Privacy Policy


Our recruitment privacy policy tells you how we collect and process data about you if you are applying for work with us and/or if you are joining our Talent Pool. If you have any comments on this policy, please email them to [email protected].

Full Fat Things is a “data controller”, which means we are responsible for deciding how we hold and use personal information about you.

Purpose and lawful basis for processing

Our purpose for processing this information is to assess your suitability for a role you have applied for and/or your inclusion in our talent pool, and to help us develop and improve our recruitment process.

Job applicants

The lawful basis we rely on for processing your personal data for job applications is article 6(1)(b) of the UK GDPR, which relates to processing necessary to perform a contract or to take steps at your request, before entering a contract.

If you are successful with your application, your personal data will form part of your employment record. There is a separate privacy notice to support how Employees information is held, which will be shared at the appropriate time

If your application data is subsequently added to our Talent Pool, that data will be processed on the basis of your consent under Article 6(1)(a) of the UK GDPR.

Talent Pool candidates 

From time to time Full Fat Things may source candidates from publicly available information, or candidate databases to which you have submitted your details. 

The lawful basis we rely on for your inclusion in our Talent Pool is article 6(1)(f) of the UK GDPR, which relates to the legitimate interests pursued by Full Fat Things in developing a talent pool for current or future positions. If you submit your details to our Talent Pool, that data will be processed on the basis of your consent under Article 6(1)(a) of the UK GDPR. 

If you provide us with any information about reasonable adjustments you require under the Equality Act 2010 the lawful basis we rely on for processing this information is article 6(1)(c) to comply with our legal obligations under the Act.  

The lawful basis we rely on to process any information you provide as part of your application which is special category data, such as health, religious or ethnicity information is article 9(2)(b) of the UK GDPR, which relates to our obligations in employment and the safeguarding of your fundamental rights. And Schedule 1 part 1(1) of the DPA2018 which again relates to processing for employment purposes.

The information we hold

Types of information

Full Fat Things may collect the following information of Talent Pool candidates:

As part of the job application process, Full Fat Things may collect the following information:

You don’t have to provide what we ask for but it may affect your application if you don’t. Our operations team will have access to all this information.

If we make a conditional offer of employment, we’ll ask you for information so that we can carry out pre-employment checks. You may therefore be asked to provide:

If we make a final offer, we’ll also ask you for the following:

You may also be asked to provide equal opportunities information. This is not mandatory – if you don’t provide it, it won’t affect your application. We won’t make the information available to any staff outside our Operations team in a way that can identify you.

How the information is collected

We collect personal information about candidates from the following sources:

How we use the information

We use a Talent Pool within our Applicant Tracking System to retain the details of candidates that may be interested in applying to current or future roles. We do this so that we are able to make contact regarding relevant jobs.

We’ll use the information collated during the recruitment process to progress your application with a view to offering you an employment contract with us, or to fulfil legal or regulatory requirements if necessary.

We’ll use the contact details you give us to contact you to progress your application. We may also contact you to request your feedback about our recruitment process. We’ll use the other information you provide to assess your suitability for the role.

Sensitive personal information

We will use information about your disability status to consider whether we need to provide appropriate adjustments during the recruitment process.

We will use information about your race or national or ethnic origin, religious, philosophical or moral beliefs, or your sexual life or sexual orientation, to ensure meaningful equal opportunity monitoring and reporting.

Information sharing

We will only share your personal information with a third party if it is necessary for the purpose of the recruitment process. They are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

Who we may share it with

We use several processors to provide elements of our recruitment service for us.

Data security

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country.

We do not transfer personal data outside of the UK, European Union or European Economic Area unless we have security measures and approved contracts in place to protect your personal data.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

How long the information is kept for


If you have applied for a role and were unsuccessful, we will usually retain a copy of your application for a period of 6 months following the completion of that recruitment campaign.

We retain your personal information for that period so that we can show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way.

We may ask if you would like your details retained in our Talent Pool. If you say yes, we will retain your information as indicated below.

Talent Pool

We will retain your personal information in our talent pool for 36 months unless either

  1. we are satisfied that we will not consider recruiting you at any point in the foreseeable future

  2. you ask us to remove your personal information from the talent pool

  3. you have told us that we may store the data for a longer period of time

  4. you are taking part in an application process, after we will retain your information as indicated for Applications.

You can request amendments or the removal of your data from the Talent Pool at any time by contacting [email protected].

How we make decisions about recruitment

Final recruitment decisions are made by hiring managers and members of our Operations team. We take account of all the information gathered during the application process.

Any online testing is marked and a result is generated automatically. However, if you wish to challenge the mark you have received, the result can be checked manually.

Your rights

Under certain circumstances, by law you have the right to:

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact us at [email protected].