Recruitment Privacy Policy

This policy explains how Lyphe Clinic Ltd, Lyphe Dispensary Ltd and Travel Clinic Farnborough Ltd (together referred to in this policy as “the Group”, “we”, “us”, or “our”) process personal data relating to job applicants and recruitment activities. This policy applies to all candidates applying for roles within the Group, whether directly or through third parties.

The employing company for the role you apply for will act as the data controller responsible for processing your personal data for recruitment purposes.

For general information about how we handle personal data, please see the Privacy Policy.

The information we collect

When you apply for a role with us, we may collect information such as: 

  • your name and contact details 
  • information contained in your CV or application 
  • employment history, qualifications and skills 
  • interview notes or assessment results 
  • references provided by your referees 

Where relevant to the role, we may also verify your right to work in the UK or carry out background checks. Where we obtain your personal data from third-party platforms or recruiters, it will be processed in accordance with this policy.

For certain roles, we may also process information relating to criminal convictions or carry out criminal records checks where this is lawful, necessary, and appropriate to the role. This may include roles where checks are required by law or where the role involves a high degree of trust and responsibility.

How we collect your information

We may collect personal data about candidates from: 

  • applications submitted directly to us 
  • recruitment agencies 
  • professional networking platforms (such as LinkedIn) 
  • job boards (such as Indeed) 
  • referees you have provided 

Some of the systems we use during recruitment may store or process personal data outside the United Kingdom or the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR. 

How we use your information

We use candidate information to:

  • assess your suitability for a role
  • communicate with you during the recruitment process 
  • carry out reference or background checks where appropriate 
  • maintain records relating to recruitment activities 

We process this information based on our legitimate interest in managing recruitment processes and to take steps at your request before entering into an employment or contractor agreement. We may also process your personal data where necessary to comply with legal obligations, including right-to-work checks.  

In limited cases, we may process special category data (such as health information or diversity data) where required for recruitment purposes, including making reasonable adjustments during the hiring process or complying with legal obligations. Where this occurs, we will ensure appropriate safeguards are in place in accordance with UK data protection law. 

Automated decision-making

You will not be subject to decisions that have a significant effect on you based solely on automated decision-making.

Data sharing

Your information may be shared with:

  • recruitment agencies 
  • referees 
  • background screening providers 
  • HR advisers assisting with recruitment 

Any third parties involved in recruitment activities must handle your personal data securely and only for the purposes specified by us. We do not sell your personal data to third parties. 

Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure, and restrict access to those involved in the recruitment process.

Data retention

If your application is unsuccessful, we will normally retain your information for up to six months after the recruitment process ends. 

If your application is successful, your information will become part of your employee or contractor record and will be processed in accordance with our internal staff privacy policies. 

With your consent, we may retain your application details for a longer period to contact you about future opportunities at the Group that may be relevant to your experience. You can request the removal of your information from our recruitment records at any time by contacting us.

Your rights

You have several rights under data protection law, including the right to: 

  • access your personal data
  • request correction of inaccurate information
  • request deletion of your data where applicable
  • object to processing and request restriction of processing in certain circumstances
  • request the transfer of your personal data to another organisation, where applicable

Complaints 

If you have questions about how your personal data is handled during recruitment, please contact: dataprotection@lyphe.com.

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO).