Recruitment Privacy Notice

1. Introduction


1.1 We respect the privacy rights of individuals and are committed to handling personal information responsibly and in accordance with applicable law. It is important that you read all of this Notice carefully as it sets out how Oodle Financial Service Limited (“Oodle”, “we” or “us”) handles your personal information when you apply for a job or other role with us and the rights you have in connection with that information. The term “applicants” is used in this Notice to refer to anyone who applies for a job role, or who otherwise seeks to carry out work with or for us (whether on a permanent or non-permanent basis).


1.2 This notice explains what personal information we will hold about you, how we collect it, and how we will use and may share information about you.


2. Who collects the information

2.1 When you apply for a job with us, the personal data contained in your application will be collected by the Controller at Oodle Financial Services, which is located at Fletcher House, Oxford Science Park, Oxford OX4 4GE and can be contacted by emailing info@oodlefinance.com. The Controller’s data protection officer can be contacted at legal@oodlefinance.com

3. About the information we collect and hold


3.1 The table in Part A of the Schedule below summarises the information we collect and hold up to and including the shortlisting stage of the recruitment process, how and why we do so, how we use it and with whom it may be shared.


3.2The table in Part B of the Schedule below summarises the additional information we collect before making a final decision to recruit, i.e. before making an offer of employment, how and why we do so, how we use it and with whom it may be shared.


3.3 We seek to ensure that our information collection and processing is always proportionate. We will notify you of any changes to information we collect or to the purposes for which we collect and process it.


3.4 As a general rule, during the recruitment process, we do not collect or process any information that reveals your racial or ethnic origin, religion, political or philosophical beliefs, trade union membership, genetic data, biometric data or information concerning your health/sex life (“Sensitive Personal Information”), unless authorised by law or where necessary to comply with applicable laws.  However, in some circumstances, we may need to collect, or request some Sensitive Personal Information for legitimate recruitment-related purposes; for example, information about your physical or mental condition to consider accommodations for the recruitment process and/or subsequent job role. You may provide, on a voluntary basis, other Sensitive Personal Information during the recruitment process.


4. Purposes for processing personal information


4.1 We collect and use this personal information primarily for recruitment purposes – in particular, to determine your suitability for employment and to reach a hiring decision. This includes assessing your skills, qualifications and background for a particular role, verifying your information, carrying our reference checks or background checks (where applicable) and to generally manage the hiring process and communicate with you about it.

5. How long we keep your information


5.1 We keep the personal information that we obtain about you during the recruitment process for no longer than is necessary for the purposes for which it is processed. How long we keep your information will depend on whether your application is successful and you become employed by us, the nature of the information concerned and the purposes for which it is processed.


5.2 We will keep recruitment information (including interview notes) for no longer than is reasonable, taking into account the limitation periods for potential claims such as race or sex discrimination (as extended to take account of early conciliation), after which it will be destroyed. If there is a clear business reason for keeping recruitment records for longer than the recruitment period, we may do so but will first consider whether the records can be pseudonymised, and the longer period for which they will be kept.

5.3  If your application is successful, we will keep only the recruitment information that is necessary in relation to your employment.

5.4 Further details on our approach to information retention and destruction are available from our Recruitment Team, which can be reached at careers@oodlefinance.com

6. Who we share your information with and transfers abroad

6.1 WWe take care to allow access to personal information only to those who require such access to perform their tasks and duties, and to third parties who have a legitimate purpose for accessing it. Whenever we permit a third party to access personal information, we will implement appropriate measures to ensure the information is used in a manner consistent with this Notice and that the security and confidentiality of the information is maintained.

Transfers to other group companies

  •    We will share your personal information with other companies in the Oodle group in order to administer our recruitment processes and store data.

Transfers to third party service providers

We may make certain personal information available to third parties who provide services relating to the recruitment process to us, including:
•   recruitment or executive search agencies involved in your recruitment;
•   background checking or other screening providers and relevant local criminal records checking agencies, e.g. Experian, CIFAS and/or JUMIO
•   data storage, shared services and recruitment platform providers, IT developers and support providers and providers of hosting services in relation to our careers website, e.g. Greehouse and NaturalHR;
•   third parties who provide support and advice including in relation to legal, financial/audit, management consultancy, insurance, health and safety, security, whistleblowing and reporting issues.

6.2 We may also disclose personal information to third parties on other lawful grounds, including:
●   Where you have provided your consent;
●  To comply with our legal obligations, including where necessary to abide by law, regulation or contract, or to respond to a court order, administrative or judicial process, including, but not limited to, a subpoena, government audit or search warrant;
●  In response to lawful requests by public authorities (including for tax, immigration, health and safety, national security or law enforcement purposes);
●   As necessary to establish, exercise or defend against potential, threatened or actual legal claims;
●   Where necessary to protect your vital interests or those of another person; and/or
●  In connection with the sale, assignment or other transfer of all or part of our business.

