Skip to main content

Your Privacy Through Our Design

 

Effective Date: 28th February 2025
Last Updated: 28th February 2025

Akkar Ltd (“Akkar”) is committed to protecting the privacy and security of your personal data. This privacy document explains how we collect, use, store, and share your personal data in connection with our recruitment services. We comply with both the General Data Protection Regulation (GDPR) and the UK GDPR (as implemented through the Data Protection Act 2018), as well as other applicable data protection laws.

It is important that you read this document alongside any additional privacy notices provided on specific occasions. By using our services, you consent to the practices described herein. We reserve the right to update this privacy policy at any time, with any changes posted on this page. Please review this page regularly for updates.

If you have any questions after reviewing this document, please contact us at GDPR@akkar.com.

  1.  What is GDPR and the UK GDPR

The GDPR harmonizes data protection laws across Europe to enhance individuals’ privacy rights. Akkar adheres to these requirements as well as the UK GDPR, ensuring robust data protection for all personal data we process.

  1.  What Does the GDPR and UK GDPR Regulate?

These regulations govern the processing of personal data—including its collection, storage, use, sharing, and protection—and empower you with rights regarding your personal information.

  1.  What is Personal Data?

Personal data is any information relating to an identifiable individual, whether directly or indirectly. For Akkar, this includes data relating to candidates, employees of clients, suppliers, referees, and emergency contacts.

  1.  Data Protection Principles

As the data controller, Akkar commits to ensuring that personal data is:

  • Processed lawfully, fairly, and transparently.
  • Collected solely for specified, legitimate purposes.
  • Accurate and kept up to date.
  • Retained only as long as necessary (or as legally required).
  • Stored securely on encrypted systems with access limited to authorized personnel.
  1.  How We Collect Your Data

We obtain your personal data through:

  • Candidates: Directly from the individual or via third-party sources (e.g., LinkedIn, job boards).
  • Clients: Directly from the client or from third-party sources.
  • Suppliers: Directly from the supplier.
  • Referees & Emergency Contacts: Provided by candidates or staff members.
  • Website Users: Automatically via cookies and similar technologies. For more details on our use of cookies, please see our Cookie Policy.
  1.  What Personal Data We Collect

We only collect and process personal data that is necessary to provide our recruitment services. This includes:

  • Candidate Data: Name, date of birth, gender, contact details (address, phone numbers, email, Skype), marital status, proof of address, employment history, education, skills, financial information and requirements, immigration status, right to work, valid ID, professional online profiles, IP address, and records of communications.
  • Client Data: Organisation name, structure, contact details, employee contacts, employment requirements, financial information, business plans (where applicable), and records of communications.
  • Supplier Data: Contact details and financial information necessary for contractual arrangements.
  • Referee & Emergency Contacts: Basic contact details to verify information or, in emergencies, to reach the appropriate person.
  • Website Users: Statistical data collected through cookies.
  1.  How We Use Your Personal Data

We process your personal data based on the following lawful bases:

  • Consent: Where you have explicitly agreed to specific processing activities.
  • Legitimate Interests: To deliver and improve our recruitment services, provided these interests do not override your rights.
  • Contractual Necessity: To fulfill the contracts we enter with you.
  • Legal Obligations: To comply with applicable laws.

For processing that involves special or sensitive personal data, we will always obtain explicit consent and document this appropriately.

  1.  Data Sharing

Akkar shares your personal data only with:

  • Prospective Employers: With your prior verbal or written consent.
  • Third-Party Service Providers: Under strict confidentiality and data protection agreements.
  • Regulatory Bodies: Where legally required. All third parties are obligated to implement appropriate security measures to protect your data.
  1.  Overseas Transfers

In certain circumstances, your personal data may be transferred outside the European Economic Area (EEA) or the UK. When this occurs, Akkar will use approved safeguards, such as standard contractual clauses, to ensure your data is adequately protected.

  1.  Data Security and Storage

We use robust security measures—including encryption, access controls, and regular staff training—to protect your personal data. All data is stored on secure, encrypted internal databases accessible only by authorized personnel.

  1.  Personal Data Breach Notification

In the unlikely event of a data breach, Akkar will assess the risk and notify the relevant supervisory authority (e.g., the ICO) within 72 hours, where required. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay.

  1.  Data Retention

Unless you request deletion, your personal data will be retained for up to 5 years from the date of last contact or activity, subject to legal obligations. Specific data, such as employment or financial records, may be retained longer in accordance with statutory requirements.

  1.  Your Data Rights

Under the GDPR and UK GDPR, you have the right to:

  • Access: Request access to your personal data.
  • Rectification: Correct any inaccurate or incomplete data.
  • Erasure: Request deletion of your data under certain circumstances.
  • Restriction: Request limitations on processing.
  • Data Portability: Receive your data in a readable format or have it transferred.
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent.
  • Object: Object to processing based on legitimate interests.

To exercise these rights, please contact us at GDPR@akkar.com. We will respond within 28 days after verifying your identity.

  1.  Refusal to Provide Information

If you choose not to provide certain information, we may be unable to deliver our recruitment services or comply with our legal obligations.

  1.  Changes to This Privacy Policy

We reserve the right to update this policy as needed. Any changes will be posted on this page and, where appropriate, communicated to you directly. Please review this policy regularly to stay informed of any updates.

  1.  Contact Information

For any questions, concerns, or complaints regarding our privacy practices, please contact:

Akkar Ltd
Phone: 0207 993 8755
Email: GDPR@akkar.com
Unit 10, Hove Business Centre
Hove, BN3 6HA

If your concern is not resolved, you may contact the Information Commissioner’s Office (ICO) using the details below:
Phone: 0303 123 1113
Email: casework@ico.org.uk
Post: Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF

we enable progress

Privacy Policy
Cookies

© Akkar 2025