Privacy
Expertise is a leading professional service firm providing a broad range of Employment and Payroll and Accounting services. We are committed to protecting your privacy and the privacy of information provided. We do not share your personal information with any third parties, unless their involvement is critical to our service and express consent has been obtained.
We engage best practice security measures to protect information from unauthorized access.
Expertise is committed to processing data in accordance with its responsibilities under the applicable laws and regulations.
What does this Privacy Statement do?
This statement explains Expertise’s information processing practices. It applies to any personal information you provide to Expertise and any personal information we collect from other sources.
This is a statement of our practices and of your rights regarding your personal information.
Who is responsible for your personal information?
The Data Controller determines the purposes for which and the means by which personal data is processed. The Data Processor processes personal data only on behalf of the Data Controller.
This may also be explained in separate privacy notices made available when your personal information is first collected by Expertise (i.e. privacy notice may be provided when you or your employer engages Expertise to provide a service).
Some of the services which Expertise provides to its clients are provided as a Data Processor, which means that the Client remains primarily responsible for your information in their role as Data Controller. In circumstances where Expertise is not the data controller, we may re-direct a query about our use of your information to our client.
When and how do we collect your information?
Expertise collects personal information in numerous different ways, depending on the service engaged.
For Recruitment Services:
For Human Resources and Payroll Support Services:
For Immigration Services:
What information do we collect?
Information you provide to us
When you engage Expertise for services, we ask that you provide accurate and necessary information that enables us to respond to your service request. When you provide personal information to us, we use it for the purposes for which it was provided as stated at the point of collection or as obvious from the context of collection.
In order to service your Recruitment request, we require the following information from you:
In using our services, we may also ask you to provide us with the following additional information:
Interview notes will also form part of the information we have on our file about you.
Information we collect from clients or third parties
For Recruitment services, we may collect the following:
For Human Resources and Immigration services, we may collect the following:
For Payroll services, we may collect the following:
Information we collect over Expertise websites
We may ask you for some or all the following types of information when you make a service inquiry or register as an active job seeker.
This includes, but is not limited to:
How do we use your personal information?
The following is a summary of the purposes for which we use personal information.
Performing services for our clients
We process personal information which our clients provide to us in order to perform our professional services. This may impact you, for example, where you are the employee of our client. The precise purposes for which your personal information is processed will be determined by the scope of our client engagement. It is the obligation of our client to ensure that you understand that your personal information will be disclosed to Expertise.
Expertise uses personal information for different purposes depending on the service engaged.
For Recruitment Services, we will use your personal information to assess your suitability for an employment opportunity based on:
For Human Resources and Immigration Services, we use your personal information in order to:
For Payroll Services, we use your personal information in order to:
Administering our client engagements
We process personal information about our clients and the individual representatives of our clients in order to:
Contacting and marketing our clients and prospective clients
We process personal information about our clients and the individual representatives of our clients in order to:
Legal basis
The processing of your personal information is supported by a lawful basis.
For Recruitment services:
For Human Resources, Immigration and Payroll services, we will use a contract (we help an employer to fulfill an obligation to you under an employment contract in relation to the delivery of employee benefits) and legitimate commercial interest (delivery of our services in terms of a contract you may not be party to) as the basis for processing your personal information.
Before collecting and/or using any special categories of data, or criminal record data, we will establish a lawful exemption which will allow us to use that information. This exemption will typically be your explicit consent.
Do we collect information from children?
While our services generally do not extend to minors, we do facilitate networking and career programs and events which are open to local schools and school-aged students. In all instances, we work with student custodians and guardians where personal information is required for program registration and related initiatives to seek consent on behalf of minors.
How long do we retain your personal information?
Your personal data is only to be retained for the period of time required to fulfill the purpose for which it was collected (taking into account our statutory and contractual obligations to retain information), unless a longer retention period is permitted by law, in accordance with the Expertise Record Retention Policy.
Do we disclose your personal information?
Within Expertise
We may share your personal information with other Expertise group entities to serve you.
We do not share your personal information with third parties except in the circumstances outlined below.
Authorized Service Providers
We may disclose your information to service providers we have engaged (as data processors) to perform services on our behalf. These service providers are contractually restricted from using or disclosing the information, except as necessary to perform services on our behalf or to comply with legal requirements.
