Hudson Contract Ltd (‘we’, ‘us’ or ‘our’), which includes Hudson CIS (GB) Ltd, Hudson CIS (Guernsey) Ltd, Hudson Administration Services Ltd, Hudson Blue Ltd and Hudson Freelance Ltd, is the UK’s largest workplace audit and CIS contract provider. We are registered in England & Wales and our registration number is 10046708 at 1 Mill Lane, Bridlington, YO16 7AP.
Compliance is key to our business and so we take your privacy very seriously and when we do collect data, we do so under the UK General Data Protection Regulations and the Data Protection Act 2018, as a data controller.
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
We collect your personal information in a number of ways:
Collecting very specific, relevant information is a necessary part of us being able to provide you with the services and products that help you to grow your business success.
We collect the following information:
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with services). In this case, we may have to cancel a service you have with us but we will notify you if this is the case at the time.
We require this information to understand your needs and supply you with the best possible service. We use your information in the following circumstances:
We can break the data we collect into the following categories:
Client Data: As a Hudson Contract customer we need to collect and use information about you, your colleagues and company to provide you with our services such as:
We will only ask you for the details that we need to enable us to carry out our contractual arrangements to ensure our service to you runs smoothly.
Freelance Operatives: As a subcontractor appointed/engaged by one of our clients we collect and use information about you to pay you as a subcontractor.
Supplier Data: We collect data from you to enable us to carry out our contractual arrangements so our relationships run smoothly.
Website Visitors: We use third party services to generate useful insights into visitors to our site and to help us manage the services we provide. This includes information such as how you use our websites, the frequency with which you access our websites, and the times that our websites is most popular.
If you would like to find out more information about what data we collect about you when you visit our websites, please click here. Please contact us if you need details about the specific legal ground we are relying on to process your personal data.
Age Limitations: We do not allow use of services and websites by anyone under 16 years old. If you know of anyone younger than 16 that has been provided us with information, please contact us and we will delete the information.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Generally, we do not rely on consent as a legal basis for processing your personal data although we will get your consent before sending third party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.
We are committed to ensuring that your information is secure. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. This includes suitable physical, electronic and managerial procedures to safeguard the information we collect online. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We continually monitor our systems for potential areas of vulnerabilities and attacks, and we regularly carry our penetration testing to identify additional ways to protect your data and our business.
We will only keep your data for as long as it is necessary for the purpose for which it was collected. At the end of the required retention period we will destroy, delete or anonymise your data.
We sometimes share your personal data with trusted third parties in order to fulfil our contractual and legal requirements.
To ensure your data is kept safe, we apply the following policies to all organisations:
Examples of the kind of third parties we work with are:
On occasion we may need to share you data with a third party for their own purposes, we will only do this in very specific circumstances e.g.
For further information please contact our DPM.
In order to provide our services to you sometimes we need to share your personal data with one of our trusted third parties outside of the United Kingdom, such as the United States.
On the occasions we do this, we have procedures in place to ensure your data receives the same protection as it would if it stayed within the United Kingdom. For more details about this please contact our DPM.
You have the right to request a copy of any information about you that we hold at any time, and also to have that information corrected if it is inaccurate. To ask for your information, please contact our DPM on the details listed above.
You can inform us at any time that we stop using your personal data for direct marketing (either through specific channels, or all channels).
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Your right to withdraw consent
Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent. However, in cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data.
If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.
You have the right to stop the use of your personal data for direct marketing activity through all channels, or selected channels. You can stop your personal data being used for directing marketing by:
We will always comply with your request.
Checking your identity
Our website may contain links to other websites, plug-ins and applications of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.