Privacy Policy
The Idol (“we”, “us” or “our”) is committed to protecting and respecting your privacy.
This Recruitment Privacy Notice explains how we collect, use, store and share your personal information when you apply for a role with us.
For the purposes of the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation (“EU GDPR”), the Data Controller is Investment Discounts On Line Limited, trading as theidol.com (“The Idol”).
Our use of Pinpoint
We use Pinpoint, an online recruitment software platform provided by The Infuse Group Ltd, trading as Pinpoint Software, to support and manage our recruitment process.
Pinpoint processes personal information on our behalf as a data processor and may only process your personal information in accordance with our instructions.
Where you apply for a role advertised by us, this Recruitment Privacy Notice applies to our processing of your personal information. It should be read alongside any other privacy information available on our website where relevant.
Personal information we collect
We may collect and process some or all of the following types of personal information about you:
· Your name, address, email address, telephone number and other contact details.
· Information contained in your CV, covering letter, application form or supporting documents.
· Your employment history, qualifications, professional memberships, skills and experience.
· Information you provide when answering application or screening questions.
· Information you provide when answering application or screening questions.
· Interview notes, assessment results and feedback.
· Information relating to your right to work in the UK.
· References and information provided by referees.
· Background screening information, where relevant to the role, including criminal record, credit or regulatory checks.
· Information about any adjustments you may require during the recruitment process.
· Any correspondence between you and us relating to your application.
· Any other information you choose to provide as part of the recruitment process.
Where relevant and lawful, we may also process special category personal information, such as information about your health, disability, racial or ethnic origin, religious beliefs, sexual orientation or other diversity information.
We will only process special category personal information where we have an additional lawful condition for doing so.
How we collect your personal information
We may collect personal information:
· Directly from you when you apply through our careers website or the Pinpoint platform.
· Through a recruitment agency acting on your behalf.
· During interviews, assessments or other communications with you.
· From referees you have nominated.
· From background screening providers, including right-to-work, criminal record, credit or regulatory screening providers, where applicable.
· From publicly available professional sources where appropriate, such as LinkedIn or Companies House.
How we use your personal information
We may use your personal information to:
· Receive and manage your application.
· Assess your skills, experience, qualifications and suitability for the role for which you have applied.
· Review your answers to application and screening questions.
· Rank or organise applications against the main question, skill or criterion identified for the role.
· Communicate with you about your application.
· Arrange interviews, assessments and other recruitment activities.
· Make shortlisting, interview and recruitment decisions.
· Verify your identity and right to work in the UK.
· Obtain references and carry out appropriate background screening.
· Consider and implement reasonable adjustments during the recruitment process.
· Meet our legal and regulatory obligations.
· Maintain records of our recruitment decisions and processes.
· Establish, exercise or defend legal claims.
· Monitor equality of opportunity and the effectiveness of our recruitment practices, where appropriate.
We do not use candidate personal information for talent pooling or to consider candidates for other roles unless we contact you separately and provide appropriate privacy information.
Pinpoint does not use candidate information provided by us for its own product improvement, model development or other independent purposes.
Lawful bases for processing
We will only process your personal information where we have a lawful basis to do so.
Depending on the purpose, we may rely on the following lawful bases:
Taking steps before entering into a contract
We may process your personal information where this is necessary to take steps at your request before potentially entering into an employment contract or other engagement with you.
This includes receiving your application, assessing your suitability, arranging interviews and communicating with you about the role.
Legitimate interests
We may process your personal information where this is necessary for our legitimate interests in recruiting suitable individuals, managing an effective recruitment process, maintaining appropriate recruitment records and protecting our business.
We will only rely on legitimate interests where those interests are not overridden by your rights and freedoms.
Legal obligations
We may process personal information where necessary to comply with our legal or regulatory obligations.
This may include confirming your right to work in the UK, meeting equality and employment law requirements and completing regulatory screening for certain roles.
Legal claims
We may process and retain relevant information where necessary to establish, exercise or defend legal claims.
Consent
We will only rely on consent where appropriate and where you have a genuine choice.
Where we rely on consent, you may withdraw it at any time. Withdrawing your consent will not affect the lawfulness of any processing carried out before it was withdrawn.
Special category and criminal offence information
Where we process special category personal information, we will rely on an appropriate condition under data protection law.
This may include where processing is necessary:
· To meet obligations or exercise rights under employment law.
· For equality of opportunity or treatment.
· To assess or provide reasonable adjustments.
· For occupational health purposes.
· To establish, exercise or defend legal claims.
· For reasons of substantial public interest.
· With your explicit consent, where appropriate.
Information about criminal convictions or offences will only be processed where permitted by law and where relevant to the role.
This may include roles that require a Disclosure and Barring Service check, financial screening, regulatory approval or an assessment of fitness and propriety.
SMS and text messaging
We may use your mobile telephone number to send you text messages relating to the recruitment process.
These messages may include:
· Application updates.
· Interview scheduling.
· Interview reminders.
· Requests for information.
· Onboarding communications where you are offered a role.
Your mobile telephone number and any SMS preferences will not be shared with or sold to third parties or affiliates for marketing purposes.
