Last Updated: July 2023
Recruitment Privacy Notice
1. Introduction
This Recruitment Privacy Notice describes how Canonical Group Limited (“Canonical”) collects, uses and retains personal information about you, when you apply or take part in our recruitment process. As such, this policy applies to potential candidates for employment, or those who may take part in recruitment programmes at Canonical.
At Canonical, we consider your privacy to be extremely important to us. Further information regarding our fundamental principles and practices can be found in our Privacy Policy.
We are Canonical Group Limited and are the “data controller” for the purposes of applicable data protection regulations relevant to your personal information. This means that we are responsible for determining how we hold and use your personal information.
Canonical is a limited company registered in England and Wales with registered number 0110334C. Our registered office is 5 New Street Square, London EC4A 3TW.
2. What information we collect
In connection with our recruitment activities and your application to work with us, we will collect, store, and use the following categories of personal information about you:
- Your name, date of birth, nationality, contact information such as e-mail and telephone number,
- Any information on your identification and right to work documentation,
- Any information provided to us in your CV, references, and cover letter,
- Any information and documentation you have provided in relation to your qualifications, educational and employment background,
- Any correspondence you may have had with us during the recruitment application process,
- Any information you may provide us with during your application interviews, and any interview feedback that your interviewer may have,
- Your psychometric test results, including your rank and percentile, if you undertake a recruitment test with our providers Thomas or ClassMarker.
3. How we collect your information
We may collect personal information about you from the following sources:
- Directly from you, when you submit your application and information to us,
- Recruitment services platforms such as Greenhouse,
- Your named referees, if you have submitted them in your application,
- Your public profile on professional social media platforms such as LinkedIn.
4. Why we use your information
We use your personal information as part of the recruitment process at Canonical. Using your information allows us to:
- Carry out recruitment operations,
- Assess your skills, qualifications, and suitability for the role,
- Communicate with you as part of the recruitment process,
- Communicate with and verify your references where required,
- Keep records regarding our recruitment and hiring processes,
- Comply with our legal or regulatory requirements,
- Respond to and defend against legal claims.
We use your information because we believe we have a legitimate business interest in managing our recruitment operations and enabling the hiring of new employees for our organisation. We also process your personal information to decide whether to enter a contract of employment with you.
Having received your application via the recruitment platform Greenhouse, we will process your information to decide whether you meet the requirements for the role. If your application progresses to the next stage, we may send you further communications regarding psychometric testing and interviews. We will use the information you provide during any testing and interviews to determine your suitability for the role that you are applying for.
5. Who we share your information with
We only share your personal information for the purposes of facilitating the recruitment process. To achieve this, we may share your information amongst other international Canonical group entities and third-party companies providing services to us. Your personal information may be:
Transferred to other international Canonical group entities
We may share your personal information with other Canonical group entities where necessary for HR, recruitment, administrative and support services. Further information on international transfers has been included in Section 6. International Data Transfers below.
Transferred to third-party organisations that provide services to us
We use third-party service providers that support us in operating our recruitment processes, including application management and psychometric testing platforms. We may also ask for feedback on the recruitment process. These third-party service providers are listed below:
- Greenhouse Software, Inc.
- ClassMarker Pty Ltd.
- Thomas International Ltd.
- Talenthub.io
- Devskiller S.A
We also use third party service providers who help facilitate, run and manage our internal administrative systems. For example, we use service providers for scheduling and conducting interviews, data storage and back-up services.
Transferred to government agencies and/or regulators
We may also transfer your personal information to government agencies or regulators as required to comply with our legal obligations.
Where we share your data with third parties, we implement appropriate legal mechanisms and security measures to ensure the protection of your personal information.
6. International data transfers
As Canonical is an international organisation, we may process, transfer and store your personal information outside the UK and European Economic Area (“EEA”).
Where your personal information is transferred to international Canonical entities and third parties outside the UK and EEA, we will always undertake reasonable steps to ensure that adequate security mechanisms are implemented to protect your information to the same standard as within the UK and EEA, allowing you to exercise the same rights over your data. To ensure that the data protection policies of the receiving organisations meet the UK and EEA regulatory standards, we use approved standard contractual clauses to protect your personal information.
7. How we protect your information
We take the security of your personal information seriously, and have implemented appropriate security measures, internal policies and controls to prevent your information from being lost, misused, accessed without authorisation, altered or accidentally destroyed. Our security policy includes systems restrictions, encrypted and password protected files, retention protocols and security training for management.
In addition, we use strict access controls to ensure that your information is only accessible on a need-to-know basis, by employees who are directly involved in your recruitment application. Any third parties that process your information act on our instructions and are subject to a duty of confidentiality.
8. How long we keep your information
We keep your personal information for a period of 2 years, after your recruitment application is decided. We keep your information for that period in order to respond to or defend against any legal claims. After this period, we will securely delete or anonymise your personal information, in accordance with the applicable laws and regulations. When we anonymise your information, this makes it unidentifiable as to whom it originally belonged to.
If you are unsuccessful with your application, we may also keep your information in case there are any similar opportunities that may be suitable for you in the future. In any event, we will not hold your data for more than 2 years.
If you do not want us to keep your information after the recruitment process has ended, please contact us at [email protected].
9. Your rights
You have a number of rights which you may be able to exercise with regards to your personal information. These rights have been listed below:
- Rights to Access and Data Portability: You have the right to access your personal information and may make a request to do so either verbally or in writing. You also have the right to data portability and may request to receive your personal information in a standard use, machine readable format.
- Right to Rectification: You have the right to request us to rectify any inaccurate or incomplete personal information that we may hold on you. If you make this request, we will update your personal information with the correct information provided.
- Rights to Objection, Restriction and Erasure: You have the right to restrict how your personal information is being used, and the right to request us to delete your information.
- Right to Withdraw Consent: Although we do not generally process your personal information based on your consent, in circumstances which this is the case, you may withdraw your consent at any time.
- Right to be Informed: You have the right to be informed about how we collect, use and retain your personal information, which is why we have set these out within this policy. If you have further queries on how we use your personal information, you may contact us at any time.
10. Exercising your rights
To exercise any of these rights above, please contact us at [email protected], providing your name and contact details. Depending on your request, we may ask for further verification of your identity, or additional information in order to fulfil your request.
11. Right to complain
If you wish to make a complaint to us about how we use or retain your personal information, please contact us at [email protected].
You also have the right to submit a complaint with the UK data protection authority, which is the Information Commissioner's Office (ICO). If you wish to file a complaint with the ICO, you may find the following information helpful: https://ico.org.uk/make-a-complaint/
12. Contact information
If you have any questions about this notice, or about how we use or retain your personal information, please contact us at [email protected].
13. Policy changes
This is the latest version of our Recruitment Privacy Notice and is in effect as of the “Last Updated” date which may be found at the top of the notice. As we may change this notice from time to time, you should check here regularly for the most up-to-date version.