Security & Compliance
Privacy, compliance and security of data at every level.
Three checks sit behind the platform: who can join as an agency, what they warrant on each candidate, and how long data is kept. RAMP.Global meets EU GDPR and UK GDPR.
- Both regimesEU GDPR and UK GDPR
- Before an agency joinsRegistration number, privacy policy, ICO
- On every candidateAuthority, consent and the applicable law
- Then we delete itProfiles up to 2 years, CVs for 60 days
Agency screening
How new agencies are screened.
Three checks, before an agency can work a role.
- The agency gives its company registration number, so the business can be verified.
- During onboarding, we request a copy of the agency's privacy policy.
- The agency is registered with the ICO, the UK data protection regulator.
GDPR compliance management
RAMP.Global is compliant with both EU GDPR and UK GDPR.
GDPR compliance management is part of the platform, alongside streamlined agency onboarding, centralised document storage, authenticated document signing and document version control.
Candidate consent
Every submission comes with the agency's warranty.
For each unique submission, the agency must formally warrant and represent to RAMP.Global that it:
- 1
Has authority to submit the candidate's data to RAMP.Global, the employer and any relevant third party.
- 2
Has obtained the candidate's consent to have their data submitted to RAMP.Global, the employer and any relevant third party.
- 3
Complies with applicable data protection laws and has appropriate policies in place to facilitate its compliance.
The agency, and thereby the candidate, is informed that candidate data may be processed not only by the employer but also by any relevant third party, such as an applicant tracking system (ATS) the employer uses to handle candidate data.
Data handling
Where data is stored and how long it is kept.
Two rules sit under the warranties above: where a candidate's data can go, and when it has to be deleted.
Data storage and transfer
The data we collect and process when you use our services may be transferred to or stored in a destination outside the European Economic Area (EEA). It may also be processed by staff outside the EEA.
RAMP.Global only transfers or stores data with the express consent of the data subject or an authorised representative of the data subject, or to or in a location that ensures an adequate level of protection, as recognised by the EU's adoption of an adequacy decision.
Candidate data retention
Our policy is to hold candidate data for as long as is reasonably necessary.
Candidate profile data may be retained for a maximum of two (2) years after a job requisition closes, after any candidate ownership period expires, or after all fees payable to the agency are confirmed as received, whichever is later.
CVs and personal data may be retained for a maximum of sixty (60) days after any applicable rebate or candidate ownership period expires.
The RAMP team
Questions about data protection?
Call or email the RAMP team and a person will answer.