Recruitment Privacy Policy

Lily’s Kitchen is committed to protecting the privacy of our job applicants’ personal data. The purpose of this Notice is to explain how we handle personal data about our job applicants and to explain the rights that they have under data protection law. In this Notice, we refer to this type of information as “Recruitment Data”.

This Notice applies to applications submitted via the careers section of our website, the ‘work with lily’ email address and third parties, such as recruitment agencies and job boards. It also applies to applications submitted via other means, such as by post and email.

“Lily’s Kitchen” means Lily’s Kitchen Limited and any of its subsidiaries and affiliates, as existing from time to time. Lily’s Kitchen is referred to in this Notice as “we”, “us” or “our”.

We observe our Data Protection Principles when we collect, store and otherwise process Recruitment Data. Our Data Protection Principles are as follows:

Fairness and Transparency: Give people information about how Lily’s processes their personal data.

Lawful Processing: Make sure we always have a good, lawful reason to process people’s personal data.

Purpose Limitation: Only collect personal data for a specific purpose. If we want to reuse the personal data for a new purpose, we must make sure the new purpose is compatible with the original purpose.

Data Minimisation: Only process as much personal data as we need, and no more.

Accuracy: Keep personal data accurate, complete and up-to-date.

Retention: Only keep personal data for as long as we need it. If we don’t need the personal data anymore, we must delete it or anonymise it.

Security: Protect personal data from getting lost or stolen. Make sure our service providers protect our personal data as well.

Individual Rights: Allow individuals the right to access, correct or erase their personal data, or object to it being used for certain purposes.


We will generally only collect Recruitment Data in the recruitment process that is necessary to assess you for the position for which you have applied. This may include the following categories of data:

• Application information: This information will generally tell us who you are and help build a picture of your capabilities and suitability for certain positions. This type of information may include your name, contact information, current company, information contained in your CV/resume (e.g. professional qualifications, previous employment history, place of residence, current base compensation, additional bonuses and/or commission and personal interests and experiences), information contained in your social media accounts or personal websites or accounts (e.g. LinkedIn or Twitter), information about the type of work and projects you have been involved with and any other information you may wish to provide to us as part of your application.
• Recruitment process information: This is information collected as a result of the recruitment process, such as your performance at interviews, assessment tasks, psychometric testing and information provided by your referees.
• Future opportunities information: This is information collected in order to keep in touch with you about future job opportunities at Lily’s Kitchen, such as your name, email, LinkedIn profile, location, field of expertise and the kind of role you are interested in.
• Careers section on our website information: This is information related to your use of the careers section of our website, for example your IP address. This information may be collected using cookies and similar technology. For more information about how we use cookies and similar technologies please see our Online Privacy Notice. Personal data about criminal convictions or medical information will only be sought where permitted by applicable law.

We generally receive Recruitment Data either (a) directly from you (for instance when you provide information as part of your application or during the recruitment process) or (b) from third parties (for instance from recruitment agencies). We will indicate where the information we have requested is mandatory or optional. We will also explain the consequences should you decide not to provide information which we have indicated is mandatory. In some circumstances this may mean we are unable to process your application.


The main purposes for which we use your Recruitment Data include:

• Supporting and Processing your Application, for example, so we can assess your ability to meet the job specification, in order to shortlist applicants and to verify references and professional qualifications provided by applicants.
• Improving our Application Process, for example to ensure that our careers website is user-friendly and contains appropriate and helpful information.
• Security Management, for example to ensure the security of Lily’s Kitchen, assets, information, employees and other personnel.
• Legal and Regulatory Compliance, for example to ensure compliance with health & safety requirements and other legal or fiscal obligations, or in connection with litigation or an internal investigation or audit and to ensure compliance with our policies regarding anti-money laundering, bribery and corruption, as well as equal opportunities monitoring.
• Ensuring that we are living up to our values.

We may verify the Recruitment Data you provide during the recruitment process and/or collect personal data about you from third party sources to assist with our “Pre-Employment Checks”. If this occurs:

You will be told in advance which aspects of your Recruitment Data will be verified including an explanation of how the Pre-Employment Checks will be carried out; and Information about criminal convictions (if collected) or medical information will only be collected through official authorised sources and in accordance with applicable law.

Where it is necessary and appropriate for the role you have applied for, we may also require you to undertake drug and alcohol testing prior to commencing your employment with us.

We will only process your Recruitment Data where we have a legal basis for doing so. Generally, we will be processing it to help us to decide whether to enter into a contract of employment with you. At other times, we will be processing your Recruitment Data because you have consented to us doing so. In which case you can withdraw such consent at any point.

We may also process your Recruitment Data to comply with our legal obligations or because it is in our legitimate business interests to do so (for example, where it is necessary to understand our applicants in sufficient detail so we can operate an effective recruitment process).


(a) Within Lily’s Kitchen

We restrict access to Recruitment Data to people within our group of companies who have a “need to know” such information. For example, certain individuals within Lily’s Kitchen will have access to your Recruitment Data in order to process your application and manage the recruitment process (this may include individuals in our People team, individuals to whom you would report if your application is successful, individuals who would be a key stakeholder if you were successful, or other individuals you may meet as part of a more informal meet & greet process).

(b) Outside Lily’s Kitchen

We share Recruitment Data with authorised third party service providers to conduct and manage the recruitment process. For example, we may share your Recruitment Data with such service providers in order to conduct psychometric testing or screening and verification of your application and the information you have provided to us. This includes verifying academic and professional qualifications. Generally, we will only disclose your Recruitment Data to our suppliers and other third parties in the following circumstances:

when required to do so by law; in response to a legitimate request for assistance by the police or other law enforcement agency; and/or to seek legal advice from our external lawyers or in connection with litigation with a third party.


We keep your Recruitment Data in accordance with our internal retention policies and procedures. Typically, if you are unsuccessful in your application with us (or if you reject the position), we will keep your Recruitment Data for 6 months unless we have your permission to keep your Recruitment Data on file so that we may contact you again if another suitable position arises – in this situation we will retain such Recruitment Data for 1 year.


You may have the right to request access to, rectification or erasure of, the Recruitment Data we hold about you. You may also have the right to object to or restrict certain types of processing of your Recruitment Data and request to receive a machine-readable copy of the Recruitment Data you have provided to us.

If you notice an error in your application that you would like to correct, please contact us using the contact information below.

Any request to exercise one of these rights will be assessed by us on a case by case basis. There may be circumstances in which we are not legally required to comply with your request or because of relevant legal exemptions provided for in applicable data protection legislation.


Please contact us the HR Director if you would like to find out more about any matters relating to this Notice.

If you have concerns about the way in which we have handled your Recruitment Data you should contact the HR Director in the first instance. If you are still dissatisfied, you have the right to complain to your Data Protection Authority. In the UK, the Data Protection Authority is the Information Commissioner’s Office.


We may change this Notice from time to time in order to reflect changes in the law, regulatory guidance or our data privacy practices in compliance with the law. When this happens and where required by law, we will provide you with a new or an updated notice detailing how the use of your Recruitment Data is changing and, if necessary, obtain your consent for the further processing.

May 2020