Gallery Resources Limited is a recruitment agency and business. We are a private independent company with no parent or subsidiary organisations. We collect personal data of candidates who approach us with a view to helping them find work.
We gather information from CVs and emails that are sent to us, and from telephone conversations. This will include private details such as names and email addresses. We also sometimes obtain information from other public sources such as LinkedIn and CV databases.
We also hold data relating to our clients and potential clients (freely available business details) and people who work for our clients and potential clients (contact names, job titles, email addresses etc.)
How we use data and consent
We use our database in order to identify suitable candidates for roles, where companies have asked us to try and find people to work for them.
We will always obtain your consent or notify you before entering your details on to our database. This could be verbally or via email.
We will always gain your permission before sharing your data with named third parties – usually a company where you would like us to send your CV. We will also share your data where you have given permission for a third party to ask us for a reference.
We do not conduct mass email marketing campaigns. All emails are individually written and sent, for a specific purpose.
Where we store and process your personal data
The vast bulk of our data is held on secure cloud servers e.g. Microsoft Cloud. Some recent data is held locally, e.g. recent email correspondence. This is always password protected. We do not hold any candidates’ payment or financial data.
Retention of your data
We regularly archive data, and were we have not had contact with you for some time we will always ensure that we obtain up-to-date details from you before using your data. The nature of our business does mean we may hold data for the duration of a candidate’s working life or the life of a business.
You can ask us at any time not to process your data or to delete or archive data that we already hold about you. You can ask to see the data that we hold about you, and we will supply this in compliance with any legal requirements at the time.