidentiality and privacy that is to the same standard and level as T4P employees
  • Client employees:
    • who are involved in arranging and delivering the services you request, or
    • who are authorised to deliver T4P solutions or
    • who are line managers and/or senior managers in the organisation, who have commissioned specific reports.

T4P provides clear guidance on privacy requirements that is to the same standard expected of T4P employees in their management of personal data. These employees will also have a contract of employment that will address handling confidential information.

How long we hold data

Guidelines for how long data should be retained are set out in T4P’s Data Retention Policy. This specifies that we will need to keep certain information about employees, clients, suppliers and other individuals or organisations we interact with over the course of business to carry out certain business functions for up to 6 years, to monitor and improve the quality of our service, for our records, and to meet certain legal and compliance requirements.

In summary, client personal data will be held for as long as the individual or their employer is in receipt of services from T4P, plus up to a maximum of six years. Where a client makes a specific request for their data to be deleted sooner and it does not conflict with any legal or compliance requirement to hold data for longer, we will honour the request. Employee personal data will be held for the duration of employment and then for six years after the last day of contractual employment. Employee contracts will be held for six years after the last day of contractual employment.

Where data is held by third parties in support of the services we provide to you, the third parties are contractually bound to either delete data upon our request, delete data at the end of our supplier contract with them, or to anonymise data after two years of receipt.

While this section of the Privacy Policy summarises and clarifies parts of our Data Retention Policy, it does not supersede it. The time limits for certain items subject to legislation specified in detail in the Data Retention Policy remain in force, and we are happy to provide further information to you about this at your request.

Cookies

Cookies are used to identify you when you visit a particular site, analyse web traffic, and can help us facilitate a more personal web experience. T4P uses cookies to identify the pages that are being used and help us tailor our website to our customers’ needs, thus allowing our website to respond to you as an individual.

Cookies do not provide us with access to your computer or any information about you, other than that which you choose to share with us. Cookies can also be controlled by the functions within your browser, so do consider changing as you see fit.

For more information, click here to see our Cookie Policy.

Links from our website

Our website may contain links to other websites. However, once you have used these links to leave our site, you should note that we do not have any control over the other websites and are not responsible for the privacy practices of such other websites.

If you submit personal data and other information to a website to which we link, we are not responsible for its protection and privacy. Always exercise caution when submitting data to websites. Read the sites’ data protection and privacy policies fully.

Changes to the Privacy Policy

We keep our Privacy Policy under regular review and reserve the right to amend or modify this policy from time to time. Such modification shall be effective immediately upon posting of the modified policy on this website. Please ensure you regularly review the information posted on our website to obtain timely notice of such changes.

Your continued use of and access to T4P services, including our website, will constitute your acceptance of any changes or revisions to the Privacy Policy.

If we make substantive changes to the policy, we will announce it on our website to ensure that you are aware of the information we collect and how we use it at all times.

Contacting us

If you have any questions regarding this policy, would like to request this policy is provided in another language, please get in touch by using the details below:

Talent 4 Performance Ltd

33 Military Road

Colchester

Essex

CO1 2AD

Alli@talent4performance.co.uk

Download