Last updated: 4 June 2020
Rare Recruitment Ltd ("we") are committed to protecting and respecting your privacy.
Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
By visiting our websites listed here:
- finance.hemisphereapp.io, and
- highyieldprogramme.com (“Sites”),
signing up to our products, or by otherwise providing personal data to us (either directly or indirectly), you acknowledge and agree to the practices described in this policy.
For the purpose of the EU General Data Protection Regulation (“GDPR”), the data controller is Rare Recruitment Ltd of 8 Blackstock Mews, Islington, London, N4 2BT.
Any changes we may make to this policy in the future will be posted on this page. Please check back frequently to see any updates or changes to this policy.
If you are in Australia, we adhere to the obligations of the Privacy Act (1988) (Cth) with respect to the collection, storage, use, transfer and disclosure of personal information that we receive from you.
Personal data we may collect from you
“Personal data”, or personal information, means any information that enables us to identify you, directly or indirectly when combined with other information we hold. It includes “pseudonymised personal data” where identifying information such as name and address has been replaced with a pseudonym. It does not include “anonymous data” where the identity has been permanently removed so that it is no longer possible to identify an individual. We may collect and process the following kinds of personal data about you:
Information you give to us
- You may give us personal data about you by filling in forms on our Sites, for example, the Vantage form on vantageapp.io or at apply.rarerecruitment.co.uk, by requesting a demo of our products or services, or by corresponding with us by phone, e-mail or in person during a meeting with us. This includes personal data you provide when you register to use our Sites, products or services, and when you report a problem with the same.
- The personal data you give us may include your name, address, e-mail address, phone number, photograph, gender and social mobility, qualifications and examination grades, work experience and extracurricular activities, job applications and the outcome of those applications.
- You may also give us special categories of personal data, including details of your gender, race or ethnicity, health data and date of birth.
Information you give to us when you sign up to Vantage
- Vantage allows candidates to connect with employers and hear directly about opportunities. When you sign up to Vantage, you will be asked a series of questions about your socio-economic background (e.g. whether you have lived in care, whether you received free school meals etc). We use this information to help assess whether you overachieved academically in light of your surrounding personal circumstances by comparing your results with national statistics. Your contextual data is then available to potential employers using Vantage (“Vantage partner firms”) as part of your overall candidate profile.
- By completing your Vantage profile, you acknowledge that the information you have provided, including personal data, and your contextual data, will be shared with Vantage partner firms, who may contact you directly regarding employment opportunities through Vantage or directly from their firm email account. A list of the Vantage partner firms who will have access to your information, and a link to their privacy policies, can be found here:
Vantage partner firms will have access to any special categories of personal data that you have chosen to share, provided you gave your explicit consent when creating your Vantage profile. This may include data relating to your gender, ethnicity, sexual orientation, and any health information you voluntarily provide. Vantage partner firms use this data in line with their own privacy policies as part of their recruitment process. We rely on your explicit consent to share special categories of personal data with Vantage partner firms, which can be withdrawn at any time by updating your profile settings.
You can access, amend or delete your own personal data, or your entire Vantage account, at any time by logging in to your account and navigating to the Account Preferences section.
Rare may process your personal data provided when creating your Vantage profile for further research purposes (e.g. to identify trends such as the number of people who have lived in care who achieve AAA in their A levels). Please note that Vantage does not involve automated individual decision-making (making a decision solely by automated means without any human involvement). Vantage collects specific data which allows a human recruiter to better evaluate the outperformance of an individual.
Information you give to us when you sign up to Hemisphere
- When you sign up to Hemisphere, you will be provided with an invitation code to create your account using your email address and a password. Once your account is created, it will stay open until you complete the training, for a maximum of 30 days. It will then be deleted.
- We retain the following anonymised information:
- Invitation code;
- How many modules were completed; and
- How much time was spent on the training.
- We do not retain your answers to any questions from the training.
- We will not send you any unsolicited emails.
Information we collect about you
- With regard to each of your visits to our Sites we may automatically collect the following information:
- technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, browser type and version and platform; and
- information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our Sites (including date and time); page response times, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.
Information we receive from third parties
- We may receive personal data about you from employers and potential employers who you apply to with our help, who provide us with feedback and decision outcomes relating to your performance during the recruitment process, during internships and/or work placements.
Information we receive from third parties when you apply for a position directly with that third party
- Many employers in the UK use Rare’s Contextual Recruitment System (CRS) in the context of their application processes. This means that when you apply for a position with some employers you will be asked a series of questions about your socio-economic background (e.g. whether you have lived in care, whether you received free school meals etc).
- Your answers to these questions are then passed to Rare (only with your consent) but will exclude identifying data such as your name, phone number, postal address, email address or date of birth unless otherwise stated on your application form.
