Recruitment Privacy Notice
Introduction
We respect the privacy rights of individuals and are committed to handling personal information responsibly and in accordance with applicable law. It is important that you read all of this Notice carefully as it sets out how Oodle Financial Service Limited (“Oodle”, “we” or “us”) handles your personal information when you apply for a job or other role with us and the rights you have in connection with that information. The term “applicants” is used in this Notice to refer to anyone who applies for a job role, or who otherwise seeks to carry out work with or for us (whether on a permanent or non-permanent basis).
This notice explains what personal information we will hold about you, how we collect it, and how we will use and may share information about you.
Who collects the information
When you apply for a job with us, the personal data contained in your application will be collected by the Controller at Oodle Financial Services, which is located at Fletcher House, Oxford Science Park, Oxford OX4 4GE and can be contacted by emailing info@oodlefinance.com. The Controller’s data protection officer can be contacted at legal@oodlefinance.com
About the information we collect and hold
Part A of the Schedule below summarises the information we collect and hold up to and including the shortlisting stage of the recruitment process, how and why we do so, how we use it and with whom it may be shared.
Part B of the Schedule below summarises the additional information we collect before making a final decision to recruit, i.e. before making an offer of employment, how and why we do so, how we use it and with whom it may be shared.
We seek to ensure that our information collection and processing is always proportionate. We will notify you of any changes to information we collect or to the purposes for which we collect and process it.
As a general rule, during the recruitment process, we do not collect or process any information that reveals your racial or ethnic origin, religion, political or philosophical beliefs, trade union membership, genetic data, biometric data or information concerning your health/sex life (“Sensitive Personal Information”), unless authorised by law or where necessary to comply with applicable laws. However, in some circumstances, we may need to collect, or request some Sensitive Personal Information for legitimate recruitment-related purposes; for example, information about your physical or mental condition to consider accommodations for the recruitment process and/or subsequent job role. You may provide, on a voluntary basis, other Sensitive Personal Information during the recruitment process.
Purposes for processing personal information
We collect and use this personal information primarily for recruitment purposes – in particular, to determine your suitability for employment and to reach a hiring decision. This includes assessing your skills, qualifications and background for a particular role, verifying your information, carrying our reference checks or background checks (where applicable) and to generally manage the hiring process and communicate with you about it.
How long we keep your information
We keep the personal information that we obtain about you during the recruitment process for no longer than is necessary for the purposes for which it is processed. How long we keep your information will depend on whether your application is successful and you become employed by us, the nature of the information concerned and the purposes for which it is processed.
We will keep recruitment information (including interview notes) for no longer than is reasonable, taking into account the limitation periods for potential claims such as race or sex discrimination (as extended to take account of early conciliation), after which it will be destroyed. If there is a clear business reason for keeping recruitment records for longer than the recruitment period, we may do so but will first consider whether the records can be pseudonymised, and the longer period for which they will be kept.
If your application is successful, we will keep only the recruitment information that is necessary in relation to your employment.
Further details on our approach to information retention and destruction are available from our Recruitment Team, which can be reached at careers@oodlefinance.com
Who we share your information with and transfers abroad
We take care to allow access to personal information only to those who require such access to perform their tasks and duties, and to third parties who have a legitimate purpose for accessing it. Whenever we permit a third party to access personal information, we will implement appropriate measures to ensure the information is used in a manner consistent with this Notice and that the security and confidentiality of the information is maintained.
Transfers to other group companies
We will share your personal information with other companies in the Oodle group in order to administer our recruitment processes and store data.
Transfers to third party service providers
We may make certain personal information available to third parties who provide services relating to the recruitment process to us, including:
- recruitment or executive search agencies involved in your recruitment;
- background checking or other screening providers and relevant local criminal records checking agencies, e.g. Experian, CIFAS and/or JUMIO;
- data storage, shared services and recruitment platform providers, IT developers and support providers and providers of hosting services in relation to our careers website, e.g. Greenhouse and NaturalHR;
- third parties who provide support and advice including in relation to legal, financial/audit, management consultancy, insurance, health and safety, security, whistleblowing and reporting issues.
We may also disclose personal information to third parties on other lawful grounds, including:
- Where you have provided your consent;
- To comply with our legal obligations, including where necessary to abide by law, regulation or contract, or to respond to a court order, administrative or judicial process, including, but not limited to, a subpoena, government audit or search warrant;
- In response to lawful requests by public authorities (including for tax, immigration, health and safety, national security or law enforcement purposes);
- As necessary to establish, exercise or defend against potential, threatened or actual legal claims;
- Where necessary to protect your vital interests or those of another person; and/or
- In connection with the sale, assignment or other transfer of all or part of our business.
