PRIVACY POLICY

Privacy Policy for Investinu Group

Investinu Group ("we," "us," "our") is committed to safeguarding the privacy of our clients, candidates, and website users. This privacy policy explains how we collect, use, store, and protect your personal information in compliance with the UK GDPR and the Data Protection Act 2018.

1. Data Protection Policy and Procedures

We have implemented robust internal policies to ensure the secure and lawful processing of personal data. These include:

• Purpose: To ensure compliance with the UK GDPR and other applicable laws, safeguarding personal information handled by Investinu Group.
• Responsibilities: Employees are trained and required to adhere to data protection practices.
• Retention Periods: Personal data is retained only for as long as necessary to fulfill the purposes outlined in this policy or comply with legal obligations.

If you require more details on our Data Protection Policy, please contact us at info@investinugroup.com.

2. Personal Data We Collect

We process the following categories of personal information:

• Candidates: Name, contact details, employment history, qualifications, references, salary expectations, and work eligibility information.
• Clients: Contact details, job descriptions, hiring criteria, and billing details.
• Website Users: IP addresses, browser types, and cookies (see "Cookies Policy" below).

We do not routinely process special category data unless provided voluntarily and with explicit consent.

3. How We Use Your Personal Information

We use personal information for the following purposes:

• To match candidates with suitable roles.
• Communicate with clients and candidates.
• To manage invoicing and billing processes.
• To comply with legal and regulatory requirements.

4. Managing Data Breaches

Investinu Group has a documented Data Breach Response Procedure, which includes:

• Identification and Containment: Immediate steps to identify and secure the breach.
• Assessment: Determining the scope and potential impact of the breach.
• Notification: Reporting significant breaches to the ICO within 72 hours and notifying affected individuals where required.
• Remediation: Taking corrective measures to prevent future breaches.

To request a copy of our full Data Breach Response Procedure, please contact us at info@investinugroup.com

5. Record of Processing Activities (ROPA)

As required under Article 30 of the UK GDPR, Investinu Group maintains a Record of Processing Activities (ROPA). This register includes:

• Categories of personal data processed.
• Purposes of processing.
• Data subjects involved.
• Data retention policies.
• Locations of data storage.
• Details of data transfers outside the UK.

If you would like an overview of our ROPA, please contact us at info@investinugroup.com

6. International Data Transfers

In some cases, personal data may be transferred to countries outside the UK for recruitment purposes. We ensure these transfers comply with applicable laws by:

• Using Standard Contractual Clauses (SCCs) where required.
• Ensuring third parties meet GDPR compliance standards.

7. Your Data Protection Rights

You have the following rights:

• Access your personal data.
• Correct inaccurate information.
• Request deletion of your data.
• Restrict or object to processing.
• Data portability.
• File a complaint with the ICO if you believe your rights have been violated.

To exercise any of these rights, please contact us at info@investinugroup.com

8. Cookies Policy

Our website uses cookies to enhance user experience and gather analytics.

9. Contact Us

If you have questions about this privacy policy or our data protection practices, please contact:

Investinu Group
Email: info@investinugroup.com
Website: www.investinugroup.com
ICO Registration Number: ZB851745