Applicant privacy notice

Who we are

All references to ‘we’, ‘us’ or ‘the company’ in this Privacy Notice refer to the following organisation:

Saloca Ltd, trading as Appointedd
Registered address:
Suite 2 Ground Floor
Orchard Brae House
30 Queensferry Road
Edinburgh
EH4 2HS

Postal address:
Suite 2 Ground Floor
Orchard Brae House
30 Queensferry Road
Edinburgh
EH4 2HS

📧 informationsecurity@appointedd.com

Our role in processing your personal data

When you submit a job application to us, we act as the data controller of the personal data processed in relation to your application. This means we are responsible for deciding how we collect, use and store information about you regarding your application.

Personal data processed as part of your application

Personal data we collect to assess your suitability

We will only process data related to your application. This includes:

  • Personal Identification Information: first name, last name, title, date of birth, photographic ID
  • Contact Information: home address, email address, phone numbers
  • Professional Information: employment history, qualifications, CV, cover letter, interview notes, test results
  • Any additional personal data shared during email communications

Personal data we collect to confirm your eligibility for employment

If your application proceeds toward employment, we are required to conduct right-to-work checks.

Right to Work Data includes:

  • Photographic identification
  • Evidence of nationality (e.g. passport)
  • Immigration status (e.g. visa, biometric permit, work documents)

Purposes and legal basis for processing

We process your data only when we have a lawful basis. The purposes and legal grounds are:

  • Purpose: Assessing suitability for the position
    • Data: Application File Data
    • Legal basis: Contract
  • Purpose: Implementation of pre-contractual measures
    • Data: Application File Data
    • Legal basis: Contract
  • Purpose: Verifying your right to work in the UK
    • Data: Right to Work Data
    • Legal basis: Legal obligation

If you do not provide required data, we may not be able to process your application.

You may object to processing based on legitimate interest. Whether your objection is upheld depends on a balance of interests.

What do we mean by “legal basis”?

We only process your data when the law allows us to. Legal bases include:

  • Consent: You’ve given explicit permission (can be withdrawn at any time)
  • Contract: We need the data to fulfil or enter into a contract
  • Legal Obligation: Required by law
  • Vital Interests: Necessary to protect life or safety
  • Public Task: Carried out in the public interest
  • Legitimate Interests: For valid business interests, unless overridden by your rights

Sources of your personal data

Most of the data comes directly from you. We may also collect information from:

  • Previous employers
  • Recruitment agencies
  • Reference providers

Who we share your personal data with

We share your data only if you consent or if permitted by law. We may use trusted service providers to manage:

  • Emails
  • Cloud storage
  • Video interviews
  • HR systems

All providers are under strict data protection agreements.

International data transfers

If we transfer your data outside the UK, we ensure protection by:

  • Relying on adequacy decisions (approved countries), or
  • Using appropriate safeguards (e.g. International Data Transfer Agreements)

How long we keep your personal data for

Your data will be deleted when:

  • The processing purpose no longer applies
  • You object to the processing
  • You withdraw your consent

Your data may be retained longer if:

  • Required by law
  • Needed to assert or defend legal claims
  • Subject to retention obligations

Unsuccessful applicants

Data will be deleted within 12 months of application conclusion.

Successful applicants

Please refer to the internal Employee Privacy Notice.

Your rights

Under GDPR, you have the right to:

  • Be informed about how your data is used
  • Access your personal data
  • Correct or update your data
  • Request data deletion
  • Object to processing
  • Request data portability

If you’ve given consent, you may withdraw it at any time without affecting previous processing.

📧 To exercise your rights: informationsecurity@appointedd.com
⏱️ We will respond within 1 month (or sooner).

Further information on your right to object

You may object to processing based on:

  • Public interest
  • Legitimate interest

If you object, we will stop processing unless we can show overriding legitimate grounds or legal necessity. No formalities are required.

How to contact our Data Protection Officer

GDPR Local Ltd
1st Floor Front Suite
27–29 North Street
Brighton
East Sussex, BN1 1EB

📧 contact@gdprlocal.com
📞 0177 221 7800

Complaints

If you are unhappy with how we process your data, please contact us first. You also have the right to file a complaint with the Information Commissioner’s Office (ICO):

By post:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF‍

‍
📧 casework@ico.org.uk
📞 +44 303 123 1113

Last updated on 19th March 2025