Home • Careers

Recruitment Privacy Notice

Introduction

Boring Money (“we” “our” “us”) is a data controller and responsible for deciding how we collect, store and process personal data on individuals we interact with. This also includes any candidates who apply to any of our job vacancies.

This recruitment privacy notice is designed to ensure any job applicants are aware of how and why personal data will be used for recruitment purposes, for how long it will be retained for and where any recruitment data may be shared to name as a few examples.

We have designed this recruitment privacy notice in accordance with requirements under the UK GDPR. This notice will be reviewed and updated where changes in legislation may occur.

You can contact our head office using the details below.

Post:

7 Stratford Place
London
W1C 1AY
United Kingdom

Email: info@boringmoney.co.uk

We have also appointed an external data protection officer (DPO) and their details are as follows:

Evalian Limited

West Lodge
Leylands Business Park
Colden Common
Hampshire
SO21 1TH
United Kingdom

Email: dpo@evalian.co.uk
Phone: +44 (0)333 050 0111
Website: www.evalian.co.uk

Lawful basis

The lawful basis for our recruitment process is contractual obligation, to help us enter into or take the necessary steps required to enter into employment contracts.

Personal data collected

Boring Money and Boring Money Visible: Our job vacancies are advertised on websites such as Indeed or LinkedIn. Each job application will require applicants to send through the following personal data:

Full name
Email address
Telephone number
Position applied for
Cover letter
CV information

Boring Money Business: Our job vacancies are posted on our website by clicking on “current vacancies” under “About us & Careers”. When you apply for a job role listed candidates will need to send CVs and cover letters to jobs@boringmoney.co.uk. No direct applications are made via the Boring Money Business website.

We may need to process special category personal data (e.g., disability information) as part of the recruitment process, which we have detailed below.

How we obtain personal data

During our recruitment process we may obtain personal data about candidates through various means, which include (but is not limited to):

Directly from the candidate
Any applicable third-party recruitment agencies
Specified referees

How is personal data used?

Personal data processed as part of the recruitment process can include the following activities:

To assess your skills, qualifications, and suitability for the role
Carry out reference checks, where applicable
Communicate with you about the recruitment process
Keep records related to our hiring processes
Comply with legal or regulatory requirements
If successful offer suitable candidates’ contracts of employment

If you fail to provide information when requested, which is necessary for us to consider your application (such as evidence of qualifications or work history) we will not be able to process your application successfully.

Special category personal data

As mentioned above we may need to process special category personal data to ensure a fair recruitment process. If a candidate informs us that any adjustments are needed (e.g., wheelchair user or visually impaired) we will be sure to document this and keep it safe and secure, and made available to those who need access to this data. This data will also be held for as long as necessary as part of our data retention guidelines.

Criminal conviction and offences data

Positions within our company will not require a criminal background check. If this was to change we will be sure to update our policies and notices where needed.

Data sharing

As mentioned above personal data of job applicants can be shared between different functions and departments within our head office. We do this to ensure the recruitment process has been carried out in accordance with our recruitment policies and the appropriate files can be created and maintained. We do not share recruitment data with any third parties apart from recruitment agencies as mentioned above and as per our privacy notice.

International data transfers

We do not transfer any recruitment data outside the UK to other companies or individuals based in the EEA (European Economic Area) or globally.

Automated decision-making and profiling

We do not conduct any automated decision making and profiling as part of our recruitment process.

Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

If we become aware of any loss, misuse, alteration of personal data we will work closely with our IT team, DPO and other parties as necessary to investigate the incident at hand. We have put into place the relevant procedure and policies in place to investigate, mitigate and report (when needed to relevant parties) such instances.

Data retention

We retain recruitment data for as long as needed as part of our recruitment process. If you have not been successful, we will typically retain this data for a period of 6 months so we can show and evidence a fair recruitment process and there is no discrimination on any protected characteristics/grounds. After this period has ended all relevant data will be securely destroyed.

Successful candidates will have their recruitment data added to their HR file which is maintained and held by our head office.

Data protection rights

If you are based in the UK, you have several Rights to how an organisation processes your personal data. The Rights are as follows:

Right to be informed
Right to access data
Right to rectification
Right to erasure
Right to restrict processing
Right to objection
Right to portability
Right not to subject to automated decision making and profiling

If you would like to exercise any of the above Rights, you can do so by sending us a written request to our email address mentioned below.

Concerns and complaints

We understand you may have concerns and complaints to this notice and any aspects to how we process personal data. If you would like to contact us directly to talk to us about a concern or to raise a complaint, you can do so by using our contact details above.

You can also submit a complaint directly to the Information Commissioners Office (the ICO), the UK supervisory authority for data protection in the UK, via this link https://ico.org.uk/make-a-complaint/.

Review and updates

We will review this notice and make changes to it from time to time. We recommend that you check this notice to see where changes have been made and to ensure you are able to review updated information at all times.

Holly and the team have worked in the finance industry for many years but we are not regulated to give you personal financial advice. For every story on this website about a good investment, or something which went up by 10% or made someone £200, we could also share a story about a bad investment, something which fell in value or lost someone £200. We aim to provide general information and pointers – and btw we are totally agnostic about which providers you might pick – but if you have complex affairs, want personalised advice or need specific recommendations, please look at advice pages and see if regulated digital or traditional financial advice would be the best solution for your needs.