Privacy Policy

Ph.Creative Privacy Policies

This statement sets out our privacy policies with regards to general user privacy and the privacy of job applicants.

General Privacy Policy

1.0 Our beliefs regarding user privacy and data protection

  • User privacy and data protection are human rights
  • We have a duty of care to the people within our data
  • Data is a liability, it should only be collected and processed when absolutely necessary
  • We will never sell, rent or otherwise distribute or make public your personal information

2.0 Relevant legislation 

Along with our business and internal computer systems, this website is designed to comply with the following national and international legislation with regards to data protection and user privacy:

This site’s compliance with the above legislation, all of which are stringent in nature, means that this site is likely compliant with the data protection and user privacy legislation set out by many other countries and territories as well. If you are unsure about whether this site is compliant with your own country of residences’ specific data protection and user privacy legislation you should contact our data protection officer (details of whom can be found in section 8.0) for clarification.

3.0 Personal information that this website collects and why we collect it

This website collects and uses personal information for the following reasons:

3.1 Site visitation tracking

Like most websites, this site uses Google Analytics (GA) to track user interaction. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website.

Although GA records data such as your geographical location, device, internet browser and operating system, none of this information personally identifies you to us. GA also records your computer’s IP address which could be used to personally identify you but Google do not grant us access to this. We consider Google to be a third party data processor (see section 5.0 below).

GA makes use of cookies, details of which can be found on Google’s developer guides

Disabling cookies on your internet browser will stop GA from tracking any part of your visit to pages within this website.

3.2 Email links

Should you choose to contact us using an email link like this one, none of the data that you supply will be stored by this website or passed to / be processed by any of the third party data processors defined in section 5.0. Instead, the data will be collated into an email and sent to us over the Simple Mail Transfer Protocol (SMTP). Our SMTP servers are protected by TLS (sometimes known as SSL) meaning that the email content is encrypted using SHA-2, 256-bit cryptography before being sent across the internet. The email content is then decrypted by our local computers and devices.

3.3 Job applications

Should you choose to apply for a vacancy via our careers section using the application form found on each job page, none of the data that you supply will be stored by this website or passed to / be processed by any of the third party data processors defined in section 5.0. Instead, the data will be collated into an email and sent to us over the Simple Mail Transfer Protocol (SMTP). Our SMTP servers are protected by TLS (sometimes known as SSL) meaning that the email content is encrypted using SHA-2, 256-bit cryptography before being sent across the internet. The email content is then decrypted by our local computers and devices. All applications including CV attachments are sent to our vacancy email address: [email protected]

3.4 Data capture

If you choose to sign up for any downloadable resources on our website, the email address and any other details we request that you submit to us will be forwarded to Hubspot who provide us with inbound marketing services. We consider Hubspot to be a third party data processor (see section 5.0 below). These details that you submit will not be stored within this website’s own database or in any of our internal computer systems.

Your email address and additional information you submit will remain within Hubspot's database for as long as we continue to use Hubspot's services for email marketing or until you specifically request removal from the list. You can do this by unsubscribing using the unsubscribe links contained in any email newsletters that we send you or by requesting removal via email. When requesting removal via email, please send your email to us using the email account that is subscribed to the mailing list.

If you are under 16 years of age you MUST obtain parental consent before joining our email newsletter.

While your email address remains within the Hubspot database, you will receive periodic (approximately three times a year) newsletter-style emails from us.

4.0 About this website's server

This website is hosted on Microsoft Azure within a UK data centre located in their UK West region. Full details of Azure's data centres can be found here.

Information on Azure Security can be found here

All traffic (transferral of files) between this website and your browser is encrypted and delivered over HTTPS.

5.0 Our third-party data processors

We use a number of third parties to process personal data on our behalf. These third parties have been carefully chosen and all of them comply with the legislation set out in section 2.0. All 3 of these third parties are based in the USA and are EU-U.S Privacy Shield compliant.

6.0 Data breaches

We will report any unlawful data breach of this website’s database or the database(s) of any of our third party data processors to any and all relevant persons and authorities within 72 hours of the breach if it is apparent that personal data stored in an identifiable manner has been stolen.

7.0 Data controller

The data controller of this website is: PH-CREATIVE Limited which is a company registered in England and Wales, company number 5088310 whose registered office is:
Queen Insurance Building
24 Queen Avenue
Liverpool
L2 4TZ

8.0 Data protection officer

Mr. Jim Taylor
Operations Director, Ph.Creative.
Telephone: +44 (0)151 227 5549
Email: [email protected]

9.0 Changes to our privacy policy

This privacy policy may change from time to time in line with legislation or industry developments. We will not explicitly inform our clients or website users of these changes. Instead, we recommend that you check this page occasionally for any policy changes. Specific policy changes and updates are mentioned in the changelog below.

