Fifty5Blue Privacy Notice for Candidates
Fifty5Blue is committed to protecting your privacy.
Introduction
This notice explains how we collect, use, store, and share your personal data when you apply for a role with us, apply to provide services to us, or otherwise express interest in future opportunities.
Data Collection and Use
As part of the recruitment process, Fifty5Blue collects and processes personal data about you. The types of personal data vary depending on your location and the role you apply for.
Personal data
Contact information
This includes name, postal address, personal phone number, personal email address, and emergency contact details.
Identification information
This includes date of birth, passport information, driver’s licence or government-issued ID number, vehicle licence plate number, national insurance number, nationality, immigration status, and right to work documentation.
Application information
This includes CV/resume and covering letter, status, current employer, job history, work and corporate title, education, qualifications, references, desired function, salary and work location, licenses, certificates, work experience, business travel information, information obtained from public searches, including social media, and information relating to outside business activities.
Assessment information
This includes assessments and interviews (including automated transcriptions of interviews, manual interview notes, and related scoring of answers by interviewers), aptitude test results and scores, screening and other information collected during the assessment process (including during phone or video calls, emails and other correspondence).
Equal opportunities-related data
Where permitted or required by local law, we collect and process personal data revealing your race or ethnic origin, religious or philosophical beliefs, or data concerning health, sexual orientation, gender identity, or social class/background.
Reasonable adjustments data
This includes information concerning a disability or similar health information that you provide to us so that we can make reasonable adjustments in the recruitment process to reduce barrirs faced by people with disabilities.
System and network information
This includes internet login information (including websites visited, applications downloaded, computer IP address, device identifiers and type of operating system and browser type used) as part of any application/candidate portal, information regarding communications sent or received via KantarFifty5Blue’s or third party systems, and building access monitoring (including controls for building access, security controls and CCTV footage).
Other information
This includes any other information you submit to us or that we request from you, including signatures, photographs, opinions, references, your location, and other personal data you provide.
We will ask you to provide the personal data described above as part of the application and recruitment process. If you fail to provide certain personal data when requested, and it is necessary for Fifty5Blue to consider that personal data for your application (for example, evidence of your qualifications or work history) or otherwise to comply with our legal or contractual obligations, Fifty5Blue will not be able to process your application or continue the recruitment process. In all other cases the provision of your personal data is voluntary.
Ways we collect your personal data
Directly from you
We collect most of the personal data from you directly. For example, you provide your personal data through Fifty5Blue’s websites, application portal, and from your CV. We also collect your personal data from communcations with you, or through interviews, meetings or other assessments.
Other sources
We also collect some personal data from other people, such as recruiters, agencies, referees, or other organisations (such as previous employers and education institutions), as well as publicly available sources (such as LinkedIn if you choose to connect us with your LinkedIn profile). Where relevant for your role and subject to local legal requirements, we also collect personal data from our background screening providers.
Purpose and Legal Basis
The table below describes the purposes for which Fifty5Blue processes your personal data as well as the legal basis for the use of your personal data.
| Purpose of Processing | Legal Basis |
|
|
|
|
|
|
|
|
|
|
|
|
Data Sharing
Fifty5Blue shares your personal data only where necessary to support our recruitment and hiring processes.
Sharing within the Fifty5Blue group
We share your personal data within the Fifty5Blue group where this is necessary to support our recruitment processes. This includes activities such as managing applications, assessing suitability for roles, conducting interviews, and coordinating with teams involved in the recruitment process.
We store and process your personal data in countries where Fifty5Blue operates. A full list of these countries is available on our website (https://www.fifty5blue.com/our-network).
Sharing With Service Providers
We share personal data with trusted third‑party service providers who support our recruitment activities. These may include providers that assist with:
- applicant tracking and recruitment systems
- background checks (where applicable and permitted by law)
- IT, security, and system hosting
- professional services such as legal, HR, or compliance support
These service providers act on our behalf and are required by contract to keep your personal data secure and confidential, and to use it only in line with our instructions.
