Data Controller Information
Introduction
A M R Pathways Limited (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share personal information when you use our website or receive our student employment-support services.
Our services are designed to help students in London identify and access suitable employment opportunities, including part-time and full-time opportunities where permitted by their university requirements, visa conditions, right-to-work status, eligibility, study commitments, and other applicable conditions.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as applicable to our activities.
Personal Information We Collect
Depending on the services you use and the support you request, we may collect and process the following categories of personal information:
- Contact Information: Your name, email address, telephone number, residential address, and other contact details that you provide to us.
- Education & Study Information: Your university or educational institution, course or programme, study schedule, expected completion date, and information relevant to identifying employment opportunities that may fit your studies.
- Employment & Skills Information: Your CV, previous employment experience, skills, qualifications, training, availability, preferred work arrangements, and relevant references.
- Right-to-Work Information: Where necessary for the services you request, information relating to your right to work in the UK, such as relevant documents, share codes, or visa information.
- Application & Service Records: Information about employment opportunities discussed or applied for, employer introductions, interview or trial arrangements, communications, service requests, and payment records.
You should provide information that is accurate, current, and relevant to the employment-support service you are requesting.
Purposes and Legal Basis of Processing
We process personal information for specific and lawful purposes. Depending on the circumstances, the applicable legal basis may include:
- Performance of a Contract: To provide agreed student employment-support services, review your profile, assist with CV and application preparation, identify suitable employment opportunities, coordinate interviews or trials, and administer agreed payment arrangements.
- Consent: Where consent is required and you have provided it, for example where appropriate for sharing particular information with a prospective employer or using your information for a specific purpose.
- Legal Obligation: To comply with applicable legal, regulatory, tax, accounting, data protection, and record-keeping requirements.
- Legitimate Interests: Where applicable, to operate and improve our services, communicate with students and prospective employers, maintain appropriate business records, protect our services, prevent misuse, and respond to enquiries.
Disclosure of Your Information
We do not sell, rent, or trade your personal information. We may share relevant personal information where necessary to provide our services or comply with legal obligations.
- Prospective Employers: Where appropriate and relevant to the service, we may provide your CV, application information, skills, availability, or other relevant details to prospective employers for employment opportunities, interviews, or trials.
- Service Providers: We may use trusted third-party providers that support our business operations, such as payment processing, communications, website hosting, document management, security, and other necessary services.
- Legal & Regulatory Authorities: We may disclose information where required by law, court order, regulatory requirement, or where reasonably necessary to protect our legal rights, prevent fraud, or address unlawful activity.
We seek to share information that is relevant and necessary for the particular purpose, subject to applicable data protection requirements.
Data Security & Retention
We take reasonable and appropriate technical, organisational, and administrative measures to protect personal information against unauthorised access, accidental loss, destruction, alteration, misuse, or unlawful disclosure.
Access to personal information is limited to people and service providers who reasonably need it for the purposes described in this Privacy Policy.
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, provide our services, maintain appropriate business and payment records, resolve disputes, and comply with applicable legal, regulatory, tax, or accounting requirements.
Different categories of information may be retained for different periods. When personal information is no longer required, we will take reasonable steps to securely delete or anonymise it, where appropriate.
Your Statutory Rights
Depending on the circumstances and subject to applicable legal conditions, UK data protection law gives you rights regarding your personal information, including:
- Right of Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal information.
- Right to Erasure: Request deletion of your personal information where the applicable legal requirements are satisfied.
- Right to Restrict Processing: Request restriction of processing in certain circumstances.
- Right to Object: Object to certain types of processing, including processing based on legitimate interests in circumstances provided by law.
- Right to Data Portability: In certain circumstances, request personal information in a structured, commonly used, and machine-readable format.
To exercise a data protection right or ask a privacy question, please contact us at info@amrpathways.com.
Complaints to the Supervisory Authority
If you are concerned about how we handle your personal information, we encourage you to contact us first so that we can investigate and respond to your concern.
You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO), where you believe your personal information has been handled in breach of applicable data protection law.
Further information about the ICO and how to make a complaint is available at https://ico.org.uk.