Candidate Privacy Notice
This privacy notice gives you information on how we, at KCP Ltd, collect and process your personal data through your use of this website to apply for work with us (whether as an employee, contractor, consultant, intern, casual and/or agency worker). This privacy notice makes you aware of how and why your personal data will be used, namely for the purposes of the recruitment exercise, and how long it will usually be retained for. It provides you with certain information that must be provided under the UK General Data Protection Regulation (UK-GDPR).
This privacy notice applies to:
– Candidates for recruitment
Who is the controller for the personal data processed?
A “controller” is a person or organisation who determines the purposes for which, and the manner in which, any personal data is processed. This notice is issued by KCP as a data controller.
What personal data we collect about you:
We may collect and process the following information about you:
How we use your data
Lawful basis of processing information
We only collect and use personal information about you when the law allows us to. Most commonly, we use it:
As well as collecting information from you we may also collect it from other sources including any professional profiles online (such as Total Jobs and similar job advertisement boards/websites) and your professional referees such as former managers. We use all data sources lawfully and we only collect types of data relevant to our recruitment needs.
Your individual rights
In this section, we have summarised the rights that you have under UK General Data Protection Regulation (UK-GDPR). Some of the rights are complex, and not all the details have been included in our summary. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
Your rights under the UK General Data Protection Regulation (UK-GDPR) are:
The right to object: You have the right to ask us to stop processing your personal data if:
The right of access: You have a right to obtain confirmation of whether we are processing your personal data, access to your personal data and information regarding how your personal data is being used by us, and:
The right to be informed: We are required, to provide clear and transparent information to you about how we process your personal data. This privacy notice addresses this right.
The right of rectification: If you believe the personal data we hold about you is incorrect or incomplete you have the right to correct this and you may exercise this right along with the right to restrict processing until these corrections are made.
The right to erasure: If there is no legal basis or legitimate reason for processing your personal data, you may request that we erase it.
The right to restrict processing: You have a right to block the processing of your personal data in certain circumstances This means we will still hold your data but not process it. This is a conditional right which may only be exercised when:
The right to data portability: You can request that your personal data is transferred to another controller or processor in a machine-readable format if:
Consent
Where you have given explicit consent for processing of your personal data, you have the right to withdraw this consent at any time, but this will not affect the lawfulness of processing based on consent before its withdrawal.
How long we keep personal data for
We ensure that your personal data is only retained for the period that we need it for, or in accordance with laws, regulations and professional obligations that we are subject to. All personal data collected has a defined retention period, which is in line with our retention policy. If you would like to find out how long your information is being retained, please see “additional information” section of this notice.
Security of personal information
We take the responsibility for protecting your privacy very seriously and we will ensure your data is secured in accordance with our obligations under the Data Protection laws. We have in place technical and organisational measures to ensure personal information is secured and to prevent your personal data from being accessed in an unauthorised way, altered or disclosed. We have in place a robust access control policy which limits access to your personal data to those who only need to know. The processing of your personal data will only take place subject to our instruction.
We have policies and procedures to handle any potential data security breaches and data subjects, third parties and any applicable regulators will be notified where we are legally required to do so. 
We have ensured that all employees have had information security and data protection training. If you would like more details of the security we have in place, please see “additional information”, section of this policy.
Children’s information
We do not knowingly collect information on children. If we have collected personal information on a child, please contact us immediately using the details in section “additional information”, so we can remove this information without any undue delay.
If you fail to provide personal data to us
If we are legally required to collect personal data or need it to fulfil a contract with you, and you do not provide this personal data when requested, we may be unable to perform the contract we have with you or are trying to enter into. In such cases, we may need to decline further steps in our recruitment process, but we will inform you of this at the time of data collection.
Automated Decision Making
Your personal data is not used in any automated decision making (a decision made solely by automated means without any human involvement) or profiling (automated processing of personal data to evaluate certain conditions about an individual)
Disclosures of your personal data
We will only share your personal information with the following third parties for the purposes of processing your application: IT service providers. All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
Transfers outside of the EEA and UK
We may share personal information to third parties outside of the European Economic Area (EEA) and United Kingdom (UK). Any personal information transferred will only be processed on our instruction and we ensure that information security at the highest standard would be used to protect any personal information as required by the Data Protection laws.
Where personal data is transferred outside of the EEA or UK to a country without an adequacy decision, we will ensure appropriate safeguards are in place prior to the transfer. These could include:
Right to complaint
If you think that our collection or use of personal information is unfair, misleading, or inappropriate, or have any other concern about our data processing, please raise this with us in the first instance.
To make a complaint, please contact us via email on gdpr@kcpnetwork.com
Alternatively, you can contact us:
By Post: Duke House, Downmill Road, RG12 1QS, Bracknell, UK
By Phone: +44 333 311 3333
Alternatively, you can make a complaint to the Information Commissioner’s Office:
By Post:Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
By Website: click here
By Phone: 0303 123 1113 (Local rate) or 01625 545 745 (National rate)
Additional information
Your trust is important to us. That is why we are always available to answer any questions concerning how your data is processed. If you have any questions that could not be answered by this privacy notice or if you wish to receive more in-depth information about any topic within it, please contact us via email on gdpr@kcpnetwork.com
Policy review and amendments
We keep this privacy notice under regular review. this notice was last updated on 07/03/2025
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