International Transfers
Fifty5Blue is a global company headquartered in the United Kingdom.
We transfer personal data to other countries where Fifty5Blue companies or our trusted service providers are located. This can include countries with data protection laws different from those in your country.
Where we transfer personal data to another country, we take steps to protect it and follow applicable data protection laws. This includes using approved transfer mechanisms, such as standard contractual clauses, to ensure your personal data continues to be handled safely.
You can ask for more information about international transfers and the safeguards we use by contacting us using the details at the end of this notice.
Security Measures
We take steps to keep your personal data safe. This includes appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, alteration, or disclosure.
Our employees, contractors, and service providers are required to follow our policies and procedures on confidentiality, security, and privacy. We also contractually require third-party service providers who handle personal data to meet appropriate data security standards.
We have processes in place to identify and manage data security incidents. Where required by law, we will notify affected individuals and relevant regulators if a data breach occurs.
Children’s Data Collection
In certain limited circumstances, Fifty5Blue may collect and process personal data relating to children. For example, where individuals apply for internships, apprenticeships, work experience programmes, or other roles that are legally open to young people.
Where we process personal data about a child, we will:
- comply with all applicable data protection and employment laws
- obtain consent from a parent or guardian where required by law
- ensure that the information is handled with appropriate safeguards
- limit the data collected to what is necessary for the relevant application or programme
Parents or guardians may be asked to review this privacy notice and explain it to the child in a way they can understand.
Your Rights
Depending on where you live, you may have certain rights in relation to your personal data. These can include the right to:
- know whether we process your personal data, and how we use it;
- access your personal data and receive a copy of it;
- correct or update inaccurate or incomplete personal data;
- delete your personal data in certain circumstances;
- restrict our processing of your personal data;
- object to our processing of your personal data in certain situations;
- ask us to transfer (port) your personal data to another organisation;
- withdraw your consent where we rely on consent to process your personal data.
These rights are not available everywhere and may be limited by local laws. For example, we may not be able to fulfil your request if doing so would affect another person’s rights or if you ask us to delete information that we are required to keep to comply with the law.
Exercising your rights
If you would like to exercise any of your rights, please contact [email protected].
Complaints
If you have concerns about how we handle your personal data, please tell us so we can look into it. We’ll review your complaint and respond to you.If you have any unresolved data protection concerns and we are unable to resolve them, you have the right to complain to the data protection authority. You can do this in the country where you normally live, work, or where you believe the data protection issue has occurred.
Retention Period
If you are successful
We will retain your personal data only for as long as we need it for Fifty5Blue’s legitimate einterest in line with applicable law, for the purposes of the recruitment process and, once this is finished, for an appropriate period so that we can daeal with any lgal claims linked to the recruitment process. Recruitment records for successful candidates are generall kept for a maximum of 10 years. After this period, we will take steps to delete your personal data or hold it in a form that no longer identifies you. If you become a Fifty5Blue employee, relevant personal data you provide will become part of your personnel file and may be used later for the management of the employment relationship.
If you are not successful
We will retain your personal data with your permission for 2 years so we can keep you in mind for future recruitment processes. Otherwise, it will be deleted after 1 year.
Automated processing
In certain circumstances we shall carry out automated processing (including profiling) about you. However, no automated processing will result in any legal or similarly significant decisions being made about you. Any automated processing is used to assist a human (i.e. the human will critically review the automated processing before it is used).
If any automated decision made about you is legally or similarly significant and involves no human involvement we will, in advance, provide you with meaningful information about the logic involved, the significance of the decision and the envisaged consequences. You also have the right to obtain human intervention, express your own point of view, obtain an explanation of the decision and challenge the decision. If you have any questions about this, please contact us.