These activities could include any of the processing activities that we carry out as described in the above section, ‘How we use your personal information.’
Examples include:
These third parties appropriately safeguard your data, and their activities are limited to the purposes for which your data was provided.
Legal Requirements
Expertise may disclose personal information in the following instances:
Do we transfer your personal information across geographies?
Expertise operates in multiple jurisdictions and may transfer personal information across geographical borders to group entities or authorized service providers in other countries working on our behalf.
We use legal mechanisms to ensure your rights and protections follow your personal information:
Countries where we transfer personal information to include, but are not limited to, Bermuda, the United States of America, Canada, Cayman Islands and the Philippines.
Do we have security measures in place to protect your information?
Expertise has implemented a range of internal controls to protect your personal information. These internal controls are supported by policies approved, implemented and monitored by Senior Management.
We have implemented strong physical and logical access controls to prevent unauthorized access to your personal information. The computers and server equipment on which your personal information is stored are kept in a secure environment.
When we collect sensitive information, this information is encrypted and transmitted to us in a secure way using our encrypted portal or encrypted email. Requests for sensitive information by your employer are also directed through the encrypted portal or encrypted email.
Any handwritten interview notes are converted to soft-copy and stored in our secure Applicant Management System (“AMS”). Once added to AMS, all hard-copy material is destroyed.
How can you update your communication preferences?
We take reasonable steps to provide you with communication about your information. You can update your communication preferences in the following ways.
Newsletters
If you request electronic communications, such as an e-newsletter, you will be able to unsubscribe at any time by following the instructions included in the communication.
Contact us by e-mail as noted below. Please include your current contact information, the information you are interested in accessing and your requested changes. If we do not provide you with access, we will provide you with the reason for refusal and inform you of any exceptions relied upon.
Rights relating to your data
Right to Access, Rectification, Restriction and Objection
Upon request, you shall be informed of the existence, use and disclosure of your personal data, and shall be given access to it. You may verify the accuracy and completeness of your personal data, and may request that it be amended, if appropriate. Should you believe that your information is being used for purposes other than in the carrying out of recruitment services, you have the right to request the restriction of such processing.
Contact us at the email address disclosed at the end of this Privacy Notice.
Summary information is available on request and we will attempt to respond to the request within 30 days of receipt. More detailed requests which require archive or other retrieval costs may be subject to our normal professional and disbursement fees and may take longer to respond to.
Right to Withdraw Consent
Your knowledge and consent are required for the collection, use or disclosure of your personal data, except where inappropriate or permitted by law. Depending on the sensitivity of the information, this consent can be implied or expressed; however, wherever commercially feasible Expertise shall attempt to obtain express consent. Consent to our use of personal data can be withdrawn at any time by contacting the Data Privacy Officer in writing and following the directions at the end of this Privacy Notice.
Right to be Forgotten
You have the right under certain circumstances to have your personal information erased. Your information can only be erased if your data is no longer necessary for the purpose for which it was collected, and we have no other legal ground for processing the data.
Right to Data Portability
You have the right to data portability, which requires us to provide personal information to you or another controller in a commonly used, machine readable format, but only where the processing of that information is based on (i) consent; or (ii) the performance of a contract to which you are a party.
Right to Lodge a Complaint
We hope that we can resolve any query or concern that you may have raised about our use of your information.
The General Data Protection Regulation also gives you right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred.
The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/make-a-complaint.
The supervisory authority in Bermuda is the Privacy Commissioner who may be contacted at privcom@privacy.bm
The supervisory authority in Cayman Islands is the Office of the Ombudsman who may be contacted at info@ombudsman.ky
International Transfers
As noted above, you can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside of the European Union.
How policy changes will be communicated
Our policy notice will be posted on our website at www.expertisegroup.com. We will notify you of changes by posting the revised policy on the aforementioned webpages. Any policy revisions are effective immediately upon posting on the webpage.
We have the right to make changes to this policy at any time and advise that you regularly review this policy. If you object to any changes, please direct your comments your local privacy authority (refer “Right to Lodge a Complaint” section).
How to address concerns with respect to use of personal data
Should you have any questions or concerns about this policy or any concerns over misuse of personal data, please contact us:
Email: privacy@expertisegroup.com
Data Privacy Officer: Jason Wakeford
This statement was last updated on June 19, 2020.
© Expertise Group Limited 2020