Privacy

 

This privacy notice tells you what to expect when Storm collects personal information. It applies to information we collect about:

You have the right to object to us processing your data.

Visitors to our websites

When someone visits a Storm ID website, we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.

Website tracking with Google Analytics

We use Google Analytics to measure website usage in order to inform improvements to the website. Google collects this data and provides us with access to aggregated reports of website use.

Google Analytics tracks information about:

  • Your location
  • Your device
  • Web pages on our website you have visited or interacted with

Google does not share any information about your identity with us.

Please refer to Google’s own privacy policy for further information about how Google uses your data.

Any data subject access requests pertaining to the information collected by Google Analytics should be made to Google.

How we use cookies

Please refer to our cookies policy.

Links to other websites

This privacy notice does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.

People who subscribe to our newsletters or request a publication from us

Mailchimp mailing lists

We use Mailchimp to gather information about subscribers for use of emailing our newsletter, sending job alerts, and identifying potential customers.

Through Mailchimp, we collect information you volunteer about:

  • Your name
  • Your email address
  • Your IP address
  • Your company
  • Your job title
  • Your location
  • Your job alerts preference
  • Your email subscription status
  • Your email client software
  • Your preferred email format
  • Your interaction with our emails

Please refer to Mailchimp’s own privacy policy for further information about how Mailchimp uses your data.

Any data subject access requests pertaining to the information stored by Mailchimp should be made to Mailchimp.

Google AdWords

At times, Storm ID Ltd utilise Google user data to target adverts to those who would find the information most relevant. Google compile this audience data on information given by a user to Google (such as date of birth and gender), but also indications that Google compile over time based on search history, YouTube video interactions, etc.

For those opted in to receiving communications from Storm ID Ltd, we may use personal information such as Storm ID website interactions, in order to target the relevant audience with useful content through Google Search, YouTube and Gmail Ads.

Personal information we may use for targeted Google advertising is:

  • Cookie based interactions with Storm ID Ltd web properties
  • Location

To find out more, visit Google’s Advertising Policies Help page.

Please refer to Google’s own privacy policy for further information about how Google uses your data.

Any data subject requests pertaining to the information collected by Google should be made to Google.

Bing Ads

At times, Storm ID Ltd utilise Bing user data to target adverts to those who would find the information most relevant. Bing compile this audience data on information given by a user to Bing (such as gender).

For those opted in to receiving communications from Storm ID Ltd, we may use personal information such as Storm ID website interactions, in order to target the relevant audience with useful content through Bing Ads.

Personal information we may use for targeted Bing advertising is:

  • Cookie based interactions with Storm ID Ltd web properties

Please refer to Bing’s own privacy policy for further information about how Bing uses your data.

Any data subject requests pertaining to the information collected by Bing should be made to Bing.

Job applicants and our current and former employees

During the recruitment process, it is necessary for Storm to collect some information about the people applying for the advertised roles.

When individuals apply to work at Storm, we will only use the information they supply to us to process their application and to monitor recruitment statistics. Where we want to disclose information to a third party, for example where we want to take up a reference or obtain a ‘disclosure’ from the Criminal Records Bureau, we will not do so without informing them beforehand unless the disclosure is required by law.

Personal information about unsuccessful candidates will be held until the recruitment process has been completed, then it will then be destroyed or deleted. We retain de-personalised statistical information about applicants to help inform our recruitment activities, but no individuals are identifiable from that data.

Once a person has taken up employment with Storm, we will compile a file relating to their employment. The information contained in this will be kept secure and will only be used for purposes directly relevant to that person’s employment. Once their employment with Storm has ended, we will retain the file in accordance with the requirements of our retention schedule and then delete it.

Applying directly to Storm

We do not use automated decision-making processes in our recruitment process. Every application is manually reviewed. We believe this is the best way to discover the best candidates and those with the most potential.

We collect the following data about candidates and ask for you to provide consent when you submit it:

  • Application form information which creates a record in our Applicant Tracking System, People HR:
    • Your first name
    • Your last name
    • Your email address
    • CVs and the information they contain as submitted by you. As a minimum, we will need to know:
      • Your name
      • Your address
      • Your email address
      • Your employment history with dates
      • Your qualifications with dates
    • Covering letters and the information they contain as submitted by you. As minimum, we will need to know:
      • Nothing, although a covering letter can help the hiring manager better understand your application
    • A link to your online CV, portfolio or GitHub repository
  • Interviewer notes. Throughout the recruitment process we will make and keep notes about your application

We use this information;

  • to help us decide who we will and will not invite to interview
  • as a basis for questioning during individual interviews
  • as a basis for determining who the best candidate for the role is

When you submit your CV and covering letter, we will keep this, and any notes we make, throughout the recruitment process for the role you’ve applied for, unless you withdraw your application, in which case we will immediately delete your information.

Once the role has been filled, if you were not successful, we will delete all your information, which could include:

  • Your name
  • Your address
  • Your email address
  • Your email correspondence with us
  • Any documents you’ve sent us such as your CV and covering letter
  • Any notes we’ve made during the recruitment process

If you have made a speculative application, we will keep the information you have submitted for up to six months, after which time it will be destroyed.

If you were offered the role and you accepted, we will keep your data throughout your employment with us. We have a separate privacy notice for employees.

Please refer to People HR’s own privacy policy for further information on how People HR use your data.

Any data subject requests pertaining to the information collected by People HR should be made to LinkedIn.

Other ways to apply

Sometimes we advertise our job openings on third party services to allow us to reach a wider audience that afforded by advertising on our own website alone. You may come across one or more of our advertised jobs in this way.

