Privacy Policy
The Mortimer Group which includes Mortimer Recruitment Ltd, Mortimer Recruitment Ltd, Mortimer Living Ltd, Mortimer Care (Mortimer Recruitment Ltd t/a), (collectively and individually referred to as the Group) respects your privacy and is committed to protecting your personal data. This privacy notice will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.
This privacy policy reflects what we need to tell you to comply with the General Data Protection Regulations and sets out how we record and use the personal information provided by you and informs you of your rights for controlling that information.
Note: This website is not intended for children, and we do not knowingly collect data relating to children.
It is important that you read this privacy notice together with any other privacy notice or fair processing notice or GDPR Agreement we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.
Mortimer Recruitment Ltd (the Data Controller)
This privacy notice is issued on behalf of the Mortimer Group so when we mention, “we”, “us” or “our” in this privacy notice, we are referring to the relevant company in the Mortimer Group responsible for processing your data. We will let you know which entity the controller for your data will be when we provide a service to you. Mortimer Recruitment Ltd is the controller and responsible for the company website.
The data controller is Mortimer Recruitment Ltd, a UK Private limited Company (Registered in England and Wales (Reg. No. 15247417)
Whose registered office is:
Mortimer Recruitment Ltd, Enterprise Centre, David Lane, Nottingham NG6 0JU
Enquiries are to be made to:
The Data Protection Officer
Email: data@mortimerrecruit.com
Mortimer Recruitment Ltd is registered with the Information Commissioners Office (Registration No. ZB880822).
Generally
How we collect use your information (the Data Subject)
Definitions and interpretation
In this Policy the following terms shall have the following meanings:
“GDPR / General Data Protection Regulation Agreement” Means the agreement between Mortimer Recruitment and a User who registers as a ‘Candidate’ with Mortimer Recruitment Ltd
“Candidate” Means an individual seeking to engage Mortimer Recruitment for the purpose of being introduced to clients for employment opportunities.
“Data Controller” Means Mortimer Recruitment Ltd
“Data Processor” Means our service providers of our back office, cloud-based database systems including and analytical services.
“Data Subject” Means a user (candidate) who has given explicit consent to Mortimer Recruitment Ltd to use their personal data in the course of carrying out its services, as recorded in the GDPR Candidate Agreement
“Content” means any text, graphics, images, audio, video, software, data compilations and any other form of information capable of being stored in a computer that appears on or forms part of this Website;
“Cookie” means a small file that resides on your computer’s hard drive that often contains an anonymous unique identifier and is accessible only by the website that placed it there, not any other sites;
“Data” means collectively all information that you submit to the Website. This includes, but is not limited to, Account details and information submitted using any of our Services or Systems;
“Services” means collectively any online facilities, tools, services or information that Mortimer Recruitment Ltd makes available through the Website either now or in the future;
“System” means any online communications infrastructure that Firefish Software makes available through the Website either now or in the future. This includes, but is not limited to, web-based email, message boards, live chat facilities and email links;
“User” / “Users” means any third party that accesses the Website and is not employed by Mortimer Recruitment Ltd and acting in the course of their employment;
and “Website” means the website that you are currently using and any sub-domains of this site, unless expressly excluded by their own terms and conditions.
Relevant Legislation
Along with our business and internal computer systems, this website is designed to comply with the following national and international legislation with regards to data protection and user privacy:
UK Data Protection Act 1988 (DPA)
EU Data Protection Directive 1995 (DPD)
EU General Data Protection Regulation 2018 (GDPR)
This site’s compliance with the above legislation, all of which are stringent in nature, means that this site is likely compliant with the data protection and user privacy legislation set out by many other countries and territories as well. If you are unsure about whether this site is compliant with your own country of residences’ specific data protection and user privacy legislation you should contact our data protection officer (details of whom can be found in section 12) for clarification.
Who we are and what we do
Mortimer Recruitment Ltd; We are a recruitment agency and recruitment business as defined in the Employment Agencies and Employment Businesses Regulations 2003 (our business). We collect the personal data of the following types of people to allow us to undertake our business.
