Privacy Policy
Abi Support Ltd is dedicated to safeguarding and honouring your rights regarding the data we maintain about you and handle. This policy explains when and how we collect personal information about you, how we use it, the circumstances under which we may disclose or share it, and how we keep it secure.
Scope
This policy applies to everyone who contacts us, including client organisations and individuals within those organisations who access our portal and seek advice from us. It also extends to consultants, workers, and employees who join our team.
Procedures
How Will We Collect Information From You?
Most personal information is collected when you initially contact us for services or to offer services on our behalf. You are responsible for notifying us of any changes so that the information we hold remains current and accurate. We will carry out safer recruitment checks for individuals undertaking work for us.
What Type of Information Will We Collect From You?
For each client we work with, we require the following information:
- Names of key stakeholders
- Company/organisation name
- Contact details, such as email address and phone number
- Registered address and location addresses for accounting purposes (for invoicing and payment processing)
This information is essential for setting you up in our system, communicating with you, delivering services at your locations, and managing financial transactions.
For people we recruit to work for us, or on our behalf, we require:
- Name, home address, and contact details including phone number and email
- An up-to-date CV detailing qualifications and work history
- Evidence of qualifications via certificates
- Proof of the right to work in the UK, and identity and address verification
- Enhanced DBS report or access to your DBS record via the update service
- References from recent employers/organisations covering the last three years, including both factual and character references
- Bank account details for payments
Following Data Protection Principles – How We Will Use and Process Your Data
Personal data shall be:
- Processed lawfully, fairly, and transparently (‘lawfulness, fairness, and transparency’).
- Collected for specified, explicit, and legitimate purposes and not further processed in a way incompatible with those purposes (‘purpose limitation’).
- Adequate, relevant, and limited to what is necessary (‘data minimisation’).
- Accurate and kept up to date; inaccurate data will be promptly corrected or erased (‘accuracy’).
- Stored in a form permitting identification for no longer than necessary; longer storage is permissible for archiving or statistical purposes with appropriate safeguards (‘storage limitation’).
- Processed securely to protect against unauthorised or unlawful processing and against accidental loss, destruction, or damage (‘integrity and confidentiality’).
Keeping Your Data Secure
We implement measures to ensure the secure and confidential storage and handling of your personal information, limiting access to those who require it, such as our employees, accountants, and other organisations as specified from time to time.
Rights of Data Subjects
- The Right to Be Informed: You will be informed about the data being collected, its usage, retention duration, and any third-party sharing in a clear and concise manner.
- The Right of Access: You can request a copy of the personal data we hold about you. We will respond within one month, barring exceptional circumstances.
- The Right to Rectification: If you identify inaccuracies in your data, you can request that we update it.
- The Right to Erasure (‘Right to Be Forgotten’): You can request deletion of your data in certain situations, except where legal or regulatory obligations apply.
- The Right to Restrict Processing: You may ask us to limit how we use your data.
- The Right to Data Portability: You can reuse your personal data across different services under certain conditions.
- The Right to Object: You can object to processing based on legitimate interests or official tasks.
- Rights Related to Automated Decision Making: You have rights concerning automated decision-making, including profiling, which is subject to strict regulations.