Logo

GDPR Policy

Last Updated: 22nd April 2025

1. Introduction

1.1 County HR Solutions Limited ("we", "us", or "our") is committed to protecting the privacy and security of personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1.2 This GDPR Policy outlines our practices for collecting, processing, and protecting personal data in connection with our website Skills Platform (the "Site") and our services.

2. Data Controller

2.1 As a customer of County HR Solutions Limited, you will act as the data controller for the personal data you use and provide to Skills Platform as part of your usage of the service. County HR Solutions Limited acts as a data processor and processes data on behalf of you, the data controller.

2.2 As a data controller, you will have obligations under GDPR concerning lawfulness, fairness, and transparency, purpose limitation, data minimisation, and accuracy, as well as obligations to fulfil data subjects' rights with respect to their data. These responsibilities are detailed in our Data Processing Agreement.

3. Data Protection Officer

3.1 We have appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with data protection laws and handling data protection inquiries. You may contact our DPO at platformsupport@chrsolutions.co.uk.

4. Types of Personal Data Collected

4.1 We collect personal data from you when you voluntarily provide it to us through the Site, such as when you submit a contact form or submit an assessment application.

4.2 The types of personal data we may collect include but are not limited to:

  • Contact information (e.g., name, email address, phone number)
  • Any other information you choose to provide to us

5. Purposes of Processing

5.1 We process personal data collected through the Site for the following purposes:

  • To respond to your inquiries and provide customer support
  • To assess your submission for evaluation and facilitate the assessment process
  • To communicate with you about our services and updates
  • To comply with legal obligations and regulatory requirements

6. Legal Basis for Processing

6.1 We rely on the following legal bases for processing personal data under the GDPR:

  • Your consent: When you provide your consent for specific processing activities, such as submitting a contact form.
  • Contractual necessity: When processing is necessary for the performance of a contract with you, such as evaluating your information for assessment.
  • Legitimate interests: When processing is necessary for our legitimate interests or the legitimate interests of a third party, provided that such interests are not overridden by your rights and interests.

7. Data Subject Rights

7.1 Under the GDPR, you have the following rights regarding your personal data:

  • Right to access: You have the right to request access to your personal data and receive a copy of the information we hold about you.
  • Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data.
  • Right to erasure: You have the right to request the deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.
  • Right to restrict processing: You have the right to request the restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to the processing.
  • Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
  • Right to object: You have the right to object to the processing of your personal data in certain circumstances, such as when processing is based on legitimate interests.

7.2 To exercise your rights or make a request regarding your personal data, please refer to this link Skills Platform GDPR request.

8. Data Security

8.1 We implement appropriate technical and organisational measures to ensure the security of personal data and protect it from unauthorised access, disclosure, alteration, or destruction.

8.2 We restrict access to personal data to authorised personnel only and require them to maintain the confidentiality of such information.

9. Data Transfers

9.1 Personal data collected through the Site may be transferred to, processed, and stored within the United Kingdom, as well as storage on servers located in the United Kingdom, where data protection laws provide a high level of protection.

10. Data Retention

10.1 We will retain personal data collected through the Site for a maximum of 24 months after the last interaction with the website, unless a longer retention period is required and permitted by law.

11. Privacy Policy Updates

11.1 We may update, modify or revise this GDPR Policy at any time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated policy on the Site.

12. Contact Us

12.1 If you have any questions or concerns about this GDPR Policy or our data protection practices, please contact us at the email address provided in Section 3 of this policy.

County HR Solutions Limited
Registered Address: 108 Sandford Road, Chelmsford, CM2 6DH, UK
Email: platformsupport@chrsolutions.co.uk
Website: www.chrsolutions.co.uk