You do not have to apply using any of the services listed below. For every position advertised, you can apply by submitting your CV and covering letter directly to Storm via the forms on our careers website.

Applying via Digital Profile

(https://digitalprofile.com)

This is a third-party service. We use it to advertise our job opportunities more widely. To apply using Digital Profile you will need to create an account with them. Please refer to Digital Profile’s privacy policy for further information.

Any notifications of your application we receive from this service will be deleted upon completion of the recruitment process for the role you’ve applied for.

Storm does not have the ability to amend or delete information held on you by Digital Profile.

Any data subject requests pertaining to the information you provided to Digital Profile should be made to Digital Profile.

Applying via LinkedIn

At times, Storm ID Ltd utilise LinkedIn audience data to target adverts to those who would find the information most relevant. LinkedIn compile this audience data on information given by a user to LinkedIn (such as date of birth, education and job title), but also indications that LinkedIn compile over time based on engagements and associations with other LinkedIn users and pages.

For those opted in to receiving communications from Storm ID Ltd, we may use personal information such as Storm ID website interactions, in order to target the relevant audience with useful content through LinkedIn Matched Audiences.

Personal information we may use for targeted LinkedIn advertising:

  • Cookie based interactions with Storm ID Ltd web properties

Visit LinkedIn’s Contact Targeting and Conversion Tracking pages for their terms and conditions.

Please refer to LinkedIn’s own privacy policy for further information on how LinkedIn use your data.

Any data subject requests pertaining to the information collected by LinkedIn should be made to LinkedIn.

Applying via Facebook

We sometimes utilise Facebook audience data to target adverts to those who would find the information most relevant. Facebook compile this audience data on information given by a user to Facebook (such as date of birth and hometown) but also indications that Facebook compile over time based on page likes and engagements.

For those opted in to receiving communications from Storm ID Ltd, we may use personal information such as home city or town, in order to provide the relevant audience with useful content through Facebook ads.

Personal information we may use for targeted Facebook advertising:

  • Cookie based interactions with Storm ID Ltd web properties
  • Gender
  • Date of birth
  • Home country
  • Home city or town
  • Postcode
  • Full name
  • Location

To find out more, visit Facebook’s About the customer list upload process page.

Facebook’s data policy is also provides further information.

Please refer to Facebook’s own privacy policy for more information on how Facebook uses your data.

Any data subject requests pertaining to the information collected by Facebook should be made to Facebook.

Applying via Twitter

At times, Storm ID Ltd utilise Twitter audience data to target adverts to those who would find the information most relevant. Twitter compile this audience data on information given by a user to Twitter (such as date of birth) but also indications that Twitter compile over time based on Twitter post and page likes, and engagements with other Twitter accounts.

For those opted in to receiving communications from Storm ID Ltd, we may use personal information such as Twitter handles, in order to target the relevant audience with useful content through Twitter ads.

Personal information we may use for targeted Twitter advertising:

  • Cookie based interactions with Storm ID Ltd web properties
  • Location

To find out more about how we use Tailored Audiences visit Twitter’s Tailored Audiences page.

Please refer to Twitter’s own privacy policy for further information on how Twitter uses your data.

Any data subject requests pertaining to the information collected by Twitter should be made to Twitter.

Applying via Find a Job (formerly Universal Jobmatch)

(https://findajob.dwp.gov.uk)

We sometimes use the UK government’s Department for Work and Pensions (DWP) Find a Job service to advertise roles at Storm ID Ltd.

Storm ID Ltd only has access to the candidate data provided by Find a Job. It is our policy that this information is destroyed (for unsuccessful candidates) or compiled into an employee record (for successful candidates).

Please refer to Find a Job’s own privacy policy for more information on how Find a Job uses your data.

Any data subject requests pertaining to the information collected by Find a Job should be made to DWP.

Applying via a recruitment agency

We sometimes use recruitment agencies to help us recruit for our job openings. Recruitment agencies collect information on individuals in order to offer them job opportunities and to provide companies with candidates for job openings.

Storm ID Ltd only has access to the candidate data provided by recruitment agencies who are supplying candidates for our job openings. It is our policy that this information is destroyed (for unsuccessful candidates) or compiled into an employee record (for successful candidates).

Please refer to the recruitment agency’s own privacy policy for information on how they handle your data.

Any data subject requests pertaining to the information collected by a recruitment agency should be made to the recruitment agency.

Controlling your personal information

Making a subject access request

You can make a subject access request using any method you choose. We have supplied a simple form in Word and PDF formats that you can use to make your request. Our subject access requests guidance contains information about how to make a subject access request to Storm ID Ltd.

This is not a mandatory form. Subject access requests made in other formats will also be accepted, but this form is designed to speed up the process.

We will reject your request if your request is for data held by a third party, such as a supplier or client of Storm. Such requests should be made directly to the third party.

We will also reject your request if we cannot verify your identity.

Please note that manifestly unfounded or excessive requests can be charged for or rejected.

There are five types of subject access request:

  • Access
  • Rectification (correction)
  • Erasure
  • Data portability (export)
  • Objection

Each of these has its own requirements and rules for dealing with that particular type of request.

Please see our subject access requests guidance for further information on making subject access requests.

Changes to this privacy notice

We keep our privacy notice under regular review. This privacy notice was last updated on 24 May 2018.

How to contact us

If you want to request information about our privacy policy, you can contact us:

By email to:

dataprotection@stormid.com

Or by post to:

Data Protection Officer
Storm ID Ltd
Leith Assembly Rooms
43 Constitution Street
Edinburgh
EH6 7BG

We are a digital transformation consultancy. We help our clients succeed.

View Services