Privacy Policy

We are committed to protecting and respecting your privacy. This Privacy Notice sets out the basis on which the personal data collected from you, or that you provide to us, will be processed by us in connection with your use of our website, correspondence with us, business dealings, visiting our offices or our recruitment application and interview processes.

For the purpose of data protection law the Data Controller will be an entity associated with the Global Brand (“Legend”, “we”, “us”).

If you have any questions about this privacy notice, please email us at legal@l1.com.

We reserve the right to amend this privacy notice from time to time without notice to you – therefore we recommend that you periodically check it to understand how we are processing your data.

Who does this document apply to?

This policy applies to Legend’s use of your personal data as a data controller in the following circumstances:

When you use this website.
When you contact us.
When you apply for a job with us.
When you work for a third-party organisation who we deal with.
If you are a visitor to one of our offices as a guest.
If you take part in a research/marketing survey for us.
If you undertake any work experience with us.

This policy doesn’t apply to information about our employees.

Data protection principles

We comply with applicable data protection law and principles, which means that your data will be:

Used lawfully, fairly and in a transparent way.
Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
Relevant to the purposes we have told you about and limited only to those purposes.
Accurate and kept up to date.
Kept only as long as necessary for the purposes we have told you about.
Kept securely.

We will also keep appropriate records of processing to comply with the accountability principle under data protection law.

How we obtain your personal data

Primarily, we obtain personal data directly from you – either through applying for a role with us, your use of this website, when you contact us or otherwise deal with Legend. Sometimes we receive information about you through third parties, but only during our course of usual business activities, for example where we use a recruitment agent or where a supplier has recommended a company that you might work for.

The kind of information we hold about you

The types of personal data that we hold about you will depend on the way that we have received your data. For example:

Website users – we may process online identifiers to understand how our website is being used. More details on this can be found in the section on cookies, below.
Where you contact us – we may process your name, contact details, any other information about yourself that you provide in your communications.
When you apply for a job with us – we will collect your name, contact details and other relevant information regarding your application. More details on this can be found in the section on recruitment, below.
When you visit one of our offices – we may process your name, contact details, ID, CCTV footage of you, Wi-Fi usage information.

Please note that these are examples only and not intended to be an exhaustive list.

How we will use information about you

We will only use the personal information we collect about you to carry out our usual business activities, including but not limited to:

internal reporting and record-keeping, to help manage and improve our operations.
working with third-party organisations, where you might work for such organisation.
deciding whether to appoint you to a role that you have applied for.
complying with health and safety legislation, where we have a legal obligation to do so.

Our lawful basis for processing information about you

Legitimate interests

Processing your personal data may be necessary for us to carry out our usual business activities, such as contacting you about an email you have sent us, recruiting new employees, managing safety and security or when we are contacting new suppliers, IT companies, etc.

Performance of a contract

Where we have a contract with you or an organisation that you represent/work for, then we may process your personal data to carry out our contractual obligations.

Compliance with a legal obligation

We may also process your personal data if we are subject to a legal obligation imposed on us, in order to comply with this obligation.

Consent

Where we use non-essential cookies on our website, we only do so if you have provided your consent prior to their use. More information can be found in the section on cookies, below.
Where we make recordings of interviews as part of your application process, we only do so if you have provided your consent prior to the recording being made.

Special category personal data

Special category personal data is data relating to racial or ethnic origin, political opinions, religious and philosophical beliefs, trade union membership, health data, biometric data or sexual orientation.

If you are applying for a role with Legend, we may collect, store and use special category personal data from you as part of your application. Please see the section on recruitment, below, for more information.

It is otherwise unlikely that we will process any special category personal data about you. If we do, then we will only process such data after receiving your explicit consent or, when we cannot get your consent, where processing is necessary to protect your vital interests. For example, if we need to process your health data due to a medical emergency and you are incapable of giving your consent.

Information about criminal convictions

We do not envisage that we will process information about criminal convictions.

Automated decision-making

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.

Data sharing

Why might you share my personal information with third parties?

We will only share your personal information with third parties in accordance with our legal basis for processing your personal data. For example, where we use third parties to help support us to carry out our usual business activities or where you have provided us with your consent to do so. We may also share your personal information with third parties where we have a legal obligation to do so.

