INFOSEC-20 Privacy Notice - Candidates

you are not capable of giving your consent, or where you have already made the information public.

IF YOU FAIL TO PROVIDE PERSONAL DATA

If you fail to provide information when requested, which is necessary for us to consider your application (such as evidence of qualifications or work history), we will not be able to process your application successfully. For example, if we require references for this role and you fail to provide us with relevant details, we will not be able to take your application further.

WHO HAS ACCESS TO YOUR PERSONAL DATA?

Your information will be shared internally, including with HR, recruitment, finance and IT staff, in each case if and where access to the data is necessary for performance of their roles. We may also share your personal data externally with third parties where required by law, where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so. For example, we may share your personal data with third parties in order to: • manage, store and retain the data on our employee database, including our cloud based platform (currently HiBob); • administer our recruitment process. For example, we administer various stages of the application process using various recruitment agencies and third-party providers including (but not limited to) Oleeo plc, Launchpad Recruits Limited, Classmarker, Workable, Talenscio Limited, Amberjack Global Limited, HubSpot; • obtain pre-employment references from other employers or referees; • obtain employment background checks from third-party providers; • obtain necessary criminal records checks from the Disclosure and Barring Service; • obtain security clearance for you (if applicable); Where we share your personal data with third parties, we require that they respect the security of your data and treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

INTERNATIONAL TRANSFERS

Many of our external third parties are based outside the United Kingdom (UK) so their processing of your personal data will involve a transfer of data to countries outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

5

INFOSEC-20 v3.2 Dated 03/03/2026

Made with FlippingBook - Online catalogs