Privacy Policy

WE ARE COMMITTED TO RESPECTING YOUR PRIVACY
AND COMPLYING WITH DATA PROTECTION LAW.

This Privacy Policy aims to help you understand how we collect, use and protect your information.

We want to help you make informed decisions, so please take a few moments to read this policy.

WHO ARE WE? AND WHY DO WE PROCESS PERSONAL DATA?

We are BigChange Group Limited a mobile workforce management technology company based in Leeds, United Kingdom; 

• We provide workforce management data processing services for which we are a Data Processor on behalf of our contracted business customers. Our business customers input and access data about their prospects, customers, suppliers and employees, or arrange for others to do so. The data is collected by our websites, mobile apps, trackers, import services, system integrations and webservices API via our integration products,

• We are the Data Controller for BigChange’s employees, prospective employees, customers (for the purposes of contract administration only), and suppliers with whom we intend, have or had obligations under contract;

• We maintain a marketing database of prospective and current customer data where consent has been given and not withdrawn, or where we have reason to believe there is legitimate business interest in us keeping you informed of our company, products and services. This information can be collected directly from our website when a customer signs up to hear more about our products and services, or from other publicly available sources such as LinkedIn, or company websites. 

Contracts with BigChange constitute written instructions to process the data that you send to us or arrange for others to send to us.

If you do not have a direct contract with BigChange, and you do have a direct relationship with one of our business customers, then you should review their data privacy information; it is likely that they are the Data Controller and will be best placed to help you. 

WHAT CUSTOMER DATA DO WE PROCESS?

Where we are processing personal data to fulfil our legal obligations to our business customers, the data that we process and store are determined by our business customers. Typically, business customers process:

• name, and other identity data;
• address and contact details;
• timesheets and expenses;
• skills and qualifications;
• personal or business vehicle details;
• locations and journeys collected via vehicle tracking and other mobile devices;
• driving events and behaviour scores calculated using business customer configured algorithms;
• signatures;
• business photographs and videos which may include images of people or identity documents;
• phone call recordings and meeting videos;
• other business, personal and possibly sensitive personal data as determined by our business customers.

In addition, we will process information for business administration purposes e.g. invoicing, shipping and installation of products and delivery of services.

If you do not have a direct contract with BigChange, and you do have a direct relationship with one of our business customers, then you should review their data privacy information; it is likely that they process your personal data on your behalf and will be best placed to help you.

PROCESSING OF YOUR INFORMATION

If you are an employee of BigChange, please refer to the Employee Privacy Handbook. If you are a subcontractor or supplier with BigChange, you may contact [email protected] to exercise your data protection rights such as asking us for a copy of your data, to rectify, restrict or stop processing your information at any time.

If you are an employee, subcontractor or supplier of one of our BigChange customers, then please contact their Data Protection Officer or appropriate contact using the contact information contained in their privacy policy, which is usually provided on the customers website.

If you have been invited by one of our BigChange customers to use our learning management system, then please contact their Data Protection Officer or appropriate contact for guidance on how to exercise your data privacy rights.

If BigChange are marketing to you directly, and you wish to withdraw consent to our marketing emails, then please contact us at [email protected].

We will respond to your request promptly and comply with your wishes subject to applicable privacy and other legislation, and any relevant contractual terms and conditions.

If your primary contact is not with us, and is with a BigChange business customer, please contact that business. 

APPLYING TO JOIN BIGCHANGE

If you have applied for a position with BigChange, we need to process certain information about you. We only ask for details that will genuinely help us to consider you for a role, such as: –

• Name
• Contact details including telephone numbers, email address and postal address
• CV / Work History
• Work preferences including role, geographical area, salary
• Publicly available information, or information provided by you, in relation to professional history, educational background, employment history, skills and experience, professional certifications and affiliations, educational and professional qualifications

With your permission, we may ask you to provide information asking for information relating to your gender, ethnicity, sexual orientation, disability, religion and belief. By collecting and analysing equality and diversity data, we are able to ensure our recruitment practices are providing fair access and opportunities for all and that we are able to meet our obligations under the Equality Act 2010.

We will store your personal data in our applicant tracking system for 12 months from the date of your initial application/ submission. After the 12 months has expired, your data will automatically be deleted from our records except in circumstances where you are part of a live application process or you have updated your details, in these instances the retention period will be extended by a further 3 months. You have the right to delete your personal information at any time.

DISCLOSURE OF YOUR INFORMATION TO THIRD PARTIES

We may disclose your information to our subsidiaries, and other third parties we engage to enable us to provide services to you. We use third parties to help us host our infrastructure and applications, communicate with customers, power our emails etc as we believe they are the best in their field at what they do. Any personal data is shared only when strictly necessary and according to the safeguards and good practices detailed in this Privacy Policy.

A list of current sub-processor categories is available to parties with whom we have contracts to protect confidentiality. You can email [email protected] to request a list of sub-processor categories. We will introduce new sub-processors or retire existing sub-processors in order to deliver and optimise the service we provide to you

Examples of third party providers are Amazon Web Services and Microsoft.

BigChange business customers may purchase our integration products or services with third party providers such as Microsoft, Sage and Xero. By ordering these services and using these products we understand that you are instructing us as a Data Processor to pass personal data to/from your  third party provider. BigChange is not responsible for the data processing practices of third party providers. We encourage you to review your third party providers’ respective privacy notices before connecting.

BigChange does not sell, trade or rent your information, or use or disclose it for marketing purposes without your prior consent, and does not give or distribute it to any third parties except as described above.

For our general day to day data processing activities, we use third party organisations to help us administer and monitor the services that we provide. Examples of such third parties include our accountants and external auditors.

Our website may contain links to other websites of interest. However, you should note that we do not have any control over these other websites. Once you have used any of these links to leave our site, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting these sites and such sites are not governed by this privacy statement.

INFORMATION SECURITY

BigChange understands the importance of good information security management and is certified to ISO 27001 to demonstrate this commitment. We identify, develop, implement, maintain and continuously improve a wide range of policies, processes, procedures and technical controls to keep your data secure.