All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

We use Lever, an online software product provided by Employ, Inc., to assist with our recruitment process. We use Lever to process personal information as a data processor on our behalf. Lever is only entitled to process your personal data in accordance with our instructions.

If you are applying for role with Legend, Legend shares personal information of candidates with its associated entities within the brand and with the relevant employer of the role that a candidate has applied for, in order to evaluate appropriate candidates for available positions. Legend will remain responsible for personal data that is processed by each entity.

Recruitment processing

Information we collect from you

Where you apply for an opportunity posted by us, these Privacy Notice provisions will apply to our processing of your personal information.

We collect and process some or all of the following types of information from you:

Information that you provide when you apply for a role. This includes information provided through an online application, via email, in person at interviews and/or by any other method.
In particular, we process personal details such as name, email address, address, date of birth, qualifications, experience and any information relating to your employment history, skills and experience that you provide to us.
Any information you provide as part of any interviews conducted, including any recordings.
When you contact us, we will keep a record of that correspondence.
Details of your visits to our careers website including, but not limited to, traffic data, location data and other communication data, the site that referred you to our careers website and the resources that you access.

Special category personal data

If you are applying for a role with Legend, we may collect, store and use special category personal data from you, such as:

any health information that we may need to make reasonable accessibility adjustments during your recruitment process; or
any personal data revealing your race or ethnic origin and sexual orientation to ensure meaningful equal opportunity monitoring and reporting.

Please note that if you provide such information as part of our equal opportunity monitoring questions (which are completely optional), your responses will not be stored or linked with the rest of your candidate data. As such, any such special category data is provided on an anonymous basis.

We do not envisage that we will process information about criminal convictions.

Information we collect from other sources

Our third party recruitment software provider, Lever, provides us with the facility to link the data you provide to us with other publicly available information about you that you have published on the Internet – this may include sources such as LinkedIn and other social media profiles.

Lever also enables us to search various databases, which may include your personal data, to find possible candidates to fill our job openings. Where we find you in this way we will obtain your personal data from these sources.

How we will use your information

When you apply for a role at Legend, your application data will be processed by the relevant employer of the role that you have applied for and any associated entities within the Legend brand, as required, in order to evaluate appropriate candidates for available positions. Legend will remain responsible for personal data that is processed by each entity.

We will only use your personal data when the law allows us to do so. Most commonly, we will use your personal data in the following circumstances:

Throughout the recruitment process, to decide which candidates we are going to recruit;
where we need to decide whether to enter into a contract of employment with you (where you are a successful candidate);
where we have a legal obligation to fulfil when establishing a potential employment relationship;
where it is necessary for the legitimate interests of our business, provided that your interests and fundamental rights do not override those interests. Our legitimate interests are the recruitment of the right staff for our business.

Purposes of processing

We use information held about you in the following ways:

To assess your skills, qualifications and suitability for the role for which you have applied.
To consider your application in respect of other roles.
To verify certain information that you have provided to us as part of your application.
To communicate with you in respect of the recruitment process.
To enhance any information that we receive from you with information obtained from third party data providers.
To find appropriate candidates to fill our job openings.
To help Lever improve their services.

Generally, having received your application online, we will then process that information to decide whether you meet the basic requirements to be shortlisted for the role for which you have applied. If you do, we will decide whether your application is strong enough to invite you for an interview. If we decide to call you for an interview, we will use the information you provide to us at the interview to decide whether to offer you employment.

If we decide to offer you the role, we will then take up references, and carry out verification checks before confirming your appointment, including ensuring that you have a right to work in a relevant jurisdiction.

Automated decision making / profiling

We may leverage Lever’s technology to help us select appropriate candidates for us to consider based on criteria we have identified. The process of finding suitable candidates is automatic, however, any decision as to who we will engage to fill the job opening will be made by our team. You will not be subject to decisions that will have a significant impact on you based solely on automated decision making.

Failure to provide personal data

If you fail to provide certain information when requested, we may not be able to appropriately consider your application for a certain role or we may be unable to comply with relevant legal obligations.