- The personal data you give us may include your age 14-16, 16-18 and university qualifications and examination grades, your home postcode at age 16, free school meals eligibility, whether you worked during school and university, whether you were first in your family to go to university, refugee/asylum seeker status, whether you spent time in care and parent/carer status .
- This pseudonymised information is used to help assess whether you overachieved academically in light of your surrounding personal circumstances by comparing your results with national statistics. The results of Rare’s data processing are then passed back to the employer who can link the result to your individual application and further assess your application. If you consent to it when you apply for a position directly with a third party which uses CRS, the data which Rare receives from employers may also be used by Rare for further research purposes (e.g. to identify trends such as the number of people who have lived in care who achieve AAA in their A levels). Please note that the CRS does not involve automated individual decision-making (making a decision solely by automated means without any human involvement). The CRS collects specific data which allows a human recruiter to better evaluate the outperformance of an individual.
To opt out of being tracked by Google Analytics please visit: /tools.google.com/dlpage/gaoptout.
How we use your personal data?
We will only use your personal data for purposes described in this policy and when the law allows us to do so.
We process your personal data for the following purposes as is necessary for the performance of a contract between you and us, or to answer questions or take steps at your request prior to entering into a contract:
- to carry out our obligations arising from any agreements between you and us and to provide you with the information and services that you request from us;
- to send you information about suitable job opportunities
- to allow employers to send you information about suitable job opportunities; and
- to notify your school, sixth form college or university that you have applied to a programme, and the outcome of that application, if the opportunity was promoted to you by your school, sixth form college or university.
We process your personal data for the following purposes as necessary for certain legitimate interests, or where you have given your informed consent (or explicit consent for special categories data) to such processing as required by applicable law (such consent can be withdrawn at any time):
- to provide your personal data to our clients (universities and their associated colleges, employers and Vantage partner firms) to whom you are applying and with whom you have permitted us to share your personal data;
- to send you information and newsletters;
- to notify you about changes to our service;
- to conduct periodic campaigns, satisfaction or market research surveys, as well as to analyse the results; and
- to offer our services to you in a personalised way.
We process your personal data for the following purposes as necessary in our legitimate business interests, (provided such interests are not overridden by your interests or fundamental rights):
- to perform those research activities described above (only fully anonymised data will be used for research purposes);
- to resolve any disputes, if you lawfully exercise your rights or if you wish to dispute any part of our service offering;
- to ensure the security of your data and our business, preventing or detecting fraud or abuses of our services, for example, by requesting verification information in order to reset your account password (if applicable);
- to develop and improve our Sites, products and services, for example, by reviewing the use of our Sites by users;
- to administer our Sites and for internal business administration and operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes; and
- to comply with applicable law, for example, in response to a request from a court or regulatory body, where such request is made in accordance with the law.
Do we disclose your personal data?
We may disclose your personal data to third parties:
- In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
- If Rare Recruitment Ltd or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
- So that we can use third party software to contact you via text or email.
- As described elsewhere in this policy.
We use some sub-contractors in the software development part of our business. We use service providers who provide penetration testing services, front end software development, quality assurance application programme interface development and systems administration.
Quality and security
We require all our sub-contractors to sign contracts which include restrictive covenants, detailed clauses on client confidentiality, and data protection compliance.
We require our sub-contractors to use secure communication for all their work with Rare.
Work devices are encrypted, password protected or both.
We require all our sub-contractors to receive information security training and to provide satisfactory references to us.
Storage of your personal data
All information you provide to us is stored on a secure AWS server located in the British Isles. The backup server is located in Ireland.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. See the section below on data security for further details.
How long we store your personal data
Our Sites may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
In accordance with the General Data Protection Regulation (GDPR), in certain circumstances you have the following rights:
Request access to your personal data. You may have the right to request access to any personal data we hold about you as well as related information, including the purposes for processing the personal data, the recipients or categories of recipients with whom the personal data has been shared, where possible, the period for which the personal data will be stored, the source of the personal data, and the existence of any automated decision making.
- Request correction of your personal data. You may have the right to obtain without undue delay the rectification of any inaccurate personal data we hold about you.
- Request erasure of your personal data. You may have the right to request that personal data held about you is deleted.
- Request restriction of processing your personal data. You may have the right to prevent or restrict the processing of your personal data.
- Request transfer of your personal data. You may have the right to request the transfer of personal data directly to a third party where this is technically feasible.
To exercise any of these rights, in the first instance please contact email@example.com.
If you have any questions in relation to this policy, please contact firstname.lastname@example.org.
Rare Recruitment Limited is an ISO27001:2013 certified company, Certificate Number: 214857.
Rare Recruitment Limited is a Cyber Essentials Plus accredited company, Certificate Number: CEP-CSL-0105-01. We have also been issued with the IASME Governance Standard, Certificate Number: SA003194.