Jump to main content

Privacy Policy

Why we collect your information

To review your job application, we need to process some of your personal data. Each vacancy has a set of defined role requirements to allow us to ensure we recruit people with the right skills and experience. We will compare the information provided in each application against these requirements so that we can shortlist the people we consider to be most suitable.

How we get the personal information and why we have it

When we receive your personal data directly from you or from the recruitment website you use to apply for the job, we use this information in to:

  • assess you as a candidate
  • contact you to arrange an interview and complete initial screening, and subsequently inform you of the outcome

Where we receive your data from a third party we use your information to:

  • record a job referral
  •  record progression of a referral to a job application

Under the Data Protection Act 2018 the lawful bases we rely on for processing this information are:

(a)    Legitimate interest - we process your personal data to consider your application and fill vacant positions with suitable candidates. We use automated decision making to reject candidates who don’t meet the relevant criteria necessary for the advertised job role, this includes eligibility to work in the UK and being the minimum required age, where applicable.


(b)    Consent – if you elect to have your details retained within our database, you consent to us contacting you with information about a suitable role should one become available in the future

How we store your personal information 

Your information is securely stored within the Talent Acquisition platform. Personal data received via a job referral is retained for 30 days; personal data received as part of a job application is retained for 12 months from the last engagement with you.

Data SharingOther organisations who help us to provide our products and services

We work with a number of third-party suppliers and service providers. Many of these organisations process personal data in order to provide products or services to us, or on our behalf.

These organisations are bound by the terms of this privacy notice, and they are also required to comply with our data protection policies. They are not permitted to use your personal data for their own purposes.

The categories of recipients include:

  • candidate management platform provider
  • apprenticeship provider
  • recruitment provider
  • documentation verification service provider
  • electronic communications provider

Please note: To ensure the ongoing protection of your personal data, please do not include any special categories of personal data* in any electronic communications, including email, SMS and WhatsApp, or any sensitive personal data including financial or identification data.

* Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning a person's sex life or sexual orientation

International data transfers

Some of our third-party processors operate outside of the UK. Under these circumstances, before your personal data is transferred outside the UK, we implement at least one of the following safeguards:

  • carry out Risk Assessments to ensure there is a suitable level of protection for your personal data
  • put appropriate controls in place to ensure your personal data has a suitable level of protection where the recipient country is not deemed as adequate, for example standard contractual clauses or encryption

Your data protection rights

Under data protection law, you have rights including:

Your right of access - you have the right to ask us for copies of your personal information.

Your right to rectification - you have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - you have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - you have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - you have the the right to object to the processing of your personal information in certain circumstances.

Your rights relating to automated decision making - if you want to object to or find out more about an automated decision which affects you, please contact dataprotection@greeneking.co.uk


You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at dataprotection@greeneking.co.uk if you wish to make a request.

How to complain

You always have the right to make a complaint to a data protection authority. In the UK, that’s the Information Commissioner’s Office (ICO). You can find guidance on making a complaint on the ICO’s website.

If you want to find out more information about your rights, please refer to the information on the ICO’s website or contact the data protection team by emailing dataprotection@greeneking.co.uk  

Our contact details 

Name: Greene King Retail Services Limited

Address: Westgate Brewery, Bury St Edmunds, Sudbury, Suffolk. IP33 1QT

Phone Number: 01284 763222

E-mail: dataprotection@greeneking.co.uk


Quick search