How long we keep your personal data

We retain all candidate data for a period of 12 months from the time of application. Your personal information will be deleted on one of the following occurrences:

Deletion of your personal information by you via the tool; or
Receipt of a written request by you to us.

You may wish Legend to retain your personal information on file, on the basis that a further opportunity may arise in future. We will give you an opportunity to confirm this when you make your application.

Disclosure and transfer of information

Legend uses Lever to collect and process your personal data and has entered into standard contract clauses with Employ, Inc and its affiliates in order to adduce safeguards with respect to the protection of your personal data.

Legend shares personal information of candidates with its associated entities within the brand and with the relevant employer of the role that a candidate has applied for, in order to evaluate appropriate candidates for available positions. Legend will remain responsible for personal data that is processed by each entity.

You may request a list of entities and locations for the purposes of making an application for a live role to legal@L1.com.

International transfers

Sometimes our processing of personal data may require a transfer of data outside of the UK/EEA, to a country that is not subject to an adequacy decision. In such scenarios, we include the relevant “Model Clauses” as part of any contractual data sharing or data processing provisions, to ensure any transfer is subject to appropriate safeguards according to applicable data protection law.

Cookies

Our website may uses cookies from time to time to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.

You can accept or decline the use of cookies on our website when you arrive on our site or at any time thereafter.

We use the following cookies:

Strictly necessary cookies. These are cookies that are required for the operation of our website. These essential cookies are always enabled because our website won’t work properly without them. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services. You can switch off these cookies in your browser settings but you may then not be able to access all or parts of our website.
Analytical or performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
Advertising cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to help understand and improve engagement with any of our advertising.

If you require more information on the types and purposes of cookies that we use, please contact legal@l1.com.

Data security

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process your personal information on our instructions and where they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected or actual data security breaches and will notify you and any applicable regulator where we are legally required to do so.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through any online means, therefore any transmission remains at your own risk.

Data retention

How long will you use my information for?

Unless we are under a legal obligation to retain your personal information, we will only retain your personal information for as long as it is required for our purposes of processing. The exact time that we will retain your personal information will vary depending on the purpose of our processing.

Where we are required to retain certain information for legal or regulatory reasons, then we may retain such data for longer than we otherwise would for our own business purposes. After any period of retention, we will securely delete your personal information in accordance with applicable laws and regulations.

We retain all candidate data for a period of 12 months from the time of application. Your personal information will be deleted on one of the following occurrences:

Deletion of your personal information by you via the tool; or
Receipt of a written request by you to us.

Rights of access, correction, erasure, and restriction

Your rights in connection with personal information

Under certain circumstances, by law you have the right to:

Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
Request the transfer of your personal information to another party.

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please email us at legal@1.com.

Right to withdraw consent

Where you consent to the use of cookies on the L1 website, you always have the option update your preferences to withdraw this consent at any time.

Where you have applied for a job at Legend, if you agree to allow us to retain your personal data on file on the basis that a further opportunity may arise in future, and we may consider you for that, you have the right to withdraw your consent for processing for that purpose at any time. To withdraw your consent, please contact legal@l1.com.

Where you have agreed that any interviews you have with Legend may be recorded as part of your application process, you have the right to withdraw your consent: (i) for such recordings to be made either before or during the recording, or (ii) once the recording has been made, to not use the recording for the purpose for which it was made. To withdraw your consent, please let the relevant recruitment contact know, or advise the person conducting the interview at the time.

Once we have received notification that you have withdrawn your consent, we will no longer hold your personal data on file and subject to any legal requirements, we will securely delete your personal data.

Data protection officer

We do not have a legal obligation to appoint a data protection officer but have appointed a data privacy manager to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal information, please email us at legal@l1.com.

Complaints

Whilst we hope that we can resolve any query or concern you raise about our use of your information, data protection law also gives you right to lodge a complaint with a supervisory authority, in particular in the UK or European Economic Area state where you work, normally live or where any alleged infringement of data protection laws occurred.

We ask, however, if you do wish to raise a complaint that you contact us in the first instance so that we might be able to remedy your concerns as soon as possible. All questions, comments and requests regarding this notice should be addressed to legal@L1.com.

Privacy notice last updated: 21 August, 2024