Step into Recruitment Policies
Privacy Policy
1. Introduction
Step into Recruitment LTD is committed to protecting the privacy of our candidates, clients, and website users. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with applicable data protection laws, including the UK GDPR, the Data Protection Act 2018, and, where relevant, the EU GDPR.
2. Information We Collect
We may collect and process the following categories of personal data:
- Candidates: name, contact details, CV/resume, employment history, qualifications, skills, right-to-work documents, references, and interview notes.
- Clients: contact details of client representatives, job descriptions, hiring preferences, and contractual information.
- Website Users: IP address, cookies, and browsing behaviour (where applicable).
3. How We Use Personal Data
We process personal information for:
- Recruitment services (matching candidates with job opportunities).
- Communicating with candidates and clients about roles and services.
- Verifying identity, eligibility, and qualifications.
- Complying with legal and regulatory obligations.
- Improving our services and maintaining records.
4. Legal Basis for Processing
We rely on the following lawful bases:
- Consent – when candidates voluntarily submit personal information.
- Contract – to provide recruitment services to candidates and clients.
- Legal obligation – to meet immigration, tax, or employment law requirements.
- Legitimate interests – providing efficient recruitment services.
5. Sharing Personal Data
We may share data with:
- Potential employers and clients (with candidate consent).
- Background check and reference providers.
- Legal and regulatory authorities where required.
We do not sell personal data to third parties.
6. Data Retention
Candidate data will be retained for 12 months after last contact, unless an extended period is required by law or consented to. Client data will be retained for the duration of the business relationship plus 12 months.
7. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.
8. International Transfers
Where data is transferred outside the UK/EU, we ensure appropriate safeguards, such as Standard Contractual Clauses.
9. Data Subject Rights
Individuals have the right to:
- Access their personal data.
- Request correction or deletion.
- Restrict or object to processing.
- Data portability (where applicable).
- Withdraw consent at any time.
Requests can be made by contacting us at rachel@stepintorecruitment.co.uk
10. Contact Details
For any queries or complaints about this policy or data handling, please contact:
Rachel Williams
Email: rachel@stepintorecruitment.co.uk
Phone: 07800915211
Data Protection Policy
1. Purpose
This policy sets out how Step into Recruitment LTD protects personal data in line with UK GDPR, the Data Protection Act 2018, and relevant EU regulations. It applies to all staff, contractors, and partners handling personal data on behalf of the agency.
2. Scope
This policy covers:
- Candidate data.
- Client data.
- Employee data.
- Supplier and partner data.
3. Principles of Data Protection
We adhere to the following principles:
- Lawfulness, fairness, and transparency – process data lawfully and openly.
- Purpose limitation – collect data for specified legitimate purposes only.
- Data minimisation – collect only what is necessary.
- Accuracy – keep personal data accurate and up to date.
- Storage limitation – retain data only as long as necessary.
- Integrity and confidentiality – secure data against risks.
- Accountability – demonstrate compliance through documentation and audits.
4. Roles and Responsibilities
- Management – ensures compliance and resources for data protection.
- Data Protection Officer (DPO) – oversees policies, training, audits, and compliance.
- Employees/Contractors – follow procedures and report breaches.
5. Data Security Measures
- Password-protected systems and restricted access.
- Encrypted storage and secure data transfer protocols.
- Regular staff training on data handling.
- Clear desk and screen-lock policy.
- Secure disposal of physical and digital data.
6. Data Breach Management
All data breaches must be reported immediately to the DPO. Breaches will be assessed and, where required, reported to the Information Commissioner’s Office (ICO) within 72 hours and, if necessary, to affected individuals.
7. Data Retention and Disposal
Data retention schedules are in place for each category of personal data. Personal data will be securely deleted or anonymised once retention periods expire.
8. Training and Awareness
All employees receive mandatory training on data protection responsibilities and are regularly updated on compliance requirements.
9. Policy Review
This policy is reviewed annually or following significant legal/regulatory changes.
Equality and Diversity Policy
1. Policy Statement
Step into Recruitment LTD is committed to promoting equality, diversity, and inclusion in all aspects of our recruitment services. We value the differences that a diverse workforce brings to our clients and recognise that treating people fairly, with dignity and respect, is essential to delivering high-quality services.
