COMPANY PRIVACY NOTICE

Company Name: Mana Mana Ltd (‘the Company’)
Company Contact Details: Willian Ullauri (Data Protection Lead) - info@mana-mana.co.uk
Date Updated: 20th March 2021

This Privacy Policy applies to the personal data of our Website Users, Candidates, Clients and  Suppliers. 

Mana Mana Ltd is a business consultancy agency, which provides all business services to its clients. The Company must process personal data so that it can provide these services – in doing so, the Company acts as a data controller. 

The Company must have a legal basis for processing your personal data. We will only use your personal data in accordance with the terms of the following statement. 

1) CATEGORIES OF PERSONAL DATA

i. Candidates: In order to provide you with work finding services, we need to collect and process certain information about you. The information that we collect may include (but is not limited to) your name, address, email address, telephone number(s), curriculum vitae, employment details, salary information, notice period, qualifications, right to work in the UK, photograph, compliance documents, links to your professional profiles, employment preferences.

ii. Clients: If you are a client of Mana Mana Ltd, we need to collect and process information about you or individuals at your organisation in order to supply candidates to you and to ensure that the contractual arrangements between us can be implemented. The information we collect may include (but is not limited to) your name, job title, email address, telephone number(s), links to your professional profiles, work address details.

iii. Suppliers: If you supply services to Mana Mana Ltd, we will need to retain and process your contact details and contact details of relevant individuals at your organisation to ensure that the contractual arrangements between us can be properly implemented. This information may include (but is not limited to) your name, job title, email address, work address, telephone number(s), company bank details (so that we can pay for services provided).

Sensitive Personal Data: Different rules apply to sensitive or special category personal data where the data concerns race, ethnic origin, politics, religion, trade union membership, genetics, health (physical or mental), sex life or sexual orientation. We do not intentionally or knowingly collect this type of information as we do not need it for recruitment purposes. Please do not submit this type of data - any sensitive/special category data supplied, will be deleted.

2) SOURCES OF DATA 

i. Information we obtain directly from you: This is personal data that you give us by using the ‘Contact us page’ or by responding to a job advert on our website – www.mana-mana.co.uk (our site), or by corresponding with us by phone, e-mail or otherwise, including information you provide when you register to enter our database.

ii. Information we obtain from other sources: This is personal data that we obtain about you via other sources such as job boards, LinkedIn, CV libraries, referrals and any other relevant social media sites. We will inform you within 30 days of obtaining your details, by sending you this privacy notice stating the source the personal data originates from.

iii. Our website
- You can send us your personal information via the ‘Contact Us’ page on our website or by applying to a job that is advertised.
- Cookies: www.mana-mana.co.uk (Our site) does not use cookies 
- Our website contains links to Third Party sites. We recommend reading the privacy statements upon visiting these websites as we are not responsible for the information that is submitted/collected by these third parties.

3) PURPOSE OF PROCESSING AND LEGAL BASIS 

i. CANDIDATES: 
‍The Company will collect your personal data and will process your personal data for the purposes of providing you with job opportunities services. This includes for example, contacting you about job vacancies, assessing your suitability for those opportunities, updating our database, putting you forward for job opportunities, and developing and managing our services and relationship with you.

In some cases, we may be required to use your data for the purpose of complying with laws that apply to us. We may also use your information during the course of internal audits to demonstrate our compliance with certain industry standards.

The legal bases we rely upon to process your personal data are:
a. Where we have a legitimate interest
b. To comply with a legal/statutory obligation that we have
c. Your consent

For the purposes of retaining and processing your personal data our legal bases are: Legitimate interest and statutory/legal obligation.

a. Legitimate Interest:
- We recruit candidates as defined under the Employment Agencies Act 1973. The exchange of personal data of our candidates is an essential part of this process.
- To deliver our recruitment services we need to contact candidates on a regular basis via email, phone (calls and texts), job alerts and other relevant notifications

b. Statutory/Legal obligation:
As a Recruitment agency, we are required to collect certain personal data to meet statutory obligations, such as the Conduct of Employment Agencies and Employment Businesses Regulations 2003 – for example, we have to check identity, right to work, suitability for the role, qualifications and experience before submitting your application to our clients.

For the purposes of sending you marketing information via email or SMS our legal basis is: Consent

c. Consent
- We will request your consent by email, should we need to rely on this legal basis. 
- You have the right to withdraw your consent for marketing purposes at any time and can do so by contacting us via e-mail, info@mana-mana.co.uk
- Where we have relied on consent to send you marketing material, we will retain this consent for a period of 1 year.
- Upon expiry of that period the Company will seek further consent from you. Where consent is not granted the Company will cease to send you marketing material.

ii. CLIENTS:
The Company will collect and process information about you or individuals at your organisation in order to provide work-finding services. This includes for example, contacting you about job specifications, providing relevant candidates for vacancies, briefings, interview arrangements and to develop and manage our services and relationship with you.