In some cases, the sharing described above may result in your personal information being transferred internationally, including countries outside of the European Economic Area, for example the United States of America. These countries may have data protection laws that are different to the laws in this country (and, in some cases, may not be as protective).
We have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Notice.
Your rights to correct and access your information and to ask for it to be erased
You may exercise the rights available to you under applicable data protection laws as follows:
- If you wish to access, correct, update or request deletion of your personal information.
- You can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information.
- If we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
- You can exercise these rights by contacting us using the contact details provided below.
Keeping your personal information secure
We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
Further Information
For further information regarding this notice, to make a query or voice concerns, please contact our Data Protection Officer at legal@oodlefinance.com
How to complain
We hope that our Recruitment team or Data Protection Officer can resolve any query or concern you raise about our use of your information. If not, you may contact the Information Commissioner at https://ico.org.uk/concerns/ or telephone: 0303 123 1113 for further information about your rights and how to make a formal complaint.
Schedule – About the information we collect and hold
Part A – Up to including the shortlisting stage
The information we collect
Identification data and contact details
i.e. address, home and mobile phone numbers, email address
How we collect the information:
- From You
Why we collect the information:
- Legitimate interest: to carry out a fair recruitment process.
- Legitimate interest: to progress your application, arrange interviews and inform you of the outcome at all stages.
How we use and may share the information:
- To enable HR personnel or the hiring manager of the relevant department to contact you to progress your application, arrange interviews and inform you of the outcome
- To inform the relevant manager or department of your application
Details of your qualifications, experience, employment history and interests
Including job titles salary and working hours
How we collect the information:
- From you, in the completed application form, c.v. (resume) and interview notes (if relevant)
Why we collect the information:
- Legitimate interest: to carry out a fair recruitment process.
- Legitimate interest: to make an informed decision to shortlist for interview and (if relevant) to recruit.
How we use and may share the information:
- To make an informed recruitment decision.
- The person making the shortlisting decision will receive non-anonymised details
Details of your nominated referees
Including their name, contact details, employer and job role
How we collect the information:
- From you, in the completed application form, c.v. (resume) and interview notes (if relevant)
Why we collect the information:
- Legitimate interest: to carry out a fair recruitment process in the regulated sector
- Legitimate interest: to comply with our legal obligations to obtain regulatory references (if relevant)
How we use and may share the information:
- To carry out a fair recruitment process
- To comply with legal/regulatory obligations Information shared with relevant managers, HR personnel
Other information you voluntarily provide, or we obtained from publicly available sources
e.g. LinkedIn, Facebook
How we collect the information:
- From you, in the completed application form, c.v. (resume) and interview notes (if relevant)
- From our research on publicly available information about you.
Why we collect the information:
- Legitimate interest: to carry out a fair recruitment process
How we use and may share the information:
- To carry out a fair recruitment process
Part B – Before making a final decision to recruit
The information we collect
Information about your previous academic and/or employment history
Including details of any conduct, grievance or performance issues, appraisals, time and attendance, from references obtained about you from previous employers and/or education providers.
How we collect the information:
- From your referees (details of whom you will have provided)
Why we collect the information:
- Legitimate interest: to make an informed decision to recruit.
- Legitimate interest: to comply with our legal obligations.
- Legitimate interest: to maintain employment records and to comply with legal, regulatory and corporate governance obligations and good employment practice.
How we use and may share the information:
- To obtain the relevant reference about you.
- To comply with legal/regulatory obligations
- Information shared with relevant managers and HR personnel.
Information regarding your academic and professional qualifications
How we collect the information:
- From you
- From your education provider
- From the relevant professional body
Why we collect the information:
- Legitimate interest: to verify the qualifications information provided by you
How we use and may share the information:
- To make an informed recruitment decision
Information regarding your criminal record and your credit records
Including criminal records certificates (CRCs) and enhanced criminal records certificates (ECRCs)
Further details on how we handle sensitive personal information and information relating to criminal convictions and offences as required under the Data Protection Bill are set out in our Data Protection, Criminal Records Information and associated policies. The policies are available via request from our Recruitment Team.
How we collect the information:
- From you
- From the Disclosure and Barring Service (DBS)
- From Cifas
- From Experian
Why we collect the information:
- Legitimate interest: to perform the employment contract to comply with our legal obligations.
- Legitimate interest: to verify the criminal records information provided by you for reasons of substantial public interest (preventing or detecting unlawful acts and protecting the public against dishonesty)
How we use and may share the information:
- To make an informed recruitment decision.
- To carry out statutory checks Information shared with DBS, Cifas and other regulatory authorities as required.