Website Privacy Notice

GIR Group Ltd is the controller responsible for personal information collected through this website and through related website enquiries and recruitment correspondence.

Company

GIR Group Ltd

Company number

12814400

Registered office

Latitude House, 6 Harmony Way, London NW4 2BZ, United Kingdom

Privacy contact

enquiries@girgroup.co.uk

Depending on how you use the website, we may collect:

• contact and enquiry information, including your name, organisation, email address, telephone number and the details of your requirements;
• correspondence and records created when we respond to an enquiry, prepare a proposal or discuss potential services;
• recruitment information, including your CV, work history, qualifications, contact details and any information you choose to include in an application; and
• technical and security information generated by the hosting platform, website, form processor or security services, such as IP address, browser and device information, access times, pages requested and diagnostic logs.

Please do not send special-category information or criminal-offence information unless it is relevant and requested. Where such information is required, for example to make a reasonable adjustment during recruitment, we will handle it only where the law permits.

We collect information directly from you when you submit the contact form, email us, send a CV or otherwise communicate with us. We may also receive technical information automatically from our hosting, security and form-processing providers when you use the website.

• Responding to enquiries and preparing proposals. To understand your requirements, respond to you and take steps requested before a possible contract. We rely on steps before entering into a contract and, for business enquiries, our legitimate interests in developing and managing professional relationships.
• Managing relationships and records. To maintain accurate correspondence, coordinate follow-up and manage any resulting project or engagement. We rely on contract, legitimate interests and legal obligations, depending on the circumstances.
• Operating and protecting the website. To deliver the website, troubleshoot problems, prevent misuse, maintain security and investigate incidents. We rely on our legitimate interests in operating a secure and reliable website and on legal obligations where applicable.
• Recruitment. To assess applications, communicate with candidates, arrange interviews, consider reasonable adjustments and take steps before a possible employment contract. We rely on steps before contract, legitimate interests and employment-law obligations.
• Legal and regulatory matters. To comply with law, respond to lawful requests, establish or defend legal claims and protect GIR, our clients and others. We rely on legal obligations and legitimate interests.

We do not currently use information submitted through the website or careers email to send marketing communications.

We share personal information only where necessary and proportionate. Recipients may include:

• authorised GIR personnel who need the information for enquiries, proposals, recruitment, project coordination or administration;
• website hosting, email, IT, security, form-processing and other service providers acting for us;
• professional advisers, consultants, subcontractors and project stakeholders where this is necessary for a requested service or engagement;
• regulators, law-enforcement bodies, courts or public authorities where disclosure is required or permitted by law; and
• a buyer, investor or adviser if GIR is involved in a genuine corporate transaction, subject to appropriate confidentiality controls.

We do not sell personal information.

Some service providers may process personal information outside the United Kingdom. Where this happens, we use an applicable adequacy regulation or an appropriate safeguard, such as the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, together with any required risk assessment. You may contact us for further information about the safeguard used.

We keep personal information only for as long as needed for the purpose for which it was collected, including legal, contractual, accounting, security and claims requirements. Our current website retention approach is:

• general website enquiries: 24 months after the last substantive contact, unless the enquiry becomes part of a project, contract, complaint or legal matter;
• project or contractual records: retained according to the applicable project, contractual, insurance and legal retention criteria;
• unsuccessful recruitment applications: six months after the recruitment decision;
• future-opportunity or talent-pool records: up to 12 months, but only where the individual has specifically agreed; and
• hosting and security logs: only for the period reasonably required for website operation, security, incident investigation and the provider’s configured service settings.

We may keep information for longer where required by law, to preserve evidence, or to establish or defend a legal claim. We securely delete or anonymise information when it is no longer required.

We use proportionate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Access is limited to people and providers with a business need. No internet transmission or storage system can be guaranteed to be completely secure.

Depending on the circumstances, UK data-protection law may give you rights to:

• ask for access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information or restrict its use;
• object to processing based on legitimate interests;
• receive certain information in a portable format; and
• withdraw consent where processing relies on consent, without affecting earlier lawful processing.

These rights are not absolute and may not apply in every situation. To exercise a right, email enquiries@girgroup.co.uk. We may need to verify your identity before acting on a request.

If you have a concern, please contact us first so that we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.

This website is intended for business and professional audiences and is not directed at children. We do not knowingly collect personal information from children through the website.

We do not use information collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.

The website may link to third-party websites. GIR is not responsible for their privacy practices. Please read the privacy information provided by the relevant third party.

We may update this notice when our website, services, providers or legal obligations change. The current version and its update date will be published on this page.

Questions about this notice or our use of personal information should be sent to enquiries@girgroup.co.uk or to GIR Group Ltd at Latitude House, 6 Harmony Way, London NW4 2BZ, United Kingdom.