In some cases, we may be required to use your data for the purpose of complying with laws that apply to us. We may also use your information during the course of internal audits to demonstrate our compliance with certain industry standards.

The legal bases we rely upon to process your personal data are:
a. Where we have a legitimate interest
b. To comply with a legal/statutory obligation that we have
c. Contractual obligations

a. Legitimate Interest:
We need client contact information so that we can provide relevant candidates when new vacancies arise, to liaise regarding candidate feedback and interview arrangements, and for vacancy briefings.

b. Statutory/Legal obligation:
As a Recruitment agency, we are required to collect certain data to meet statutory obligations, such as the Conduct of Employment Agencies and Employment Businesses Regulations 2003. We cannot supply a work-seeker to a client unless we have obtained sufficient information from the client to select a suitable work-seeker for the position which the client is looking to fill – for example, the identity of the client and nature of the client’s business, the position the client is looking to fill including the type of work, location, hours, the experience, training and qualifications which the client considers necessary for a work-seeker to possess in order to work in the position.

c. Contractual obligation:
If you are a client of Mana Mana Ltd, we need to collect and process information about you or individuals at your organisation in order to ensure that the contractual arrangements between us can be implemented. 

iii. SUPPLIERS:
For the purposes of retaining supplier information our legal bases are:
a. Legitimate Interest
b. Contractual obligation 

a. Legitimate Interest:
We need to collect and process information about you or individuals at your organisation to discuss the services that you provide to us.

b. Contractual obligation:
If you are a supplier of Mana Mana Ltd, we need to collect and process information about you or individuals at your organisation in order to ensure that the contractual arrangements between us can be implemented. 

4) DATA STORAGE/SECURITY

i. Data Storage
Any information collected and processed by Mana Mana Ltd is stored in the following locations:
- On our secure CRM (Itris) (which can be accessed via our laptops only)
- In our emails (which can be accessed via our laptops and mobile phones only)
- In files on our server (which can be accessed via our laptops only)

ii. Data Security
Our CRM (Itris), emails and files are hosted on a secure server via Interhost LLP who work to the ISO 27001 standard for information security. - The server can only be accessed by Mana Mana Ltd staff, who each have a unique username and password.
- Once access to the server has been granted - an additional username and password is required to enter our CRM (Itris)
- All laptops are password protected and an additional username and password is required to enter our server.
- All mobile phones are password protected. An additional username and password is required to access emails on our phones.

5) DATA RETENTION

Mana Mana Ltd will retain your personal data only for as long as is necessary. We regularly review the length of time that personal data is kept, considering the purpose(s) for which the data is being retained. Any data that is no longer required is destroyed securely. If we need to keep personal data to comply with legal or statutory requirements, we will minimise the data that is retained.

If you state that you no longer wish to be contacted by Mana Mana Ltd we will cease all contact but will retain your name and email address/professional profile link on our ‘do not contact’ list in our secure database to avoid any future contact - thus complying with the GDPR and our legitimate interest in avoiding duplication.  

6) YOUR RIGHTS

Please be aware that you have the following data protection rights:
- The right to be informed about the personal data the Company processes on you;
- The right of access to the personal data the Company processes on you;
- The right to rectification of your personal data;
- The right to erasure of your personal data in certain circumstances;
- The right to restrict processing of your personal data;
- The right to data portability in certain circumstances;
- The right to object to the processing of your personal data that was based on a public or legitimate interest;
- The right not to be subjected to automated decision making and profiling; and
- The right to withdraw consent at any time.

Where you have consented to the Company processing your personal data you have the right to withdraw that consent at any time by contacting Willian Ullauri, info@mana-mana.co.uk   

There may be circumstances where the Company will still need to process your data for legal or official reasons. We will inform you if this is the case. Where this is the case, we will restrict the data to only what is necessary for the purpose of meeting those specific reasons. 

If you believe that any of your data that the Company processes is incorrect or incomplete, please contact Willian Ullauri, info@mana-mana.co.uk, and we will take reasonable steps to check its accuracy and correct it where necessary. 

7) COMPLAINTS OR QUERIES 

If you wish to complain about this privacy notice or any of the procedures set out in it please contact: Willian Ullauri, info@mana-mana.co.uk 

8) UPDATES TO THIS POLICY

We regularly review our privacy policy and update the version on our website.
This policy was last updated on 20th March 2021.