NEPBRIDGE SERVICES LIMITED, a Private limited Company, incorporated under the laws of England and Wales under company registration number 11708783, whose registered office is at 30 Grosvenor Road, Aldershot, GU11 3EB (“Nepbridge” “Nepbridge Services” “We”).

NEPBRIDGE SERVICES ’s data protection and privacy measures are governed by the
(i) the General Data Protection Regulation ((EU) 2016/679) (“GDPR”) and any national implementing laws, regulations and secondary legislation, in the UK and then
(ii) any successor legislation to the GDPR or the Data Protection Act 1998 (“Data Protection Legislation”).

1. Introduction
This privacy policy sets out how NEPBRIDGE SERVICES uses and protects any information that you provide to NEPBRIDGE SERVICES (including information provided through the website or other websites through which NEPBRIDGE SERVICES provides its services to you (“Websites”)).NEPBRIDGE SERVICES is a private limited company based in the UK which aims to provide recruitment services (“Services”). As such NEPBRIDGE SERVICES may process personal data of its customers, contacts and visitors to its Websites.

2. Personal data and Basis for Collection
For the purpose of Data Protection Legislation, where personal data is provided directly to NEPBRIDGE SERVICES through use of the Website, email, or other means NEPBRIDGE SERVICES will be a data controller (as defined in the Data Protection Legislation) of such information. Where NEPBRIDGE SERVICES is provided with information only for the purpose of performing a contract or where NEPBRIDGE SERVICES cannot determine the use of such information, NEPBRIDGE SERVICES will be data processor (as defined in the Data Protection Legislation) of such information.NEPBRIDGE SERVICES may collect, use, store and transfer different kinds of personal data about you which NEPBRIDGE SERVICES have grouped together as follows:

1. 1. Identity Data including names, username or similar identifier, title, job title, directorships.
   2. Contact Data including billing address, delivery address, email address and telephone numbers.
   3. Financial Data including bank account and payment card details.
   4. Transaction Data including details about payments to and from you and other details of products and services you have purchased from NEPBRIDGE SERVICES.
   5. Usage Data including information about how you use NEPBRIDGE SERVICES ’s Services or submit an enquiry or query through the Websites.
   6. Marketing and Communications including your preferences in receiving marketing or surveys from us and our third parties and your communication preferences.
   7. Additional Information including additional information you chose to provide to us.

Unless you provide such information to us to customise the service we may provide to you, NEPBRIDGE SERVICES does not process any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor does NEPBRIDGE SERVICES collect any information about criminal convictions and offences.

3. If you fail to provide personal data
Where you fail to provide personal data when requested, NEPBRIDGE SERVICES may not be able to perform the contract it has or is trying to enter into. In this case, NEPBRIDGE SERVICES may have to cancel the Services but we will notify you if this is the case at the time.

4. How is your personal data collected?
NEPBRIDGE SERVICES use different methods to collect personal data from and about you including through:

1. Direct interactions You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, e-mail or otherwise. This includes personal data you provide when you:
   1. apply for the Services;
   2. give us some feedback or complete a survey;
   3. request marketing to be sent to you; or
   4. create an account on our Websites.
2. Third parties We may receive personal data about you from various third parties, including your employer.

Purposes for which NEPBRIDGE SERVICES will use your personal data
Set out below is a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are, where appropriate.Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact dataprotection@nepbride.co.uk if you need details about the specific legal basis we are relying on to process your personal data.

Purpose/Activity	Type of data	Lawful basis for processing including basis of legitimate interest
To register you as a new customer or member and verify your identity when using log-ins	(a) Identity (b) Contact	Performance of a contract
To process and deliver the Services including: (a) Managing payments and charges (b) Collecting and recovering money owed to us (c) Contacting you and corresponding about the Services (d) to provide support to the services	(a) Identity (b) Contact (c) Financial (d) Transaction	Performance of a contract Necessary for our legitimate interests (to recover debts due to us)
To respond to queries and enquiries	(a) Identity (b) Contact	Legitimate interests (to offer similar services or offers)
To undertake any marketing to you	(a) Identity (b) Contact	Legitimate interests (to offer similar services or offers)
Business Performance – To manage our business performance and assess client satisfaction and improvement to our Services	(a) Identity Data (b) Individual Data	Legitimate interests (to improve the services we provide)
Events – To enable us to provide events to you which take into consideration your preferences	(a) Identity Data (b) Individual Data (c) Event Data	Legitimate interests (to tailor events) Consent

6. Change of purpose
NEPBRIDGE SERVICES will only use your personal data for the purposes for which it was collected for, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact dataprotection@nepbride.co.uk.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

7. How your personal data may be shared
Personal data that NEPBRIDGE SERVICES collects in accordance with this Privacy Policy, may be shared as follows:

1. with third party consultants selected by NEPBRIDGE SERVICES , such as survey providers, recruitment companies;
2. with other recruitment companies;
3. where NEPBRIDGE SERVICES is under a duty to disclose your personal data to comply with any legal obligation, or to enforce or apply NEPBRIDGE SERVICES’s terms and conditions and other agreements;
4. with third party debt recovery agencies;
5. to protect the rights, property, or safety of NEPBRIDGE SERVICES and its customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and for compliance with laws; and
6. with third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.

8. How NEPBRIDGE SERVICES stores personal data
For secure storage, NEPBRIDGE SERVICES ensures that it stores your personal data within the UK.

NEPBRIDGE SERVICES may share your personal data with some third parties who are based outside the EEA. In this case, NEPBRIDGE SERVICES will ensure that the appropriate security measures and processing provisions are in place to protect your personal data.

Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

9. Personal Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, we keep personal data in accordance with our internal retention procedures, which are determined in accordance with our regulatory obligations and practice. These retention periods depend on the nature of the information, and are subject to change. If you have any questions in this regard, please contact us using the details below.

10. Your Rights
Under certain circumstances, you have rights under Data Protection Legislation in relation to your personal data. These include the right to:

1. request access to your personal data;
2. request correction of your personal data;
3. request erasure of your personal data;
4. object to processing of your personal data;
5. request restriction of processing your personal data;
6. request transfer of your personal data; and
7. right to withdraw consent.

To exercise any of the above rights please email your request to: dataprotection@nepbridge.co.uk.

Where you exercise your right to erasure or where information is deleted in accordance with NEPBRIDGE SERVICES ’s retention policy, please note that after the deletion of your personal data, it cannot be recovered, so if you require a copy of this personal data, please request this during the period NEPBRIDGE SERVICES retains the data.

11. Children
The Website is not intended for children. NEPBRIDGE SERVICES will not knowingly collect any personal data from persons under the age of 18 and will immediately delete any
such data subsequently so determined.

12. Complaints
If you would like to make a complaint in relation to how NEPBRIDGE SERVICES may have stored, used or processed your personal data, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). NEPBRIDGE SERVICES would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.Changes to this Privacy policy and your duty to inform us of changes

As and when necessary, changes to this privacy policy we will posted here. Where changes are significant, we may also email all our registered users with the new details, and where required by law, will we obtain your consent to these changes. This Privacy Policy was last updated on 28^th December 2019

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

13. Questions and Contact information
For any questions or for further information, please contact: dataprotection@nepbride.co.uk.