You may opt out of receiving recruitment text messages at any time by replying “STOP” to a message you receive.
Opting out of text messages will not prevent us from contacting you through another appropriate method, such as email.
Ranking and automated processing
We may use Pinpoint to help rank or organise applications against the main question, skill or criterion identified for a particular role.
This ranking supports our recruitment team in reviewing applications. It does not independently determine who will be shortlisted, interviewed or offered a role.
Recruitment decisions are made by members of our team.
Where an applicant confirms through a screening question that they do not have the required right to work in the UK, Pinpoint may automatically send a response confirming that the application will not proceed.
This automated response is based solely on the applicant’s answer to the right-to-work question.
Where you believe an automated response has been made incorrectly, or you would like the outcome to be reviewed by a person, you may contact us using the details set out below.
We do not currently use Pinpoint to produce AI-generated candidate summaries or to make recruitment decisions without human involvement.
Who we share your personal information with
We may share your personal information where necessary with:
· Pinpoint, which provides our recruitment platform.
· Employees involved in recruitment, including members of our People team, hiring managers and interviewers.
· Recruitment agencies acting on your behalf.
· Referees you have nominated.
· Background screening and right-to-work providers.
· Occupational health or workplace adjustment providers, where appropriate.
· Other companies within the Legal & General Group, where necessary.
· Professional advisers, auditors or legal representatives.
· Regulators, law enforcement agencies, courts or other public authorities where required by law.
Third-party service providers acting as our data processors are required to process your personal information only on our instructions and to protect it appropriately.
Some third parties may act as independent data controllers for their own processing activities. Where this applies, their own privacy notices will explain how they use your information.
International transfers
Some of our service providers or their sub-processors may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we will ensure that appropriate safeguards are in place in accordance with data protection law.
These safeguards may include:
· A finding that the destination country provides an adequate level of protection.
· The UK International Data Transfer Agreement.
· The UK Addendum to the EU Standard Contractual Clauses.
· Another legally recognised transfer mechanism.
You may contact us for more information about the safeguards used for relevant international transfers.
How we protect your personal information
We take appropriate technical and organisational measures to protect personal information against accidental or unlawful loss, alteration, disclosure, access or use.
Access to candidate information is limited to individuals and service providers with a genuine business need to access it.
Those who process your information are required to do so in an authorised manner and are subject to appropriate confidentiality obligations.
We also maintain procedures for identifying, investigating and responding to suspected personal data breaches.
Where legally required, we will notify affected individuals and the relevant supervisory authority of a personal data breach.
Although we take appropriate steps to protect information submitted online, transmission of information over the internet cannot be guaranteed to be completely secure.
How long we keep your personal information
We retain candidate personal information for 12 months from the date of application.
Pinpoint will be configured to apply this 12-month retention period.
At the end of the retention period, personal information will be securely deleted or anonymised unless:
· You become employed or otherwise engaged by us, in which case relevant recruitment information may become part of your employment or worker record.
· We are legally required to retain particular information for longer.
· Information is required for an ongoing dispute, investigation or legal claim.
We do not retain unsuccessful candidate information for talent pooling.
You may also request deletion of your information before the end of the retention period. We will consider your request in accordance with your data protection rights and any applicable legal exemptions.
Your data protection rights
Depending on the circumstances, you may have the right to:
· Request access to the personal information we hold about you.
· Request correction of inaccurate or incomplete information.
· Request deletion of your personal information.
· Object to the processing of your personal information.
· Request that we restrict the processing of your personal information.
· Request the transfer of information you have provided to us in a structured, commonly used and machine-readable format.
· Withdraw consent where we rely on consent.
· Object to direct marketing.
· Request human intervention where a decision with legal or similarly significant effects has been made solely through automated processing.
· Challenge an automated decision and express your point of view.
These rights are subject to certain legal conditions and exemptions.
You will not normally be charged for exercising your rights. However, we may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive.
We may need to request information from you to confirm your identity before responding to a request.
We aim to respond to valid requests within one calendar month. Where a request is complex or multiple requests have been made, we may extend this period by up to a further two months. We will tell you where an extension is required.
Managing or deleting your information
You may be able to access, update or delete your candidate information through the “Manage Your Data” function within Pinpoint.
You may also contact us directly to exercise your rights or ask us to correct or delete your information.
Contacting us
If you have questions about this Recruitment Privacy Notice, how we use your personal information or your data protection rights, please contact:
Data Privacy Manager
Investment Discounts On Line Limited, trading as theidol.com
The Edge
Eden Business Park
Penrith
Cumbria
CA11 9FB
Investment Discounts On Line Limited, trading as theidol.com
The Edge
Eden Business Park
Penrith
Cumbria
CA11 9FB
Email: datacontroller@theidol.com
How to complain
We hope that we can resolve any question or concern you raise about our use of your personal information.
You also have the right to lodge a complaint with the Information Commissioner’s Office, which is the UK supervisory authority for data protection matters.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
You may find further information on the Information Commissioner’s Office website.
Changes to this Recruitment Privacy Notice
We may update this Recruitment Privacy Notice from time to time.
Where we make material changes, we will take appropriate steps to bring those changes to your attention.
Last updated: August 2026