Who is responsible for your information?

This notice covers the Margo's Beauty recruitment service. The current data controller is Benjamin Freckleton trading as Margo's Beauty. Recruitment privacy enquiries can be sent to careers@margosbeauty.com.

If Margo's Beauty Ltd is incorporated and later becomes the data controller for recruitment, this notice will be updated to reflect that legal change.

What we collect

Depending on how far you progress, this can include your contact details, Talent Profile, profile picture, CV, portfolio, skills, application answers, recruitment communications, interview and assessment information, offer information and, after an accepted offer, information needed for pre-employment checks, right-to-work, payroll and onboarding.

Technical security and audit information may also be recorded so that Margo's can protect the recruitment service and demonstrate what happened during a recruitment process.

Profile pictures are not analysed to infer suitability and are not used for automated ranking.

Why we use it

• Recruitment and applications: to take steps at your request before potentially entering an employment contract, including applications, interviews, assessments, decisions and offers.
• Legal obligations: where Margo's must process information to comply with employment, tax, payroll or right-to-work requirements.
• Security, audit and legal claims: where necessary for Margo's legitimate interests in running a secure, accountable recruitment process and establishing, exercising or defending legal claims.
• Talent Network: only when you choose to join. This is optional and based on your consent. You can withdraw it at any time in your Talent Profile without affecting an application you have already made.

If special-category information is genuinely required for an employment-law purpose, Margo's will only process it where an additional UK GDPR / Data Protection Act condition applies. Margo's does not ask for sensitive information simply because it may be interesting or convenient.

Who may receive it?

Access is limited to people who need the information for recruitment, onboarding, payroll or legal compliance. Service providers supporting the recruitment platform can also process information on Margo's behalf, including hosting/database services, secure email, staff authentication and malware scanning.

The current recruitment stack includes Supabase, Vercel, Microsoft 365 and Scanii. Margo's does not give candidate information to advertisers and does not use it for consumer marketing unless you separately choose to engage with a consumer-marketing service.

If a supplier processes information outside the UK, Margo's will only use the transfer where an applicable UK adequacy arrangement or approved safeguard is in place.

How long we keep recruitment information

• Active applications: while the recruitment process is running.
• Unsuccessful or withdrawn applications: scheduled for a retention review 12 months after closure. At review, information is deleted/anonymised where it is no longer needed, or a documented reason and new review date must be recorded.
• Talent Profiles: kept while the profile remains useful to you. A profile is scheduled for review after 24 months without profile/application activity. Talent Network sourcing stops immediately when you withdraw the Talent Network opt-in.
• Successful candidates: information needed for employment moves into the employee record and is kept for the applicable employment, tax, payroll, right-to-work and legal retention periods. Intrusive vetting material is not kept simply because it was collected.

These are Margo's operating retention rules, not a statement that every record must always be kept for the full period. Information can be deleted earlier when it is no longer needed and no legal reason requires it to be retained.

Your choices and rights

You can update ordinary Talent Profile information yourself. Depending on the circumstances, you can also ask for access, correction, erasure, restriction of processing or object to processing. The right to erasure is not absolute, so a deletion request is reviewed before records are removed.

Margo's normally has one month to respond to a valid data-rights request. You can make a signed-in request through the recruitment portal or email careers@margosbeauty.com.

Make or track a data-rights request

If you are unhappy with how your information is handled, you can also complain to the UK Information Commissioner's Office.

Recruitment decisions

Margo's recruitment decisions are made by people. The platform can organise information, record scorecards and support searches, but it does not automatically decide who should be hired and does not automatically rank candidates for selection.