Job Applicant Privacy Notice


Effective Date: 01 June 2021

Crinkle Recruitment (“we” / “us” / “our”) is a brand name of The Schools HR Co-operative Limited. We collect and process personal data relating to job applicants as part of our recruitment services, on behalf of a client hirer. We are committed to being transparent about how we collect and use that data and to meeting our data protection obligations.

This notice sets out the basis on which we collect, use and disclose the personal data of job applicants, as well as your rights in respect of such personal data.


What information do we collect and how?

Crinkle Recruitment will collect a range of information from you which may include:

  • your name, address and contact details, including email address and telephone number;
  • details of your qualifications, skills, experience and employment history, or other professional information as documented on your CV;
  • information from interviews and phone-screenings you may have;
  • information about your current level of remuneration, including benefit entitlements;
  • information about your entitlement to work in the UK; and
  • equal opportunities monitoring information, including information about your ethnic origin, sexual orientation, health and religion or belief.

We may collect this information in a variety of ways. For example, data might be contained in application forms or CVs, obtained from your passport or other identity documents, or collected through interviews or other methods of assessment.

Data will be stored in a range of different places, including on our secure server as well as on our email systems.


Why do we process personal data?

We collect and process your data for a number of purposes and where we have a legal basis to do so, as follows. We have a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing data from job applicants allows us to manage the recruitment process, assess and confirm a candidate's suitability for employment. We may also need to process data from job applicants to respond to and defend against legal claims.

In some cases, we need to process data to ensure that we are complying with our legal obligations. For example, we are required to check a successful applicant's eligibility to work in the UK.

We may process information about whether applicants are disabled so we can make reasonable adjustments for candidates who have a disability. Where we process other special categories of data, such as information about ethnic origin, sexual orientation, health or religion or belief, this is for equal opportunities monitoring purposes. Our processing of these types of data will be carried out to ensure you or us can meet our obligations or exercise our rights under law related to employment or (only where applicable) to enable us to establish, exercise or defend legal claims.

We will not use your data for any purpose other than the recruitment process of which you are a part.


What is the lawful basis for processing my personal data?

  • Processing is necessary to fulfil a contract – We will process your personal information, where necessary, for the performance of the contract which we have with you
  • You have provided consent – We will process your personal information, where you have consented to us doing so. For example, by sending your CV to us you have consented to us processing your personal data. You have the right to withdraw this consent at any time. Where consent is the only legal basis for processing certain aspects of your personal information, we will cease to process that personal information if you withdraw your consent. Any such withdrawal of consent will not affect the lawfulness of any prior use of that personal information, before the date of withdrawal.
  • It is in our legitimate interests and these interests do not override your data protection rights - We may process certain aspects of your personal information, when it is in our legitimate interests to do so, and where these interests do not override your data protection rights.


Who has access to data?

Your information may be shared internally within the company for the purposes of the recruitment process. Your data will also be shared with our client hirer, at which point your data will be covered under their privacy notice, as they become a data controller. In addition, we may need to share your personal information with a regulator or otherwise to comply with the law.


How does Crinkle Recruitment protect data?

We take the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our personnel in the proper performance of their duties.


How long does Crinkle Recruitment keep your data?

We will hold your data on file for 12 months. At the end of that period, your data is deleted or destroyed from our systems (unless we need to retain it for longer to exercise or defend any legal claims).


Your rights

As a data subject, you have a number of rights under data protection law. You can:

  • access and obtain a copy of your data on request;
  • require us to change incorrect or incomplete data;
  • require us to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing;
  • object to the processing of your data where we are relying on its legitimate interests as the legal ground for processing;

If you would like to exercise any of these rights or if you have any questions about this notice or our processing of your data more generally, please contact If you believe that the company has not complied with your data protection rights, you can complain to the Information Commissioner's Office (