We will ensure that no job applicant, employee, worker, or client receives less favourable treatment or is disadvantaged on the grounds of:
- Age
- Disability
- Gender reassignment
- Marriage or civil partnership
- Pregnancy and maternity
- Race (including colour, nationality, and ethnic or national origin)
- Religion or belief
- Sex
- Sexual orientation
We also oppose all forms of unlawful and unfair discrimination, harassment, and victimisation.
2. Scope
This policy applies to:
- All recruitment activities carried out by Step into Recruitment LTD
- All agency staff, contractors, and consultants engaged in delivering recruitment services.
- All applicants, candidates, and clients we work with.
3. Our Commitments
- Fair Recruitment – We will ensure that all recruitment processes are free from bias and based solely on merit, skills, and qualifications.
- Accessible Services – We will make reasonable adjustments to ensure equal access to opportunities for candidates with disabilities.
- Inclusive Advertising – Job advertisements will avoid discriminatory language and encourage applications from under-represented groups.
- Training and Awareness – All staff involved in recruitment will receive training on equality, diversity, and inclusive recruitment practices.
- Monitoring and Review – We will monitor the diversity of applicants and placements, reviewing practices to ensure fairness and continuous improvement.
- Zero Tolerance of Discrimination – Any complaints of discrimination, harassment, or victimisation will be taken seriously and dealt with promptly in line with our grievance procedures.
4. Responsibilities
- Management – Responsible for implementing this policy and ensuring compliance with legal and ethical obligations.
- Recruitment Consultants – Expected to apply the principles of equality and diversity in all candidate searches, interviews, and client interactions.
- Candidates and Clients – Encouraged to support and uphold our commitment to diversity and inclusion.
5. Legal Framework
This policy is underpinned by the Equality Act 2010 and other relevant employment and anti-discrimination legislation in the UK.
6. Monitoring and Review
We will review this policy annually, or sooner if required by changes in legislation or best practice. Feedback from staff, candidates, and clients will be considered to improve our approach.
Modern Slavery Policy –
1. Policy Statement
Step into Recruitment LTD is committed to preventing modern slavery, human trafficking, forced labour, and exploitation in all areas of our business. We recognise our responsibility under the Modern Slavery Act 2015 and are dedicated to acting ethically and with integrity in our recruitment practices, supply chains, and partnerships.
We have a zero-tolerance approach to modern slavery and expect the same high standards from our employees, workers, candidates, and clients.
2. Scope
This policy applies to:
- All staff employed by Step into Recruitment LTD
- All workers and candidates placed through our agency.
- All clients, suppliers, and contractors we engage with.
3. Our Commitments
- Ethical Recruitment – We will never charge candidates recruitment fees, withhold passports, or use coercive practices.
- Due Diligence – We will carry out checks on clients and suppliers to ensure they operate ethically and in compliance with the Modern Slavery Act 2015.
- Worker Protection – We will ensure contracts are fair, transparent, and communicated clearly to all workers in a language they understand.
- Reporting Concerns – We will provide safe and accessible ways for candidates, workers, and staff to raise concerns about suspected modern slavery or exploitation.
- Training and Awareness – Our staff will receive training on identifying the signs of modern slavery and how to act responsibly if concerns arise.
- Continuous Improvement – We will review our policies and practices regularly to strengthen safeguards against exploitation.
4. Responsibilities
- Directors and Management – Ensure overall compliance with the Modern Slavery Act 2015 and lead a culture of transparency and integrity.
- Recruitment Consultants – Carry out due diligence checks on clients, suppliers, and candidates, and report any concerns immediately.
- All Staff – Must remain alert to signs of exploitation and use our reporting channels if concerns arise.
5. Reporting Modern Slavery
We encourage anyone who suspects modern slavery in our operations, supply chains, or placements to report it immediately. Reports can be made confidentially to:
- Rachel Williams – rachel@stepintorecruitment.co.uk
- The Modern Slavery Helpline on 0800 0121 700
All concerns will be treated seriously and investigated promptly.
6. Monitoring and Review
This policy will be reviewed annually or sooner if required by changes in legislation or best practice. Lessons learned from reports, investigations, or audits will be used to strengthen our procedures.