Privacy notice

Who is responsible

Kelloch is a Scotland-based third-sector recruitment and organisational support business led by Mark O’Hare. Kelloch is the data controller for information collected through this website and Kelloch services. Email info@kelloch.org.uk with a privacy question, rights request or formal data-protection enquiry.

Formal contracting details are provided in proposals and service agreements.

What this notice covers

This notice covers website enquiries, recruitment and candidate activity, Talent Direct, the Third Sector Provider Network, Learning Hub accounts and other Kelloch tools. An external service linked from this site may have its own privacy notice.

Information Kelloch may collect

• Identity and contact details, including name, email, telephone number and organisation.
• Professional information, such as CV history, skills, availability, preferences, LinkedIn profile, application answers and interview or screening notes.
• Organisation briefs, support requests, budgets, timescales and correspondence.
• Account and consent records for services that offer sign-in or controlled introductions.
• Basic technical and security information needed to protect forms, accounts and services.
• Feedback, outcome and follow-up information where you or a client choose to provide it.

Recruitment and candidate information

Kelloch uses candidate and client information to respond to enquiries, understand role requirements, assess relevant experience, prepare shortlists, arrange introductions, manage assignments and provide agreed follow-up. Candidate details are not sent to an organisation without an appropriate recruitment purpose and, where the service requires it, the candidate’s knowledge or consent.

Kelloch may receive professional information directly from you, from a recruiting organisation, from a referee you nominate, or from professional sources you have made public. Kelloch does not make solely automated recruitment decisions.

Talent Direct

Talent Direct uses professional profile, preference and contact information to operate a consent-led introduction service. Public or browsing views are designed to limit direct identifying information. Contact details or a direct introduction are released only through the service’s approval process or with the professional’s permission.

Third Sector Provider Network

Provider applications are used to review suitability for listing, create public profiles and manage relevant introductions. Information marked for public listing may include a provider’s name, business name, location, professional background, services, rates and professional links. Support requests may be shared with a relevant provider where the person submitting the request has agreed to that introduction.

Applying does not guarantee publication. Providers can ask for a profile to be corrected or removed by emailing Kelloch.

Learning Hub and free tools

Most public resources can be used without creating an account. Where sign-in is offered, Kelloch may use your email address, name, organisation and saved progress to provide the account. Tool responses may be processed to return the result you requested; they are not used to make legal, employment or regulatory decisions for you.

Why Kelloch uses information

• Contract and steps before a contract: to respond to a request, prepare or deliver an agreed service and manage the working relationship.
• Legitimate interests: to operate and improve relevant services, maintain proportionate business records, prevent misuse and communicate about an existing professional relationship.
• Consent: where you choose to join a network, approve an introduction, make information public or receive optional communications.
• Legal obligations: where records or disclosures are required by law.

Where consent is the basis, it can be withdrawn at any time. Withdrawal does not make earlier lawful processing invalid.

Who may receive information

Kelloch uses service providers for website hosting, forms, authentication, email and secure records. They may process information only to provide those services. Information may also be shared with a recruiting organisation, candidate, provider or professional adviser where this is necessary for the service you requested, with your instruction or where required by law.

Kelloch does not sell personal information.

International processing

Some technology providers may process information outside the UK. Where this happens, Kelloch requires an appropriate safeguard, such as a UK adequacy regulation or approved contractual protection.

How long information is kept

Kelloch keeps information only for as long as needed for the purpose collected, an active service or network relationship, proportionate follow-up, dispute handling, and legal or financial record-keeping. Retention is reviewed by considering the nature of the information, the service involved, consent status, operational need and any legal requirement. Information is deleted or anonymised when it is no longer needed.

You can ask Kelloch how this retention approach applies to your specific record.

Marketing

Kelloch does not treat a service enquiry as blanket permission for marketing. Optional updates are sent only where there is a valid lawful basis and an unsubscribe route. You can object or unsubscribe at any time.

Cookies and local storage

This website does not use advertising cookies. Essential browser storage may be used for sign-in, security and saved progress in tools that need it. If non-essential analytics are introduced, this notice will be updated and consent requested where required.

Your rights

Depending on the circumstances, you can ask for access, correction, deletion, restriction or transfer of your information, and object to certain uses. You can also withdraw consent at any time. Some records may need to be retained where there is a legal or contractual reason.

Email info@kelloch.org.uk to exercise a right. You can also complain to the Information Commissioner’s Office.