Candidate Privacy Notice

This notice explains what personal data ('information') we will hold about you, how we collect it, and how we will use and may share data about you during the application process. We are required to notify you of this information, under data protection legislation. Please ensure that you read this notice (sometimes referred to as a 'privacy notice') and any other similar notice we may provide to you from time to time when we collect or process personal data about you.

Krystal Hosting Ltd trading as Krystal ('Company') is a 'controller' of personal data and gathers and uses certain data about you. This data is also used by our group companies, namely Dial 9 Communications Ltd (our 'group companies') and so, in this notice, references to 'we' or 'us' mean the Company and our group companies.

We will comply with data protection law and principles, which means that your data will be:

• Used lawfully, fairly and in a transparent way.
• Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
• Relevant to the purposes we have told you about and limited only to those purposes.
• Accurate and kept up to date.
• Kept only as long as necessary for the purposes we have told you about.
• Kept securely.

We may collect the following data up to and including the shortlisting stage of the recruitment process:

• Your name and contact details (ie address, home and personal mobile phone numbers, personal email address)
• Details of your qualifications, experience, employment history (including job titles, salary and working hours) and interests
• Your racial or ethnic origin, age, gender identity, sexual orientation, religious or similar beliefs
• Data relating to your health
• Details of your referees

We may collect the following data after the shortlisting stage, and before making a final decision to recruit:

• Data about your previous academic and/or employment history
• Data regarding your academic and professional qualifications
• Your nationality and immigration status and data from related documents*
• A copy of your driving licence

• You, the candidate
• 3rd party job search websites and social media
• Directly from our website https://krystal.io
• Recruitment agencies, if used within the application process
• Your named referees
• Your personal or business website, where applicable

We will use the personal information we collect about you to:

• Assess your skills, qualifications, and suitability for the role
• Carry out background and reference checks, where applicable
• Communicate with you about the recruitment process
• Keep records related to our hiring processes
• Comply with legal or regulatory requirements

We will use your particularly sensitive personal information in the following ways:

• We will use information about your disability status to consider whether we need to provide appropriate adjustments during the recruitment process
• We will use information about your race or national or ethnic origin, religious, philosophical or moral beliefs, or your sexual life or sexual orientation, to ensure meaningful equal opportunity monitoring and reporting

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal information to those employees, agents, contractors and other third parties who have a business need-to-know.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

We will retain your personal information for a period of 12 months after we have communicated our decision. If you submit a speculative application, we will retain your personal information for 12 months from the date of your application.

If your application is successful, we will keep only the recruitment data that is necessary in relation to your employment.

We hope that our data privacy manager, Dave Kimberley, can resolve any query or concern you raise about our use of your data. Our data privacy manager can be contacted via email at legal@krystal.io.

If we cannot resolve your query, you can contact the Information Commissioner at https://ico.org.uk/make-a-complaint/ or telephone 0303 123 1113.

By submitting your application to us you agree to the terms of this Candidate Privacy Notice.