CANDIDATE PRIVACY POLICY
Mint Analysis Ltd. (‘M.INT’) delivers Human Capital Reputation Risk consulting services.
Candidates undergoing Due Diligence or pre-employment screening are encouraged to read the below information to understand M.INT’s practices and policies in relation to their personal data.
Scope
Who does this Privacy Policy apply to and what does it include?
This Privacy Policy is made available to candidates undergoing pre-employment screening.
We value your trust and commit ourselves to taking all reasonable precautions to protect your personal data. This Privacy Policy outlines our responsibilities in treating your personal data securely and with respect; including, what personal data we collect and why, how we process it, and the security measures we implement to keep it safe.
Lawful Processing & Consent
What is the lawful basis for processing my personal data?
Your (prospective) employer determines the lawful basis for processing your personal data. This will be either Consent or Legitimate Interest.
In relation to your background check, your (prospective) employer is the Data Controller of your personal data. M.INT is the Data Processor of your personal data.
Under the General Data Protection Regulation (GDPR), the Data Controller is responsible for determining the lawful basis for processing your personal data. As the Data Processor, M.INT operates solely under the direction of its clients and processes your personal data in accordance with your (prospective) employer’s instructions - so long as these are legal and proportionate.
Do you collect consent?
We may request your consent where required by your (prospective) employer or other authorised bodies.
M.INT may request your explicit and informed consent to facilitate the completion of any requested background checks.
You have the right to revoke your consent at any time; however, please note that this consent may not necessarily impact your (prospective) employer’s lawful basis for processing personal data and may only affect the processing of such checks where your consent is explicitly required (e.g. relevant sub-processors or third-parties, including the UK’s Disclosure & Barring Service or public record dispensing bodies - as/where applicable).
Should you have any questions about the processing of your personal data, please contact your (prospective) employer for further information.
What are my (prospective) employer’s Legitimate Interests in processing my personal data?
Legitimate Interests can vary, however, they must meet certain stringent criteria.
While these are ultimately determined by your (prospective) employer, their Legitimate Interests in requesting that M.INT process your personal data may include their commitment to screening their (prospective) personnel against instances of potential fraud, security, or reputation risk in order to effectively protect their brand, staff, and clients.
Background Check Processing
How does the process work?
Our screening processes are simple, secure, and fast.
Where applicable, you will be contacted by your (prospective) employer by email with relevant instructions on how to submit all required information. Upon completion of the check (typically within 5 – 7 business days from the point of full submission of all required information), M.INT will communicate the results of its checks to your (prospective) employer.
It is important to note that M.INT does not hold any decision-making authority over your candidacy or eligibility and that any decisions regarding your candidacy rest solely with your (prospective) employer.
Do you operate any automated decision-making?
No.
Data Collection
Why do you collect personal data?
We may collect your personal data in order to perform the Due Diligence checks requested by your (prospective) employer.
This information will allow M.INT to carry out an Open Source check for any publicly available information that may be associated with your candidacy in the context of both your own, as well as your (prospective) employer’s, reputation and security.
By using M.INT, your (prospective) employer is actively seeking to promote high standards of selection and employment to align their strong cultural ethos with your right to a safe, inclusive, and productive working culture.
What personal data do you collect?
We collect your personal data as outlined below.
M.INT may ask you to submit some personal data in accordance with the screening check requested, which may include the following information:
Personal details (name, former/maiden names or any known aliases or usernames and date of birth)
Contact details (residential address, email address, telephone number, social media URLs)
Professional and/or academic history
Documents (CV, copy of ID, copy of proof of address)
M.INT may also collect personal data associated with your person in the course of its screening processes. This personal data is limited to publicly available online information, including any of the above-outlined information, drawn from sources that may include public records, registers & archives, (digital) media, social media, blogs, sanctions lists and, where applicable, information sourced from your employment and/or academic references and any relevant qualification boards, credit reference agencies, regulatory bodies or law enforcement agencies.
Additionally, when you visit our website (www.mintanalysis.co.uk), M.INT may collect your IP address for analytical business purposes and as a means of improving your website browsing experience. The full terms of our Cookie Policy may be found here.
Data Security & Sharing
Is my personal data secure and treated responsibly?
Yes.
M.INT protects your personal data from breach, disclosure, loss, misuse, or unauthorised access by implementing all such organisational and technical security procedures as are required to maintain the confidentiality and security of all personal data processed. M.INT further enforces strict confidentiality principles and encrypts personal data wherever applicable, at rest and in transit, for additional privacy and security.
Do you use or share personal data for any reason other than the purpose of my background check?
No.
M.INT does not use any of your personal data for any purpose other than the fulfillment of its contractual obligations – that is, the completion of the relevant background checks requested by your (prospective) employer. Unless required to by law, M.INT will not share this information with anyone outside of M.INT staff, relevant client representatives, and any authorised sub-processors or contractors required for the completion of the screening check. In such instances, all such sub-processors or contractors are governed by the same high standards as those herein outlined and practiced by M.INT.
Data Retention
How long is my personal data kept?
Your (prospective) employer controls how long M.INT retains your personal data.
Unless otherwise instructed, M.INT deletes your personal data within no more than 3 years after the completion of your check, unless otherwise instructed by your (prospective) employer. You may inquire with your (prospective) employer about their data retention policies.
Please note that M.INT may retain your name and check results for essential business and/or record-keeping purposes.
Data Subject Rights
How can I exercise my rights as a Data Subject / Can I withdraw my consent?
In respect to your rights as a Data Subject, you are encouraged to contact your (prospective) employer.
Under UK and European Data Protection legislation, you have certain rights regarding your personal data. Please note that M.INT is a Data Processor and is processing your personal data on the instruction of your (prospective) employer, the Data Controller. Should you wish to exercise your rights, you are advised to direct your inquiry to a relevant point of contact at your (prospective) employer.
Contact
How do I contact M.INT with any further questions?
Please email support@mintanalysis.co.uk with your query and we will endeavour to reply ASAP.
Candidate Privacy Policy; January 2024.