- Prospective and placed candidates for permanent or temporary roles.
- Prospective and live client contacts.
- Supplier contacts to support our services.
- Employees, consultants, temporary workers.
We collect information about you to carry out our core business.
How we collect and use your information
We collect data in a variety of ways including from the internet (this website), email, telephone and in person when.
- Someone makes an enquiry regarding a career opportunity either in person, by email or telephone
- Someone (either as an individual or on behalf of a company) makes an enquiry or appoints Mortimer Recruitment to source and recruitment staff on its behalf
- Interacts with Mortimer Recruitment via our social media platforms i.e. Twitter, Facebook or Instagram
- Completes and submits an enquiry via the contact section on our website
- Registers with the web site to apply for a position, to receive job alerts or marketing information
- Instructs us on a contractual and transactional basis
- Your business card
- Personal recommendations
- Other source such as LinkedIn, corporate websites, job board websites and CV Libraries
Our legal basis for processing data
Our legal basis for the processing of personal data is.
- A legitimate interest, or
- Consent provided by you to process your data for the purpose of providing recruitment and career services
- To comply with a legal obligation that we have
- To fulfil a contractual obligation that we have with you
Our Legitimate Business Interests
Our legitimate interests in collecting and retaining your personal data:
As a recruitment business and recruitment agency we introduce candidates to clients for permanent employment, temporary worker placements or independent professional contracts. The exchange of personal data of our candidates and our client contacts is a fundamental, essential part of this process.
In order to support our candidates’ career aspirations and our clients’ resourcing needs we require a database of candidate and client personal data containing historical information as well as current resourcing requirements.
To maintain, expand and develop our business we need to record the personal data of prospective candidates and client contacts.
Consent
Should we want or need to rely on consent to lawfully process your data we will request your consent orally, by email or by an online process for the specific activity we require consent for and record your response on our system. Where consent is the lawful basis for our processing you have the right to withdraw your consent to this processing at any time.
Automated Decision Making
We do not undertake automated decision making or profiling. We do use our computer systems to search and identify personal data in accordance with parameters set by a person. A person will always be involved in the decision-making process.
Registered Candidates
Users who register with Mortimer as a candidate are asked to give Mortimer Recruitment Ltd consent to process their personal data. They are also able to log in to their account at any time to change their contact and marketing preferences.
Without limitation, the data collected and stored may consist of all or some of the following information.
- your name
- your job title and profession
- Salary details (including bonuses and benefits)
- Your qualifications and training information
- company name (as applicable)
- contact information such as email addresses and telephone numbers
- demographic information such as address and post code
- Date of birth
- Details of driving licence information
- Evidence of the right to work in the UK (if applicable)
Data Retention – How long we keep your data for
We retain different types of data for differing periods of time. The criteria we use to determine whether we should retain your personal data and how long for includes:
- The nature of the personal data
- Its perceived accuracy of your data
- Your engagement levels with our services
- Our legal obligations following an offer or when a placement has been made
- Legislative requirements
- Any other legal, financial or contractual obligation
We may archive part or all of your personal data, or retain it on our financial systems but delete all or part of it from our recruitment software system. On removal, we may anonymise parts of your data – particularly following a request for suppression or deletion of your data – to ensure we do not re-enter your personal data to our database, unless you have requested us to do so.
Our current retention period for data on candidates who have not been placed, or are no longer showing any signs of engagement with our website, is 2 Years.
Site visitation tracking and Cookies
Like most websites, this site uses Google Analytics (GA) to track user interaction. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website.
Although GA records data such as your geographical location, device, internet browser and operating system, none of this information personally identifies you to us. GA also records your computer’s IP address which could be used to personally identify you but Google do not grant us access to this.
GA makes use of cookies, details of which can be found on Google’s developer guides.
Disabling cookies on your internet browser will stop GA from tracking any part of your visit to pages within this website.
