Careers

Applicant Privacy Notice

Bandicoot ("we") is the data controller for the personal information you give us when you apply
for a role with us. This notice explains what we do with it.

What we collect

- Your name, email address, telephone number and postcode.
- Your CV and any covering message or supporting document you send us.
- Notes and assessments we make while considering your application, including an approximate
travel distance from your postcode to our office.
- The outcome of your application, and the reason for it.

Why we use it, and our lawful basis

We use your information to assess your suitability for the role, to contact you about your
application, and to keep a record of the decision we made and why.

Our lawful basis is legitimate interests — specifically our interest in filling a vacancy with
a suitable candidate, and in being able to show that we assessed applicants fairly and
consistently. We have considered your interests and we think this is reasonable because you have
chosen to apply, we only use what you send us and what you would expect us to use it for, and we
delete it on a fixed timetable.

Where we ask you a question directly — for example whether you can drive, or whether you have use
of a vehicle — we use your answer only for the role requirement it relates to.

Automated assessment, and the human decision

We use software to read your CV and pull out the passages relevant to each requirement of the role.
That software may also suggest a mark against each requirement.

Those marks are guidance only. Every one of them is shown next to the exact words from your CV
that it came from, and no decision about your application is made by software. A person reads
the evidence and decides. There is no automatic rejection, no ranking produced by software, and no
score that decides an outcome.

If you want to know more about how your application was assessed, ask us and we will tell you.

Who sees it

Your application is seen only by the people at Bandicoot involved in this recruitment. We do not
sell it, we do not use it for marketing, and we do not share it with anyone outside Bandicoot
except as described in the next section, or where we are required to by law.

Where it is kept, and the one thing we send out

Your CV, your name and your contact details are held on our own systems, in the United Kingdom,
with access restricted to the people named above. Your CV never leaves our systems.

To work out roughly how far you would travel to our office, we send your postcode on its own to
two mapping services — [postcodes.io](https://postcodes.io) to find the location of the postcode,
and [OpenRouteService](https://openrouteservice.org) to measure the driving distance. We send the
postcode and nothing else: no name, no contact details, no part of your CV, and nothing that
identifies you. We do this **once**, and store the resulting distance, so it is not sent again
each time someone looks at your application.

How long we keep it

We keep your application for six months after the vacancy closes, and then we delete your CV
and remove your name and contact details from our records. We keep an anonymous record that the
application happened and what we decided, so that we can show the process was fair — that record
cannot be traced back to you.

If you would rather we deleted everything sooner, ask us and we will.

Your rights

You can ask us to show you the information we hold about you, to correct it if it is wrong, to
delete it, or to restrict what we do with it. You can also object to us processing it at all —
tell us and we will stop unless we have a compelling reason not to, which we would explain.

To do any of that, or if you are unhappy with how we have handled your information, contact us at
hr@bandicoot.co.uk.

You also have the right to complain to the Information Commissioner's Office at ico.org.uk.