Last Updated February 2011

PRIVACY PROTECTION POLICY
In this policy *”The Rabbit Agency Limited” means one or all of The Rabbit Agency Limited; and “worker” means a Rabbit Agency Limited temporary or permanent employee, or a person who while not employed by The Rabbit Agency Limited provides services to The Rabbit Agency Limited as an employee of an agency or as a consultant.

Introduction
The Rabbit Agency Limited holds certain information about living individuals which is defined as personal data under the Data Protection Act 1998 (“the Act”). The Rabbit Agency Limited recognises the importance of the correct and lawful treatment of personal data.
This policy (together with The Rabbit Agency Limited Data Protection Guidelines and Data Subject Access Guidelines and any other documents referred to in it) sets out the basis on which any personal data The Rabbit Agency Limited collects from a worker, or that a worker provides to it, will be processed by The Rabbit Agency Limited. For the purpose of the Act, the data controller for personal data processed by The Rabbit Agency Limited can be one, several or all of The Rabbit Agency Limited.
The Rabbit Agency Limited nominated representative for the purpose of the Act is Cat Turner of The Rabbit Agency Limited [cat@therabbitagency.com]

Status of the Policy
This Policy has been approved by the directors of The Rabbit Agency Limited and any breach of it will be taken seriously. Any worker who considers that the Policy has not been followed in respect of personal data about him/herself should raise the matter with his/her Line Manager in the first instance.
The types of personal data which The Rabbit Agency Limited collects, holds and processes include personal data of:
• Its current, past and prospective workers. Such personal data includes all information about workers to allow the employing The Rabbit Agency Limited to administer its employees’ employment contracts, or The Rabbit Agency Limited contracting with the agency/consultancy to administer the agency/consultancy contract;
• suppliers of services, works and/or equipment;
• client information held within our online database(s)

All personal data held by The Rabbit Agency Limited will be subject to the appropriate legal safeguards as specified in the Act.
The Rabbit Agency Limited fully endorses and adheres to the eight principles of the Act. These principles specify the legal conditions that must be satisfied in relation to obtaining, handling, processing, transportation and storage of personal data. Employees and any others who obtain, handle, process, transport and store personal data for The Rabbit Agency Limited must adhere to these principles.

Principles
The principles require that personal data shall:
1. Be processed fairly and lawfully and shall not be processed unless certain conditions are met;
2. Be obtained for a specified and lawful purpose and shall not be processed in any manner incompatible with that purpose;
3. Be adequate, relevant and not excessive for those purposes;
4. Be accurate and, where necessary, kept up to date;
5. Not be kept for longer than is necessary for that purpose;
6. Be processed in accordance with the data subject’s rights;
7. Be kept secure from unauthorised or unlawful processing and protected against accidental loss, destruction or damage by using the appropriate technical and organisational measures; and
8. Not be transferred to a country or territory outside the European Economic Area, unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.
 
Satisfaction of Principles
In order to meet the requirements of the principles, The Rabbit Agency Limited will:
• observe fully the conditions regarding the fair collection and use of personal data;
• meet its obligations to specify the purposes for which personal data is used;
• collect and process appropriate personal data only to the extent that it is needed to fulfill operational or any legal requirements;
• ensure the quality of personal data used;
• apply strict checks to determine the length of time personal data is held;
• ensure that the rights of individuals about whom the personal data is held, can be fully exercised under the Act;
• take the appropriate technical and organisational security measures to safeguard personal data; and
• ensure that personal data is not transferred abroad without suitable safeguards.

Purposes
The Rabbit Agency Limited processes personal data for the following purposes:

1. Staff administration
Appointments or removals, pay, discipline, superannuation, work management or other personnel matters. In relation to the staff of The Rabbit Agency Limited; and

2. Re-processing client data
The re-processing of client data (including collection,storage, preservation, amendment,allowing of access to the client data, making of queries and extracts, usage, forwarding,   cross-referencing and deletion).

3. Advertising, Marketing and Public Relations
Advertising or marketing the business of The Rabbit Agency Limited, activity, goods or services and promoting public relations in connection with that business or activity, or those goods or services.

4. Accounts and Records
Keeping accounts related to any business or other activity carried out by The Rabbit Agency Limited, or deciding whether to accept any person as a customer or supplier, or keeping records of purchases, sales or other transactions for the purpose of ensuring that the requisite payments and deliveries are made or services provided by The Rabbit Agency Limited or to The Rabbit Agency Limited in respect of those transactions, or for the purpose of making financial or management forecasts to assist The Rabbit Agency Limited in the conduct of any such business or activity.

5. Education
The provision of education or training as a primary function or as a business activity.

6. Crime Prevention and Prosecution of Offenders
Crime prevention and detection and the apprehension and prosecution of offenders. Disclosure of  Workers’ Personal Information The Rabbit Agency Limited may use and disclose workers’ personal information for administration and management purposes. The Rabbit Agency Limited may disclose workers’ information to The Rabbit Agency Limited service providers and agents for these purposes.
The Rabbit agency Limited also reserves the right to share workers’ personal information with organisations which provide and administer employee benefits, such as pension schemes for the implementation of the PPP Rabbit Agency Creative Limited has entered into (which means The Rabbit Agency Limited (and their respective successors in title) and any holding company and subsidiary (both as defined in section 736 of the Companies Act 1985) thereof or of such holding company from time to time; who will use the personal data for administration of contracts with workers or for the administration of the contracts of the employers of workers as appropriate.)

The Rabbit Agency Limited may disclose workers’ personal information to third parties:
• In the event that The Rabbit Agency Limited sells or buys any business or assets, in which case The Rabbit Agency Limited may disclose workers’ personal data to the prospective seller or buyer of suchbusiness or assets;
• If The Rabbit Agency Limited is under a duty to disclose or share workers’ personal data in order tocomply with any legal obligation;
• If The Rabbit Agency Limited is under a duty to disclose or share workers’ personal data to anothercompany or organisation to which it is required to transfer any part of its business under the PPP Contracts.

WORKER’S RIGHTS
Access to Information
The Act gives data subjects [as defined in the Act] including workers the right to access information held about each of them. This right of access can be exercised in accordance with the Act.

The Rabbit Agency Limited Worker Responsibilities
All The Rabbit Agency Limited workers are responsible for:
• Checking that any personal data that they provide to The Rabbit Agency Limited is accurate and up todate;
•  Informing The Rabbit Agency Limited of any changes to information which they have provided, e.g.changes of address;
• If, as part of their responsibilities, The Rabbit Agency Limited workers collect information about otherpeople, they must comply with this Policy and with the Data Protection Guidelines.

Data Security
The need to ensure that data is kept securely means that precautions must be taken against physical loss or damage and that both access and disclosure must be restricted. All workers are responsible for ensuring that:
• Any personal data which they hold is kept securely;
• Personal data is not disclosed either orally or in writing or otherwise to any unauthorised third party.

Contact
Questions, comments and requests regarding this Data Protection Policy are welcomed and should be addressed to Cat Turner of The Rabbit Agency Limited [cat@therabbitagency.com] Or write to The Rabbit Agency Limited, 60 Sloane Avenue, London, SW3 3XB.

Click here to go back to Rabbit.