Cookies and how we use them
We operate an implied consent policy. This means that we assume that if you visit the website with your browser set to accept cookies that you are happy with their usage. If you are not happy you should not use the site or delete these cookies at the end of your visit.
What are cookies?
Cookies are small text files that are transferred by a website to your browser directory. They help the website identify your browser or device. They perform different tasks on a website, and certain aspects of the website will not function correctly without them. To find out more about cookies visit http://www.allaboutcookies.org
Cookies used on this website
Google Analytics is used to gather information about users, how they found and navigated the site, as well as facts about which browsers they have used. The data gathered by this cookie is anonymous and is used to enhance the usability of the website. Further information is available here http://www.google.com/analytics/learn/privacy.html
Privacy Notice
This privacy notice applies between you, the User of this website and Citrefine International Ltd, the owner and provider of this website. Citrefine International Ltd takes the privacy of your information very seriously. This privacy notice applies to our use of any and all Data collected by us or provided by you in relation to your use of the website and any other dealings you have with the company.
Definitions and interpretation
1. In this privacy policy the following definitions are used:-
Data – collectively all information that you submit to Citrefine International Ltd via the website. This definition incorporates, where applicable, the definitions provided in the Data Protection Laws
Data Protection Laws – any applicable law relating to the processing of personal data, including but not limited to the Directive 96/46/EC (Data Protection Directive) or the GDPR and any national implementing laws, regulations and secondary legislation, for as long as the GDPR is effective in the UK
GDPR – the General Data Protection Regulation (EU) 2016/679
We, us or CIL – Citrefine International Ltd
User or you – any third party that accesses the website and is not either employed by Citrefine International Ltd and acting in the course of their employment or engaged as a consultant or otherwise providing services to Citrefine International Ltd and accessing the website in connection with the provision of such services
Website – the website you are currently using, www.citrefine.com and any sub-domains of this site unless expressly excluded by their own terms and conditions.
2. In this privacy policy, unless the context requires a different interpretation:
a. the singular includes the plural and vice versa
b. references to sub-clauses, clauses, schedules or appendices are to sub-clauses, clauses, schedules or appendices of this privacy policy
c. a reference to a person includes firms, companies, government entities, trusts and partnerships
d. ‘including’ is understood to mean ‘including without limitation’
e. reference to any statutory provision includes any modification or amendment of it
f. the headings and sub-headings do not form part of this privacy policy
Scope of this privacy policy
3. This privacy policy applies only to the actions of Citrefine International Ltd and Users with respect to this website. It does not extend to any websites that can be accessed from this website including, but not limited to, any links we may provide to social media websites.
4. For the purpose of the Data Protection Legislation and this notice, we are the ‘data controller’. This means that Citrefine International Ltd determines the purposes for which, and the manner in which, your Data is processed.
How we collect data
5. We collect Data in the following ways:
a. Data is given to us by you and
b. Data is collected automatically
Data that is given to us by you
6. CIL will collect your Data in a number of ways, for example:
a. When you contact us through the website, by telephone, post, email or through any other means; in each case, in accordance with this privacy policy
Data that is collected automatically
7. To the extent that you access the website, we will collect your Data automatically;
a. We automatically collect some information about your visit to the website. This information helps us to make improvements to the website content and navigation and includes your IP address, the date, times and frequency with which you access the website and the way you use and interact with its content.
Lawful basis for Processing Information
8. Under the General Data Protection Regulation (GDPR), the lawful basis we rely on for processing this information is we have a contractual obligation.
We have been asked to provide a quote and we are required to process personal data in order for us to be able to fulfil our contractual obligation to supply this. This applies even if you don’t enter into a contract with the company.
Keeping data secure
9. We will use technical and organisational measures to safeguard your Data, for example we store your data on secure servers.
10. Technical and organisation measures include measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorised access to your Data, please let us know immediately by contacting us via this email address: enquiries@citrefine.com.
11. If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.
Data retention
12. Unless a longer period is required or permitted by law, we will only hold your Data on our systems for the period necessary to fulfil the purposes outlined in this privacy policy or until you request your Data to be deleted.
13. Even if we delete your Data, it may persist on backup or archival media for legal, tax or regulatory purposes.
Your rights
14. You have the following rights in relation to your Data:
a. Right to access – the right to request copies of the information we hold about you at any time, or that we modify, update or delete such information. If we provide you with access to the information we hold about you, we will not charge for this, unless your request is ‘manifestly unfounded or excessive’. Where we are legally permitted to do so, we may refuse your request. If we refuse your request, we will tell you the reasons why.
b. Right to correct – the right to have your date rectified if it is inaccurate or incomplete.
c. Right to erase – the right to request that we delete or remove your Data from our systems.
d. Right to restrict our use of your Data – the right to ‘block’ us from using your Data or limit the way in which we can use it.
e. Right to data portability – the right to request that we move, copy or transfer your Data.
f. Right to object – the right to object to our use of your Data including where we use it for our legitimate interests.
15. To make enquiries, exercise any of your rights set out above, or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us via this email address enquiries@citrefine.com.
16. If you are not satisfied with the way a complaint you make in relation to your how your Data is handled by us, you may be able to refer your complaint to the relevant Data Protection Authority. For the UK, this is the Information Commissioner’s Office (ICO). The ICO’s contact details can be found on their website at https://ico.org.uk/.
17. It is important that the Data we hold about you is accurate and current. Please keep us informed if your Data changes during the period for which we hold it.
Links to other websites
17. This website may, from time to time, provide links to other websites. We have no control over such websites and are not responsible for the content of these websites. This privacy policy does not extend to your use of such websites. You are advised to read the privacy policy or statement of other websites prior to using them.
