Job Applicant, Employee & Volunteer Privacy Notice
1. Data Controller
The King's Trust, South London Centre, 8 Glade Path, London, SE1 8EQ
Email: data.protection@kingstrust.org.uk
The King's Trust is responsible for deciding how and why we process your personal data during recruitment and volunteering processes.
2. What Information We Collect
Employment Applicants
We may collect the following information:
- Your name, home address, email address and telephone number
- Details of your qualifications, skills, experience and employment history
- Information about your entitlement to work in the UK
- Disability or health information, where relevant, to enable us to make reasonable adjustments during the recruitment process
- Equal opportunities monitoring information, including information about ethnic origin, sexual orientation, health, religion or belief
- Information relating to criminal convictions and offences, where required for the role
Volunteer Applicants
We may collect:
- Your name, home address, email address and telephone number
- Details of your qualifications, skills, and experience
- Disability or health information, where relevant, to enable us to make reasonable adjustments during the recruitment process
- Equal opportunities monitoring information, including information about ethnic origin, sexual orientation, health, religion or belief
- Information relating to criminal convictions and offences, where required for the role
3. How We Collect Your Information
We collect personal data in a variety of ways, including:
- From application forms, CVs or resumes you submit
- Through interviews, assessments, or other selection activities
- From referees and background checks (where your application is successful)
- From criminal record checks carried out by authorised bodies, where required
Your information may be held in HR or volunteer management systems, as well as on other IT systems, including email.
4. Why We Process Your Personal Data and Our Lawful Bases
We process your personal data for the following purposes and lawful bases:
a. Recruitment and Selection
- To assess your suitability for employment or a volunteer role
- To manage recruitment processes and make selection decisions
Lawful basis:
- Article 6(1)(b) UK GDPR: taking steps at your request prior to entering into a contract (employment only)
- Article 6(1)(f) UK GDPR: legitimate interests in running fair and effective recruitment and volunteering processes
We have considered our legitimate interests and are satisfied that they do not override your rights and freedoms.
b. Legal and Regulatory Obligations
- To verify your right to work in the UK
- To meet safeguarding, equality, and regulatory requirements
Lawful basis:
- Article 6(1)(c) UK GDPR: legal obligation
c. Special Category Data
We process special category data where necessary, including:
- Health and disability information to make reasonable adjustments
- Equality, diversity and inclusion monitoring data
Lawful basis:
- Article 9(2)(b) UK GDPR: necessary for carrying out obligations and exercising specific rights in the field of employment and volunteering law
- Schedule 1, Part 1 of the Data Protection Act 2018
Equality monitoring data is used only in an anonymised or aggregated form and does not form part of selection decisions.
d. Criminal Convictions and Offences Data
Where required for a role, we process information relating to criminal convictions and offences.
Lawful basis:
- Article 10 UK GDPR
- Schedule 1 of the Data Protection Act 2018 (employment and safeguarding purposes), with appropriate safeguards in place
5. Who Has Access to Your Data
Your information will be shared internally only with those involved in the recruitment or volunteering process, including:
- HR staff
- Interview panel members
- Relevant managers
- IT staff where system access is required
The Trust contracts with AssessFirst as an external contractor for the purposes of:
- Recruitment and selection: to support fair, consistent and evidence-based hiring decisions.
- Internal mobility and promotion: to support objectives, transparent decisions on development and progression
- Candidate experience and self-insight: enabling individuals to see feedback/reports about their own profile.
You can find out more information about their data processing practices at: Privacy Policy or visit: https://www.assessfirst.com
We will also share your information with external third parties where your application is successful, including:
- Referees (employment roles only)
- Disclosure and Barring Service (DBS), Disclosure Scotland or AccessNI
- Vetting and background-check providers
When we engage third-party agencies, we will provide you with their details and a link to their privacy notice.
6. International Transfers
Some vetting or background-check providers may transfer personal data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK data protection law, such as adequacy regulations or approved contractual safeguards. Further information is available on request.
7. How We Protect Your Data
The King's Trust takes the security of personal data seriously. We have appropriate technical and organisational measures in place to protect your data against unauthorised access, loss, misuse or disclosure. Access to personal data is restricted to those who need it for legitimate business purposes.
8. How Long We Keep Your Data
- Unsuccessful applicants:
We will retain your personal data for six months following the conclusion of the recruitment or volunteering process, unless you choose to receive further opportunity alerts.
- Successful applicants:
Personal data collected during recruitment will be transferred to your employee or volunteer record and retained for the duration of your employment or volunteering relationship.
9. Your Rights
Under the UK GDPR, you have the right to:
- Access and obtain a copy of your personal data
- Have inaccurate or incomplete data corrected
- Request deletion or restriction of processing where appropriate
- Object to processing based on legitimate interests
- Request restriction of processing in certain circumstances
To exercise your rights, please contact the Data Protections Officer at: data.protection@kingstrust.org.uk
If you are dissatisfied with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO).
10. Provision of Data
You are under no statutory or contractual obligation to provide personal data during the recruitment or volunteering process. However, failure to provide the required information may mean we are unable to progress your application.
11. Automated Decision-Making
Recruitment and volunteering decisions are not made solely by automated means. While assessment or profiling tools may be used to support decision-making, all decisions involve meaningful human review.
12. Changes To This Notice
We may update this privacy notice from time to time. Any significant changes will be communicated to you as appropriate.