6.3 In some cases, the sharing described above may result in your personal information being transferred internationally, including countries outside of the European Economic Area, for example the United States of America. These countries may have data protection laws that are different to the laws in this country (and, in some cases, may not be as protective).

6.4 We have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Notice.

7. Your rights to correct and access your information and to ask for it to be erased

7.1 You may exercise the rights available to you under applicable data protection laws as follows:
•    If you wish to access, correct, update or request deletion of your personal information.
•   You can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information.
•    If we have collected and process your personal information with your consent, then you can withdraw your consent at any time.  Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

• You can exercise these rights by contacting us using the contact details provided below.

8. Keeping your personal information secure

8.1 We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

8.2 We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

9. Further Information

9.1 For further information regarding this notice, to make a query or voice concerns, please contact our Data Protection Officer at legal@oodlefinance.com

10. How to complain

10.1 We hope that our Recruitment team or Data Protection Officer can resolve any query or concern you raise about our use of your information. If not, you may contact the Information Commissioner at https://ico.org.uk/concerns/ or telephone: 0303 123 1113 for further information about your rights and how to make a formal complaint. 

11. Schedule – About the information we collect and hold

Part A – Up to including the shortlisting stage

The information
we collect
How we
collect the
information
Why we collect the
information
How we use and may
share the information
Identification data and contact details (i.e. address, home and mobile phone numbers, email address)From youLegitimate interest: to carry out a fair recruitment process.
Legitimate interest: to progress your application, arrange interviews and inform you of the outcome at all stages.
To enable HR personnel or the hiring manager of the relevant department to contact you to progress your application, arrange interviews and inform you of the outcome
To inform the relevant manager or department of your application
Details of your
qualifications,
experience,
employment
history
(including job
titles salary and
working hours)
and interests
From you, in
the
completed
application
form, c.v.
(resume)
and
interview
notes (if
relevant)
Legitimate interest: to
carry out a fair
recruitment process.
Legitimate interest: to
make an informed
decision to shortlist for
interview and (if
relevant) to recruit.
To make an informed
recruitment decision.
The person making the
shortlisting decision will
receive non-anonymised
details
Details of your
nominated
referees
(including their
name, contact
details,
employer and
job role)
From you, in
the
completed
application
form and
interview
notes (if
relevant)
Legitimate interest: to
carry out a fair
recruitment process in
the regulated sector, to
comply with our legal
obligations to obtain
regulatory references
(if relevant)
To carry out a fair
recruitment process
To comply with
legal/regulatory
obligations Information
shared with relevant
managers, HR personnel
Other
information you
voluntarily
provide, or we
obtained from
publicly available
sources e.g.
LinkedIn,
Facebook
From your
completed
application
form.
From our
research on publicly
available
information
about you.
Legitimate interest: to
carry out a fair
recruitment process.
To carry out a fair
recruitment process.

Part B – Before making a final decision to recruit

The information
we collect
How we
collect the
information
Why we collect the
information
How we use and may
share the information
Information
about your
previous
academic
and/or
employment
history,
including
details of any
conduct,
grievance or
performance
issues,
appraisals, time
and attendance,
from references
obtained about
you from
previous
employers
and/or
education
providers
From your
referees
(details of
whom you will
have
provided)
Legitimate interest: to make an informed decision to recruit.
To comply with our legal obligations.
Legitimate interests: to maintain employment records and to comply with legal, regulatory and corporate governance obligations and good employment practice.
To obtain the relevant
reference about you.
To comply with
legal/regulatory
obligations Information
shared with relevant
managers and HR
personnel.
Information
regarding your
academic and
professional
qualifications
From you,
from your
education
provider from
the relevant
professional
body
Legitimate interest: to
verify the qualifications
information provided
by you
To make an informed
recruitment decision
Information
regarding your
criminal record,
in criminal
records
certificates
(CRCs) and
enhanced
criminal
records
certificates
(ECRCs)
Information
about your
credit records
From you and
from the
Disclosure
and Barring
Service (DBS)
From Cifas
and Experian.
To perform the
employment contract
to comply with our
legal obligations.
Legitimate interest: to
verify the criminal
records information
provided by you for
reasons of substantial
public interest
(preventing or
detecting unlawful acts
and protecting the
public against
dishonesty)
To make an informed
recruitment decision.
To carry out statutory
checks Information
shared with DBS, Cifas
and other regulatory
authorities as required.
For further information,
see * below

* Further details on how we handle sensitive personal information and information relating to criminal convictions and offences as required under the Data Protection Bill are set out in our Data Protection, Criminal Records Information and associated policies. The policies are available via request from our Recruitment Team

Back to the top