Job Applicant, Employee & Volunteer Privacy Notice

1. Data Controller

The King's Trust, South London Centre, 8 Glade Path, London, SE1 8EQ

Email: data.protection@kingstrust.org.uk

The King's Trust is responsible for deciding how and why we process your personal data during recruitment and volunteering processes.

 

2. What Information We Collect

Employment Applicants

We may collect the following information:

  • Your name, home address, email address and telephone number
  • Details of your qualifications, skills, experience and employment history
  • Information about your entitlement to work in the UK
  • Disability or health information, where relevant, to enable us to make reasonable adjustments during the recruitment process
  • Equal opportunities monitoring information, including information about ethnic origin, sexual orientation, health, religion or belief
  • Information relating to criminal convictions and offences, where required for the role

 

Volunteer Applicants

We may collect:

  • Your name, home address, email address and telephone number
  • Details of your qualifications, skills, and experience 
  • Disability or health information, where relevant, to enable us to make reasonable adjustments during the recruitment process
  • Equal opportunities monitoring information, including information about ethnic origin, sexual orientation, health, religion or belief
  • Information relating to criminal convictions and offences, where required for the role

 

3. How We Collect Your Information

We collect personal data in a variety of ways, including:

  • From application forms, CVs or resumes you submit
  • Through interviews, assessments, or other selection activities 
  • From referees and background checks (where your application is successful)
  • From criminal record checks carried out by authorised bodies, where required

Your information may be held in HR or volunteer management systems, as well as on other IT systems, including email.

 

4. Why We Process Your Personal Data and Our Lawful Bases

We process your personal data for the following purposes and lawful bases:

a. Recruitment and Selection

  • To assess your suitability for employment or a volunteer role
  • To manage recruitment processes and make selection decisions

Lawful basis: 

  • Article 6(1)(b) UK GDPR: taking steps at your request prior to entering into a contract (employment only)
  • Article 6(1)(f) UK GDPR: legitimate interests in running fair and effective recruitment and volunteering processes

 

We have considered our legitimate interests and are satisfied that they do not override your rights and freedoms.

 

b. Legal and Regulatory Obligations

  • To verify your right to work in the UK
  • To meet safeguarding, equality, and regulatory requirements

Lawful basis: 

  • Article 6(1)(c) UK GDPR: legal obligation

 

c. Special Category Data

We process special category data where necessary, including: 

  • Health and disability information to make reasonable adjustments
  • Equality, diversity and inclusion monitoring data

Lawful basis:

  • Article 9(2)(b) UK GDPR: necessary for carrying out obligations and exercising specific rights in the field of employment and volunteering law
  • Schedule 1, Part 1 of the Data Protection Act 2018

 

Equality monitoring data is used only in an anonymised or aggregated form and does not form part of selection decisions.

 

d. Criminal Convictions and Offences Data

Where required for a role, we process information relating to criminal convictions and offences. 

Lawful basis:

  • Article 10 UK GDPR
  • Schedule 1 of the Data Protection Act 2018 (employment and safeguarding purposes), with appropriate safeguards in place

 

5. Who Has Access to Your Data

Your information will be shared internally only with those involved in the recruitment or volunteering process, including:

  • HR staff
  • Interview panel members
  • Relevant managers
  • IT staff where system access is required

 

The Trust contracts with AssessFirst as an external contractor for the purposes of: 

  • Recruitment and selection: to support fair, consistent and evidence-based hiring decisions. 
  • Internal mobility and promotion: to support objectives, transparent decisions on development and progression
  • Candidate experience and self-insight: enabling individuals to see feedback/reports about their own profile.

 

You can find out more information about their data processing practices at: Privacy Policy or visit: https://www.assessfirst.com

 

We will also share your information with external third parties where your application is successful, including:

  • Referees (employment roles only)
  • Disclosure and Barring Service (DBS), Disclosure Scotland or AccessNI
  • Vetting and background-check providers

 

When we engage third-party agencies, we will provide you with their details and a link to their privacy notice.

 

6. International Transfers

Some vetting or background-check providers may transfer personal data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK data protection law, such as adequacy regulations or approved contractual safeguards. Further information is available on request.

 

7. How We Protect Your Data

The King's Trust takes the security of personal data seriously. We have appropriate technical and organisational measures in place to protect your data against unauthorised access, loss, misuse or disclosure. Access to personal data is restricted to those who need it for legitimate business purposes.

 

8. How Long We Keep Your Data

  • Unsuccessful applicants:

We will retain your personal data for six months following the conclusion of the recruitment or volunteering process, unless you choose to receive further opportunity alerts.

  • Successful applicants:

Personal data collected during recruitment will be transferred to your employee or volunteer record and retained for the duration of your employment or volunteering relationship.

 

9. Your Rights

Under the UK GDPR, you have the right to: 

  • Access and obtain a copy of your personal data
  • Have inaccurate or incomplete data corrected
  • Request deletion or restriction of processing where appropriate
  • Object to processing based on legitimate interests
  • Request restriction of processing in certain circumstances

 

To exercise your rights, please contact the Data Protections Officer at: data.protection@kingstrust.org.uk

If you are dissatisfied with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO).

 

10. Provision of Data

You are under no statutory or contractual obligation to provide personal data during the recruitment or volunteering process. However, failure to provide the required information may mean we are unable to progress your application.

 

11. Automated Decision-Making

Recruitment and volunteering decisions are not made solely by automated means. While assessment or profiling tools may be used to support decision-making, all decisions involve meaningful human review.

 

12. Changes To This Notice

We may update this privacy notice from time to time. Any significant changes will be communicated to you as appropriate.