Marketing and Communications
Our Blog
We will shortly be publishing a blog on our web site. Should you choose to add a comment to any posts that we have published on our blog, the name and email address you enter with your comment will be saved to this website’s database, along with your computer’s IP address and the time and date that you submitted the comment. This information is only used to identify you as a contributor to the comment section of the respective blog post and is not passed on to any of the third-party data processors.
Only the name entered on the comment will be shown on the public-facing website
Your comment and its associated personal data will remain on this site until we see fit to either 1) remove the comment or 2) remove the blog post. Should you wish to have the comment, and its associated personal data deleted, please email us here using the email address that you commented with.
If you are under 16 years of age you MUST obtain parental consent before posting a comment on our blog.
NOTE: You should avoid entering personally identifiable information to the actual comment field of any blog post comments that you submit on this website.
Email links
Should you choose to contact us using email, none of the data that you supply will be stored by this website or passed to / be processed by any of the third-party data processors defined in Section 6. Instead, the data will be collated into an email and sent to us over our Microsoft 365 Exchange servers are protected by TLS (sometimes known as SSL) meaning that the email content is encrypted using 256-bit cryptography before being sent across the internet. The email content is then decrypted by our local computers and devices.
Email newsletter(s)
If you choose to register as a candidate with Mortimer, you have the option of signing up to our email newsletters and job alerts.
Registered users have the option of logging into their account at any time to change these preferences.
When registering with Mortimer candidates will be asked to agree to the GDPR Agreement to allow Mortimer to use their personal data for the purposes of providing them with information about job and career opportunities, latest news from the company and to promote them as a candidate to potential employers.
Other business e-mail and correspondence will be sent as required on an ad-hoc basis as part of running our normal business operations and issued through our Microsoft 365 exchange system as noted above (i.e. there is no use of personal information collected through the site).
If you are under 16 years of age you MUST obtain parental consent before registering with us joining our email newsletter.
Third party data processors
Our website is hosted by Fasthosts, managed by 1924 Media Services Ltd. Our, database and CRM services are provided by Firefish Software. We also use Google Analytics for site visitation tracking. Our third parties have been carefully chosen and all of them comply with the legislation set out above.
Data Security
Data security is of great importance to Mortimer Recruitment and to protect the Data we hold and control we have put in place suitable physical, electronic and managerial procedures to safeguard and secure Data collected online.
Other Sites/Links
From time to time, we may provide links to the websites of other organisations. Please be aware that we can take no responsibility for any information you may submit to such websites which may have different privacy and security policies and procedures.
Data Control and GDPR
Data Control
Registered Users can control the use of their information via their account. Other use can request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
You can also request the restriction of processing of your personal information, this enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it. This can also be carried out by registered users by logging into their account.
Right to be forgotten
Within one month of a user’s request, we will erase all your personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
Object to processing
You may object to the processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
Data Breaches
We will report any unlawful data breach of this website’s database or the database of any of our third-party data processors to any and all relevant persons and authorities within 72 hours of the breach if it is apparent that personal data stored in an identifiable manner has been stolen.
Transfer of Information
Mortimer will transfer your information to another organisation within one month following a request from a User in a readily available data format where practicable.
Keeping you informed / Changes to our privacy policy
This privacy policy may change from time to time in line with legislation or industry developments. Registered Users will receive a notification via e-mail about changes to this policy. We will not explicitly inform our clients or website users of these changes. Instead, we recommend that you check this page occasionally for any policy changes.
Specific policy changes and updates are mentioned in the change log below.
Change Log:
March 2025 – Policy developed and implemented
Data Controller
The data controller of this website is: Mortimer Recruitment Ltd; a UK Private limited Company (Registered in England and Wales (Reg. No. 15247417)
Whose registered office is:
NBV Enterprise Centre, David Lane, Nottingham NG6 0JU
Data Protection Officer
Mortimer Recruitment Ltd
Email: date@Mortimerrecruit.com