• Contact details
• What information we collect, use, and why
• Lawful bases and data protection rights
• Where we get personal information from
• How long we keep information
• Who we share information with
• How to complain

We collect or use the following information to provide and improve products and services for clients and for the operation of client or customer accounts:

• Names and contact details
• Addresses
• Records of meetings and decisions

• Account information, including registration details

We collect or use the following personal information for information updates or marketing purposes:

• Names and contact details
• Marketing preferences

We collect or use the following personal information only when engaging in recruitment and employment:

• Contact details (e.g., name, address, telephone number or personal email address)
• Demographics: Date of birth; Nationality; Right to work information; Education history (e.g., qualifications)
• Copies of passports or other photo ID
• Employment history (e.g., job application, employment references; secondary employment)
• Financial: National Insurance number; Tax code; Banking details; Current salary; Pension contributions; Student loan information

Under UK data protection law, we must have a ‘lawful basis’ for collecting and using your personal information. There is a list of lawful bases as defined under the UK General Data Protection Regulation (GDPR) that can be found on the Information Commissioners Office (ICO) website.

The lawful basis Niche Science and Technology (NST) Ltd. applies may affect your data protection rights which are set out in brief below:

• Your right of access – You have the right to ask us for copies of your personal information. You can request other information, such as where we source personal information, from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
• Your right to rectification – You have the right to ask NST to correct or delete personal information that is inaccurate or incomplete. Read more about the right to rectification.
• Your right to erasure – You have the right to ask NST to delete your personal information. Read more about the right to erasure.
• Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.
• Your right to object to processing – You have the right to object to the processing of your personal data. Read more about the right to object to processing.
• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.
• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.

NST must respond to any request you make without undue delay and in any event within 1 month. Submit data protection rights requests using the details above.

Our lawful bases for collecting or using personal information to provide and improve products and services for clients are:

• Consent – We have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Contract – We are required to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Our lawful bases for collecting or using personal information for the operation of client or customer accounts are:

• Consent – Permission was provided by you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Contract – We are required to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Our lawful bases for collecting or using personal information for information updates or marketing purposes are:

• Consent – Permission was provided by you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Legitimate interests – We are collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm. All of your data protection rights may apply, except the right to portability. Our legitimate interests are to keep clients, contacts, and interested parties informed about our services, industry developments, and company updates, which we believe may be of professional interest and/or benefit.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for recruitment and employment purposes are:

• Contract – We have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
• Legal obligation – We are required to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – We are collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
  • For job applicants we have a legitimate interest in recruiting qualified candidates to support the operation and growth of our business.
  • For employees we have a legitimate interest to facilitate internal management, workforce planning, and ensuring appropriate workforce skills and compliance.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

• Directly from you
• Regulatory authorities
• Suppliers and service providers

For client services, personal information is retained for 15 years following project completion.

For marketing purposes, personal information is retained until consent is withdrawn.

For employees, personal information retained as follows:

• For payroll: 7 years after termination of employment
• For Human Resources: 6 years after termination of employment
• For pension: 100 years

For more information on how long we store your personal information or the criteria we use to determine this please contact us using the details provided above.

Data processors

• SGW Payroll: This data processor does the following activities for us: They process our payroll information.
• PayDashboard: This data processor does the following activities for us: They process our payroll information.
• NEST Pension: This data processor does the following activities for us: They process our pension information.
• WhosOff: This data processor does the following activities for us: They process our employee leave data.
• NST accountants: This data processor does the following activities for us: They process our payroll information.
• Bespoke HR: This data processor does the following activities for us: They process our employee data.
• Radar: This data processor does the following activities for us: They process our employee data to provide legal advice.

Other organisations we may share personal information with:

• Professional or legal advisors
• Regulatory authorities
• Organisations NST is legally obliged to share personal information with

If you would like to exercise any of your rights, you can fill in our Online Form or contact us using the contact details above.

In the unlikely event that you remain unhappy with how we have processed your data or handled your enquiry, you can make a formal compliant to us using the online form above or write to us using details above.

If you are not known to us, before we can handle any enquiry from you, we will need to confirm your identity.

Finally, if you are unhappy with how we have dealt with your complaint, you have the right to lodge a complaint with the Office of the Information Commissioner, contact details below.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire, SK9 5AF

Helpline: 0303 123 1113 (local rate) or +44 1625 545 745

Website: ico.org.uk