Privacy notice

Who is responsible for your information

The data controller is JD Development Privacy Controller.

You can contact us about this notice, your information, or a pre-screen decision:

Information we collect

Depending on how you use the website, we may collect:

• technical and security information, including IP address, request details and session identifiers;
• your name, telephone number and how you found the careers page;
• your answers to application pre-screen questions and the resulting outcome;
• your email address, postal address and any optional CV you provide;
• dates, times and records showing which version of this notice was made available to you.

We collect information directly from you, from your browser or device, and from the security services used to protect the website.

Why we use your information

We use personal information to:

• operate, secure and diagnose the website;
• receive, assess and manage career applications;
• contact applicants and arrange the next stages of recruitment;
• detect spam, misuse and security threats;
• meet legal obligations and establish, exercise or defend legal claims.

Lawful bases

We process application information to take steps at your request before entering a contract, for our legitimate interests in running recruitment and protecting the website, and where necessary to comply with legal obligations.

We do not rely on the careers privacy acknowledgement as consent to process your application. It records that this notice was made available.

Careers and automated pre-screening

When pre-screen questions apply to an application source, the answers are compared automatically with configured refusal answers. The result records the application as having passed or failed pre-screening and may prevent the applicant from continuing to the detailed application form.

If you believe a decision is wrong, want to explain your circumstances, or want a person to review the outcome, contact us using the details under Who is responsible for your information. We will consider the request and explain the outcome.

CV files are stored using server-generated references and are available only through controlled application access; they are not published as direct website links.

Who receives your information

We may share relevant information with:

• authorised recruitment and operational staff;
• providers that host, secure, support or deliver email for the website;
• Google, when Google Fonts are loaded or reCAPTCHA is enabled to detect automated submissions;
• regulators, law-enforcement bodies, courts and professional advisers where required.

We do not sell applicant or visitor personal information.

International transfers

Development draft: Google and other service providers may process information outside the United Kingdom. Production use requires approved transfer locations and safeguards, such as UK adequacy regulations or the UK International Data Transfer Addendum.

How long we keep information

Career applications and uploaded CVs

Development draft: unsuccessful applications and uploaded CVs are retained for six months after the recruitment process ends, unless a longer period is required for a legal claim.

Website and security logs

Development draft: website and security logs are retained for 90 days unless they are needed to investigate an incident.

We may keep information longer where required by law, while a complaint or legal claim is being handled, or where another documented retention requirement applies.

How we protect information

We use access controls, secure transport, restricted file delivery, session protections, logging and other organisational and technical measures intended to protect personal information. No internet service can guarantee absolute security.

Your data protection rights

Depending on the circumstances, you may have the right to:

• ask for access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask for erasure or restriction of processing;
• object to processing based on legitimate interests;
• receive information you provided in a portable format;
• challenge a decision made solely by automated means and request human involvement.

Some rights are subject to legal conditions and exemptions. Contact us using the details above to make a request. You also have the right to complain to the Information Commissioner's Office.

Cookies, sessions and third-party services

The website uses session and security storage needed to provide forms, protect requests and maintain authenticated sessions. These technologies are used because the requested services cannot operate securely without them.

The site requests font files from Google Fonts. When enabled on the careers form, Google reCAPTCHA also receives technical and interaction information to assess whether a submission is automated. Google's own privacy terms apply to that processing.

We do not currently use optional analytics or advertising cookies on the public website, so there is no optional-cookie consent banner. This notice and consent approach must be reviewed before optional tracking is introduced.

Changes to this notice

We will update the effective date and version when this notice changes. Where a change materially affects how applicant information is used, we will provide an appropriate additional notice.