9.1 Changelog

24/05/2018

  • Privacy policy updated

Job Applicant Privacy Notice

As part of any recruitment process, Ph. Creative collects and processes personal data relating to job applicants. We are committed to being transparent about how we collect and use that data and to meet its data protection obligations.

1.0 What information does Ph. Creative collect?

We collect a range of information about you. This includes:

  • your name, address and contact details, including email address and telephone number;
  • details of your qualifications, skills, experience and employment history;
  • information about your current level of remuneration, including benefit entitlements;
  • whether or not you have a disability for which we may need to make reasonable adjustments during the recruitment process;
  • information about your entitlement to work in the UK; and
  • equal opportunities monitoring information, including information about your ethnic origin, sexual orientation, health and religion or belief.

We collect this information in a variety of ways. For example, data might be contained in application forms, CVs, obtained from your passport or other identity documents, or collected through interviews or other forms of assessment.

We may also collect personal data about you from third parties, such as references supplied by former employers. We will seek information from third parties only once a job offer to you has been made and will inform you that it is doing so.

Data will be stored in a range of different places, including on your application record and on other IT systems (including email).

2.0 Why does Ph. Creative process personal data?

We need to process data to take steps at your request prior to entering into a contract with you. We also need to process your data to enter into a contract with you.

In some cases, we need to process data to ensure that we comply with its legal obligations. For example, we are required to check a successful applicant's eligibility to work in the UK before employment starts.

We have a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing data from job applicants allows us to manage the recruitment process, assess and confirm a candidate's suitability for employment and decide to whom to offer a job. We may also need to process data from job applicants to respond to and defend against legal claims.

Where we rely on legitimate interests as a reason for processing data, we have considered whether or not those interests are overridden by the rights and freedoms of employees or workers and has concluded that they are not.

We may process health information if we need to make reasonable adjustments to the recruitment process for candidates who have a disability. This is to carry out its obligations and exercise specific rights in relation to employment.

Where we process other special categories of data, such as information about ethnic origin, sexual orientation, health or religion or belief, this is for equal opportunities monitoring purposes.

If your application is unsuccessful, we will keep your personal data on file in case there are future employment opportunities for which you may be suited. We will ask for your consent before we keep your data for this purpose and you are free to withdraw your consent at any time.

3.0 Who has access to data?

Your information will be shared internally for the purposes of the recruitment exercise. This includes interviewers involved in the recruitment process.

We will not share your data with third parties, unless your application for employment is successful and it makes you an offer of employment. We will then share your data with former employers to obtain references for you.

We will not transfer your data outside the European Economic Area.

4.0 How does Ph. Creative protect data?

We take the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the proper performance of their duties.

5.0 For how long does Ph. Creative keep data?

If your application for employment is unsuccessful, we will hold your data on file for 12 months after the end of the relevant recruitment process. At the end of that period or once you withdraw your consent, your data is deleted or destroyed.

If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your personnel file and retained during your employment. The periods for which your data will be held will be provided to you in an employee privacy notice.

6.0 Your rights

As a data subject, you have a number of rights. You can:

  • access and obtain a copy of your data on request;
  • require the Company to change incorrect or incomplete data;
  • require the Company to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing;
  • object to the processing of your data where the Company is relying on its legitimate interests as the legal ground for processing; and
  • ask the Company to stop processing data for a period if data is inaccurate or there is a dispute about whether or not your interests override the Company's legitimate grounds for processing data.

If you would like to exercise any of these rights, please contact the Finance & HR Director.

If you believe that we have not complied with your data protection rights, you can complain to the Information Commissioner.

7.0 What if you do not provide personal data?

You are under no statutory or contractual obligation to provide data to us during the recruitment process. However, if you do not provide the information, we may not be able to process your application properly or at all.

8.0 Automated decision-making

Our recruitment processes are not based solely on automated decision-making.

9.0 Data controller

The data controller of this website is: PH-CREATIVE Limited which is a company registered in England and Wales, company number 5088310 whose registered office is:

Queen Insurance Building

24 Queen Avenue

Liverpool

L2 4TZ

10.0 Data protection officer

Mr. Jim Taylor

Operations Director, Ph.Creative.

Telephone: +44 (0)151 227 5549

Email: [email protected]

11.0 Changes to our privacy policy

This privacy policy may change from time to time in line with legislation or industry developments. We will not explicitly inform our clients or website users of these changes. Instead, we recommend that you check this page occasionally for any policy changes. Specific policy changes and updates are mentioned in the changelog below.

11.1 Changelog

24/05/2018

• Privacy policy updated