This notice explains what personal data we collect when you apply for a job or otherwise express interest in working with HULO Global Limited, why we use it, how long we keep it and what your rights are. It supplements our general Privacy notice.
1. Who is responsible
HULO Global Limited (company number 17134928, registered office Unit A, 82 James Carter Road, Mildenhall, United Kingdom, IP28 7DE, ICO registration ZC158327) is the controller of your data. Contact [email protected], marking your message “Privacy”, or write to the registered office.
2. What we collect
- Details you give us in an application or speculative approach: name, email, phone number, location, right-to-work status, links you share (for example LinkedIn, GitHub, a portfolio), your CV and covering statement, answers to role questions, salary expectation, notice period, and how you heard about us.
- Details we generate: an application reference, the stage your application has reached, notes made by the people interviewing you, interview scores or summaries, and correspondence with you.
- Details from others: references you nominate (only after a conditional offer and with your consent), and, where the role requires it and you have been told, the results of right-to-work checks. We do not use automated decision-making or profiling to make hiring decisions.
- Technical details when you use the application form: IP address, browser type and the time of submission, used to protect the form from abuse.
We ask you not to include special-category data (for example health, religion, ethnicity, sexual orientation, trade-union membership) or criminal-record information in your application unless you choose to tell us something so that we can make an adjustment to the process. If you do, we use it only for that purpose.
3. Why we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Assessing your application and deciding whether to interview and hire you | Taking steps at your request before entering into a contract; our legitimate interest in recruiting suitable staff |
| Communicating with you about your application and its status | As above |
| Checking your right to work in the UK and, for some roles, references and qualifications | Legal obligation; taking steps before a contract |
| Making reasonable adjustments to the process | Employment-law obligations; substantial public interest (equality of opportunity) |
| Keeping records of the process, defending legal claims and demonstrating fair recruitment | Legitimate interest; legal obligation |
| Protecting our systems and forms from abuse | Legitimate interest |
| Keeping your details for future vacancies | Your consent, which you may withdraw at any time |
4. Who sees it
Your application is seen by the people involved in hiring for the role: the hiring manager, interviewers and the person co-ordinating the process. Our email provider, hosting provider and the security service that protects the application form process data on our behalf under contract. Your data is stored on our own servers in the United Kingdom. We do not sell candidate data or share it with recruitment agencies without your agreement.
If we make you an offer, relevant information is transferred to your employee record and the privacy information we give staff applies from your start date.
5. How long we keep it
- Unsuccessful applications: six months after we tell you the outcome, so that we can respond to any query or claim about the process, then deleted.
- Successful applications: kept as part of your employment record.
- Talent pool: if you agree, up to 12 months from your consent, after which we delete your details unless you renew your consent.
- Speculative applications: six months from receipt.
- Form-protection logs: 90 days.
You can ask us to delete your application sooner at any time (see section 7). Statutory right-to-work records are kept for the period the law requires.
6. International transfers
We do not transfer candidate data outside the United Kingdom, except that our email provider may process messages in other countries under appropriate safeguards (UK adequacy regulations or the ICO’s International Data Transfer Agreement).
7. Your rights
You have the right to ask for a copy of your data, to have inaccurate data corrected, to have your data deleted, to restrict or object to processing based on legitimate interests, to data portability for data you provided, and to withdraw consent where we rely on it. To exercise a right, email [email protected] quoting your application reference. We respond within one month.
You can also see the current stage of your application at any time at the status link in your confirmation email. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve any concern first.
8. Changes
We may update this notice; the date at the top shows the current version. Material changes that affect open applications will be notified to affected candidates by email.