Changes of business ownership and control
19. Citrefine International Ltd may, expand or reduce our business and this may involve the sale and/or transfer of control of all or part of Citrefine International Ltd. Data provided by Users will, where it is relevant to any part of our business so transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this privacy policy, be permitted to use the Data for the purposes for which it was originally supplied to us.
20. We may also disclose Data to a prospective purchaser of our business or any part of it.
21. In the above instances, we will take steps with the aim of ensuring your privacy is protected.
General
22. You may not transfer any of your rights under this privacy policy to any other person. We may transfer our rights under this privacy policy where we reasonably believe your rights will not be affected.
23. If any court or competent authority finds that any provision of this privacy policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this privacy policy will not be affected.
24. Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.
25. This agreement will be governed by and interpreted according to the law of England and Wales. All disputes arising under the agreement will be subject to the exclusive jurisdiction of the English and Welsh courts.
Changes to this privacy policy
26. CIL reserves the right to change this privacy policy as we deem necessary from time to time or as maybe required by law. Any changes will be immediately posted on the website and you are deemed to have accepted the terms of the privacy policy on your first use of the website following the alterations.
This privacy notice was last updated on 15th September 2020.
Job applicant privacy notice
Data Protection Manager: Laura Bollands – laura.bollands@citrefine.com
As part of any recruitment process, Citrefine International Limited (a company registered in England and Wales (with Company Number 2962721) whose registered office is located at Moorfield Road, Yeadon, Leeds, LS19 7BN, England) (“Citrefine International”) collects and processes personal data relating to job applicants. We are committed to being transparent about how we collect and use that data and to meeting our data protection obligations.
What information does Citrefine International collect?
We collect a range of information about you. This includes:-
- your name, address and contact details, including email address and telephone number;
- details of your qualifications, skills, experience and employment history;
- information about your current level of remuneration, including benefit entitlements;
- whether or not you have a disability for which the organisation needs to make reasonable adjustments during the recruitment process;
- information about your entitlement to work in the UK.
We collect this information in a variety of ways. For example, data might be contained in application forms, CVs or resumes, obtained from your passport or other identity documents, or collected through interviews or other forms of assessment, including online tests.
We will also collect personal data about you from third parties, such as references supplied by former employers. We will seek information from third parties only once a job offer to you has been made and will inform you what we are doing so.
Your data will be stored securely in a range of different places, including on your application record, in electronic and hard copy HR management systems and on other IT systems (including email).
Why does Citrefine International process personal data?
We need to process data to take steps at your request prior to entering into a contract with you. We also need to process your data to enter into a contract with you.
In some cases, we need to process data to ensure that we are complying with legal obligations. For example, we are required to check a successful applicant’s eligibility to work in the UK before employment starts.
We have a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing data from job applicants allows the organisation to manage the recruitment process, assess and confirm a candidate’s suitability for employment and decide to whom to offer a job. We may also need to process data from job applicants to respond to and defend against legal claims.
Where Citrefine International relies on legitimate interests as a reason for processing data, it has considered whether or not those interests are overridden by the rights and freedoms of employees and has concluded that they are not.
Citrefine International processes health information if we need to make reasonable adjustments to the recruitment process for candidates who have a disability. This is to carry out our obligations and exercise specific rights in relation to employment.
Citrefine International will not use your data for any purpose other than the recruitment exercise for which you have applied.
If your application is unsuccessful, we may keep your personal data on file in case there are future employment opportunities for which you may be suited. We will ask for your consent before we keep your data for this purpose and you are free to withdraw your consent at any time.
Who has access to data?
Your information will be shared internally for the purposes of the recruitment exercise. This includes members of the HR consultancy and recruitment team, interviewers involved in the recruitment process, managers in the business area with a vacancy and IT staff if access to the data is necessary for the performance of their roles.
We will not share your data with third parties, unless your application for employment is successful and it makes you an offer of employment. We will then share your data with former employers to obtain references for you, employment background check providers to obtain necessary background checks.
Your data may be transferred outside the European Economic Area (EEA) to discuss your application with our US office. We share your personal data within Citrefine International and Citrefine North America Inc. This will involve transferring your data outside the European Economic Area (EEA).
Where our external third parties are based outside the EEA, any personal data they process will involve a transfer of data outside of the EEA.
Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring relevant safeguards are implemented.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
How does Citrefine International protect data?
We take the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the proper performance of their duties.
We ensure that where data is securely stored on an electronic device e.g. computer or personal device, that this is password protected and encrypted. Where personal data is held manually this is kept in a locked cabinet where the key is kept securely. The office is locked when not in use.
For how long does Citrefine International keep data?
If your application for employment is unsuccessful, we will hold your data on file for 6 months after the end of the relevant recruitment process. At the end of that period or once you withdraw your consent, your data is deleted or destroyed.
If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your personnel file and retained during your employment. The periods for which your data will be held will be provided to you in a new Employee Privacy Notice.
Your rights
As a data subject, you have a number of rights. You can:
- access and obtain a copy of your data on request;
- require us to change incorrect or incomplete data;
- require us to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing;
- object to the processing of your data where we are relying on its legitimate interests as the legal ground for processing; and
- ask us to stop processing data for a period if data is inaccurate or there is a dispute about whether or not your interests override the organisation’s legitimate grounds for processing data.
If you would like to exercise any of these rights, please contact Laura Bollands – Data Protection Manager at laura.bollands@citrefine.co.uk
If you believe that we have not complied with your data protection rights, you can complain to the Information Commissioners Office.
What if you do not provide personal data?
You are under no statutory or contractual obligation to provide data to Citrefine International during the recruitment process. However, if you do not provide the information, we may not be able to process your application properly, or at all.
Scroll to top