Recruitment Privacy Notice

Last updated: 27 July 2026

Introduction

Benivo Limited ("Benivo", "we", "us" or "our") is committed to protecting the privacy and personal data of candidates who apply for roles with us or otherwise participate in our recruitment process.

Benivo Limited is registered in England and Wales under company number 07268894. Our registered office is:

167-169 Great Portland Street
5th Floor
London W1W 5PF
United Kingdom

For the purposes of applicable data protection law, including the UK GDPR and Data Protection Act 2018, Benivo Limited is the data controller for the personal data described in this Recruitment Privacy Notice.

This notice explains what personal data we collect during recruitment, why we use it, who we share it with, how long we keep it and your rights.

Information we collect

Depending on the role and recruitment process, we may collect information including:

your name, contact details and location;
CV, employment history, education, qualifications, skills and experience;
information you provide in your application, interviews, assessments and correspondence with us;
salary expectations, notice period, work eligibility and availability;
interview notes and feedback;
references and information provided by referees;
publicly available professional information, such as information on LinkedIn or other professional websites;
information provided by recruitment agencies or other third parties;
information needed to confirm your right to work or carry out appropriate background checks, where relevant; and
technical information generated when you use our recruitment systems.

Where necessary and permitted by law, we may also process special category personal data, for example information relating to health or disability where you request reasonable adjustments during the recruitment process, or diversity information that you choose to provide.

We will only process criminal conviction information where this is necessary, appropriate for the role and permitted by applicable law.

How we collect your information

We may collect personal data:

directly from you;
through our recruitment platform, Workable;
from recruitment agencies or professional networks;
from referees;
from publicly available professional sources such as LinkedIn; and
through interviews, assessments and other recruitment activities.

We use Workable to support our recruitment process. Workable processes candidate information on our behalf in accordance with our instructions and applicable data protection requirements.

Why we use your information

We may use candidate personal data to:

assess your suitability for a role;
manage and progress your application;
communicate with you during the recruitment process;
arrange and conduct interviews and assessments;
verify information you provide;
obtain references and, where appropriate, carry out relevant background or right-to-work checks;
consider you for other suitable roles;
manage and improve our recruitment processes;
maintain appropriate recruitment records;
meet legal and regulatory requirements; and
establish, exercise or defend legal claims.

Our lawful basis for processing

We generally process candidate personal data because:

it is necessary to take steps at your request before potentially entering into an employment or other contract;
we have legitimate interests in recruiting suitable people, managing our recruitment processes and protecting our business;
processing is necessary to comply with a legal obligation; or
another lawful basis applies in the circumstances.

Where we process special category personal data, we will only do so where an additional condition under applicable data protection law applies.

Where we rely on your consent for a specific activity, we will request that consent separately and you may withdraw it at any time.

Automated processing and AI

Benivo may use technology, including functionality provided through recruitment systems, to help organise, search, analyse or prioritise candidate information.

Technology may assist our recruitment team, but Benivo does not make final hiring decisions solely through automated processing without appropriate human involvement.

Where automated processing is used in a way that produces legal or similarly significant effects, we will comply with the requirements and safeguards applicable under relevant data protection law.

Who has access to your information

Candidate personal data may be accessed by people who reasonably need it for the recruitment process, including:

members of Benivo's People and recruitment teams;
hiring managers and relevant interviewers;
senior management where appropriate;
Benivo group personnel involved in recruitment;
recruitment agencies and other recruitment service providers;
Workable and other technology providers supporting our recruitment process;
professional advisers; and
authorities or other third parties where disclosure is required by law.

Access is limited according to business need and appropriate confidentiality and security requirements apply.

We do not sell candidate personal data.

International transfers

Benivo operates internationally and some candidate personal data may be transferred to or accessed from countries outside the United Kingdom or European Economic Area, including through recruitment technology providers or Benivo personnel involved in recruitment.

Where personal data is transferred internationally, we use appropriate safeguards where required by applicable law.

For UK personal data, these may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another legally recognised transfer mechanism.

For EEA personal data, these may include an adequacy decision, the European Commission's Standard Contractual Clauses or another permitted transfer mechanism.

We also apply appropriate contractual, technical and organisational safeguards to protect personal data.

How we protect your information

Benivo uses appropriate technical and organisational measures designed to protect candidate personal data against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure.

Access to recruitment data is limited to authorised personnel and service providers with a legitimate need to access it.

Benivo maintains an information security management programme and is independently certified to ISO/IEC 27001:2022.

How long we keep your information

We may retain candidate personal data for up to 3 years after the end of the relevant recruitment process.

We retain this information so that we can maintain appropriate recruitment records, consider candidates for future opportunities where appropriate, respond to questions or complaints and establish or defend legal claims.

Some information may be retained for a different period where required by law or where another legitimate reason applies.

If you become a Benivo employee, relevant information collected during recruitment may become part of your employee record and will then be retained in accordance with our employee data retention requirements.

We periodically review the personal data we retain and delete or anonymise information when it is no longer required.

Your data protection rights

Depending on your location and the circumstances, you may have rights to:

request access to personal data we hold about you;
request correction of inaccurate or incomplete information;
request deletion of your personal data;
request restriction of processing;
object to processing based on legitimate interests;
receive certain personal data in a portable format;
withdraw consent where processing is based on consent; and
raise a complaint about how your personal data is being handled.

These rights are subject to conditions and exceptions under applicable law.

To exercise your rights, contact privacy@benivo.com. We may request information necessary to confirm your identity before responding.

Data protection complaints

If you have a concern or complaint about how Benivo processes your personal data, please contact privacy@benivo.com.

We will acknowledge a data protection complaint within 30 days, investigate it appropriately and without undue delay, and communicate the outcome to you. We may request further information where reasonably necessary to investigate your complaint.

If you are in the United Kingdom and are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office.

If you are in the European Economic Area, you may lodge a complaint with the relevant data protection supervisory authority in the country where you live, work or believe an infringement has occurred.

Changes to this notice

We may update this Recruitment Privacy Notice from time to time to reflect changes to our recruitment practices, technology or applicable law.

We will publish the current version on this page and update the "Last updated" date.

Contact us

For questions, requests or complaints about this Recruitment Privacy Notice or Benivo's use of your personal data, contact:

privacy@benivo.com

Benivo Limited
167-169 Great Portland Street
5th Floor
London W1W 5PF
United Kingdom