Use of aptitude tests
Some of our job applications involve the use of tests, often in the early stages of recruitment, such as psychometric tests, verbal reasoning, and numerical reasoning tests. This is considered a form of profiling, as we may analyse certain aspects of a candidate’s personality, behaviour, interests, and habits to help us in our review of their application. The score of any test that you take will be compared to the score obtained by other applicants in your peer group as part of the wider recruitment process. In some cases, these tests may be processed using artificial intelligence (AI). However, we will never make solely automated decisions about you. In such scenarios, we have implemented various human-in-the-loop safeguards throughout the assessment and scoring process to protect your rights.
In all cases of aptitude testing, we will provide you further information about the tests before you take them, such as what they measure and why that is relevant to your application, how they use your personal data, and what controls that we have in place to mitigate the risks of this technology. We will also provide you with details of any processing using AI tools that we or our suppliers carry out using your personal data.
The answers you submit in aptitude tests, and your test results, are considered your personal data and Fifty5Blue is the data controller and responsible party for protecting this data. Fifty5Blue relies on its legitimate interests to assess you in the recruitment process as a potential employer. Whilst we do not rely on your consent, you always have the right to raise an objection to Fifty5Blue about how we process your personal data, and we will carefully consider whether we have compelling grounds to process your personal data in this way. You will not be discriminated against for exercising this right.
Please note, where we use a third-party aptitude testing platform, they may ask you for additional sensitive personal data to help them ensure their testing is fair and accurate. It is entirely up to you as to whether you wish to provide this information. Fifty5Blue will not be informed who provides this, and it has no impact on your application. If you choose to voluntarily provide this to the testing platform, please note that third-party may be the independent controller of that data and will make their privacy notice, which sets out their lawful basis for processing the data, available to you before you complete the test.
You will also be given the option for reasonable adjustments where you suffer from a disability. We will make this option available to you before you take any aptitude test(s) and this will involve you disclosing information concerning your health, which is protected as sensitive personal data. As well as having a legitimate interest as described above, we also rely on our obligation to meet employment and social security and social protection laws as applicable, which includes our obligation to reduce barriers for disabled persons.
Use of Microsoft Copilot (AI)
If you’re invited to a job interview, our interviewers may use technology to transcribe the interview, producing a full text record of the conversation. The technology we use at Fifty5Blue is called Copilot and is supplied to Fifty5Blue by Microsoft, a technology company headquartered in the United States. Copilot is generally considered AI technology as, for example, it operates with a degree of autonomy. You will be given more information about Copilot as an AI system before your interview, where applicable.
After transcribing your interview, Copilot may then be used by the interviewer to organise and structure your answers to interview questions into a document used by the recruitment team to assess and reflect on the interview. Copilot does not score your interview answers or make any decision to hire you, reject you, or move you forward in the recruitment process. Copilot merely will instead organise the sections of the interview transcription into different parts of the review document for information purposes only, to make the recruitment and assessment process more efficient and accurate. All decisions will be made by human recruiters, with consideration as to the risks of AI and automated technology.
The interview transcriptions are considered your personal data and Fifty5Blue is the data controller and responsible party for protecting this data. Fifty5Blue relies on its legitimate interests to manage the interview process efficiently and accurately. Whilst we do not rely on your consent, you always have the right to raise an objection to Fifty5Blue using Copilot in this way and we will carefully consider whether we have compelling grounds to use it. You will not be discriminated against for exercising this right. You can also request copies of your transcription should you wish to see your personal data and consider its accuracy.
Additional Information for U.S. Residents
We have provided additional information for people living in the United States. This includes details about your privacy rights and how you can use them. Please see the Additional Information for U.S. Residents notice for more details.
Contact
Data Protection and Privacy team
If you have any questions or concerns about this notice, or if you wish to exercise your data protection rights, you can contact the Fifty5Blue Data Protection and Privacy team at [email protected].
Data Protection Officer
You can contact our Data Protection Officer at [email protected].
Last updated
February 2026