< Back to Privacy Policy

What data do we collect? 

We store the following information about you as part of documenting your employment with us: 

- Name 
- Job title 
- Salary 
- Home address 
- Personal phone number 
- Personal email address 
- Next of kin details 
- Medical details 
- National Insurance number 
- Bank details 
- Sickness details 


How we use your data 

We use this information to pay our staff until any obligations are settled, to comply with appropriate legislation for employment of staff and as required for legal claims.   


Our Legal basis 

We are obliged to collect and retain information to comply with employment law.  Some information is held under our legitimate interest in case of legal claims related to employment. 


Third Parties 

We may pass data to our HR advisers, insurers for benefits purposes or our payroll provider. 


Data Location 

Personal data held about you is held either at our offices in London, Microsoft Office 365 and Microsoft Azure.  EU locations are used for Microsoft services.  Data locations for our sub-processors can be found at www.doherty.co.uk/sub-processors


Is the data transferred abroad? 



How long we keep the data for? 

We retain all data for 6 years in order to comply with employment law and as part of our legitimate interest for operating the basis in case of legal claims related to employment.  Payroll and expenses data is retained for 7 years for legal reasons. 


How we safeguard your data 

We use appropriate technical and organisational measures to safeguard your data including: 

- Multi-factor authentication on all systems that allow access to personal data 
- Staff have access to only data appropriate to perform their roles 
- Access audit logging for systems containing personal data 
- Strong data encryption at rest 
- Where appropriate, encryption of data in use 
- Closed-circuit television 
- 24/7 Security guards 
- Strong physical access controls to systems containing personal data