Recruitment Privacy Policy

Job applicants and work experience candidates

We are committed to maintaining the trust and confidence of everyone we come into contact with. Our Privacy Notice explains how we use any personal information that you provide to us as prospective employees of n2 Group. The information that we hold about you will only be used lawfully in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

How the law protects you

GDPR states that we are only able to process personal data if we have valid reasons to do so. The primary reasons we process your personal data as a job applicant or work experience candidate is to allow us to find out more about you during the recruitment process.

What information n2 Group may collect about you

  • Your name, address, and contact details
  • Details of your qualifications, skills, experience, and employment history
  • Information about your current level of remuneration
  • Whether or not you have a disability for which n2 Group needs to make reasonable adjustments for during the recruitment process
  • Information about your entitlement to work in the UK
  • Data from third parties, such as references supplied by former employers (only once a job offer has been made and with your express permission)

When and how n2 Group may collect information about you

n2 Group will collect information about you during the recruitment process or school/college/university allocation process, through such means as CV’s, passports, or other identity documents, or through interviews and other forms of assessment.

How we use the information about you

We will use this information to assess your suitability for the vacancy advertised and, where appropriate, for other current vacancies within n2 Group that match your skills, experience and qualifications. We will also use this information to comply with legal obligations (e.g., eligibility to work in the UK).

If your application is unsuccessful, or you withdraw from the recruitment process, we may invite you to join our Talent Pool so that we can consider you for future employment opportunities. We will only retain your information within our Talent Pool where you have provided your consent to do so.

The lawful basis under which we are processing data

n2 Group has a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing data from job applicants and work experience candidates allows us to manage the recruitment process, assess and confirm a candidate’s suitability for employment and decide to whom to offer a job.

If you choose to join our Talent Pool, we will process and retain your personal data on the basis of your consent. You may withdraw consent to remain in the Talent Pool at any time by contacting [email protected].

We may also need to process data from job applicants to respond to and defend against legal claims.

Sharing data with third parties

We will not share your data with third parties unless your application for employment is successful, and we make you an offer of employment. We will then share your data with former employers to obtain references for you. Once our offer to you has been accepted and a contract of employment signed our Staff Privacy Notice will apply. During the recruitment process your information may be shared internally with members of the HR Team and those involved in the recruitment process.

Access to your information and correction or deletion

You have the right to ask us for a summary of the data that we hold on you and we have a legal obligation to respond within 30 days to your request.

Our data retention time period

If your application is unsuccessful, n2 Group will hold your data on file for a period of 270 days from the end of the recruitment process. If you have been accepted for a period of work experience, n2 Group will hold your data on file for a period of 270 days from the end of the work experience period.

Where you have provided consent to join our Talent Pool, we may retain your information for up to two years from the date consent is provided so that we may contact you regarding future employment opportunities. You may withdraw your consent at any time, in which case your information will be removed from the Talent Pool and deleted in accordance with our retention policies.

Your data will then be deleted or destroyed. If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your personnel file and retained during your employment.

Changes to the Privacy Notice

We keep our Privacy Notice under regular review and as such it may be subject to change. We advise that you regularly check it, so you are aware of any changes. This Privacy Notice came into effect on 28 May 2018 and was last reviewed on 29 January 2026.

How to contact us

Please contact us if you have any questions about our Privacy Notice or the information we hold about you: by email (hradmin@n2group.com) with subject heading Attn: GDPR, or write to us at: GDPR, n2 Group (nAG Ltd), 30 St Giles, Oxford, OX1 8LE, UK.

Your rights

You have the right to: object to our use of your personal data, ask us to delete, remove or stop using it if there is no need for us to keep it. This is known as your right to be forgotten.

Where we process your personal data based on your consent to join our Talent Pool, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before consent was withdrawn.

Data breaches

In the event of a data breach, we shall ensure that our obligations under applicable data protection laws are complied with where necessary.

Your right to complain

If you would like to complain about the information or explanations contained within this Privacy Notice, please contact us using the methods outlined in the ‘How to contact us’ section above. GDPR legislation also gives you the right to complain to the Information Commissioners Office, the lead authority governing the application of GDPR in the UK: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, UK.

https://ico.org.uk/concerns/

Tel: +44 (0)303 123 1113