Language Selection
  • Home
  • Candidate Privacy Notice

Candidate Privacy Notice

Version: 2.0

Last updated: 15th May 2026

This Candidate Privacy Notice (“Notice”) explains how FinTrU Ltd (“we”, “us”, “our”) collects and uses personal data about individuals who apply for roles with us. We are committed to handling your information fairly, lawfully and transparently in accordance with UK GDPR, EU GDPR and the Data Protection Act 2018.

1.1 Who we are

FinTrU Ltd. operates in the UK and the EU through its group entities and branches, including offices in the Republic of Ireland and Portugal. These EU establishments mean we are directly subject to the EU GDPR for EU‑based applicants.

Primary contact for data protection matters:

Email: dataprotection@fintru.com

Address: FinTrU House, 1 Cromac Avenue, Belfast, Northern Ireland, BT7 2JA

EU Offices:

FinTrU Ireland Ltd

Windyhall Estate, Building 1, Letterkenny, Co Donegal, F92 W622, Republic of Ireland 

FinTrU Ltd. Portugal Branch

Rua de Santa Catarina 1232, 4000-457, Porto, Portugal

1.2 What personal data we collect

Information you may provide directly

  • Name, contact details, address
  • CV, cover letter, employment history, educational qualifications
  • Skills, expertise, professional memberships
  • Salary expectations, notice period
  • Right-to-work documentation
  • Information shared during interviews or assessments

Information we may collect from other sources

  • References from former employers
  • Background screening results (where allowed under local law)
  • Right-to-work verification
  • Information from recruitment agencies
  • Publicly available professional information (e.g. LinkedIn

Special category data (only where necessary)

We may process limited sensitive data such as:

  • Health information (e.g. where required for interview adjustments)
  • Diversity data (e.g. ethnicity, disability, gender)
  • Community background data (e.g. where required in Northern Ireland in accordance with fair employment legislation)
  • Criminal record data (only where relevant and permitted by law)

1.3 Purposes for processing your data

We process your personal data for the following purposes:

  • Assessing your suitability for the role
  • Managing and administering the recruitment process
  • Communicating with you about your application
  • Verifying your identity and right to work
  • Conducting background checks, where appropriate
  • Keeping records of the recruitment process
  • Considering you for future opportunities (if you consent)

1.4 Lawful bases for processing

We rely on the following lawful bases under UK and EU GDPR:

  • Legitimate interests – evaluating and managing recruitment
  • Legal obligation – right-to-work checks, equality monitoring
  • Contractual necessity – taking steps before entering into an employment contract
  • Consent – only for optional processing (e.g. diversity data)

Special category data is processed under:

  • Employment law obligations
  • Substantial public interest (equality monitoring)
  • Explicit consent (where required)

1.5 Who do we share your data with

We may share your data with:

  • Internal HR and recruitment teams, hiring managers, interviewers
  • Recruitment agencies acting on our behalf
  • Background screening providers
  • IT service providers (e.g. applicant tracking systems)
  • Legal or regulatory authorities, where necessary

We do not sell your data.

1.6 International data transfers

Because we operate in both the UK and the EU, your data may be transferred between our UK and EU offices. Where such a transfer occurs, appropriate safeguards are used such as UK Addendums to Standard Contractual Clauses (SCCs), EU SCCs, or adequacy decisions.

Transfers outside the UK or EU (if any) will be subject to appropriate legal safeguards.

1.7 How long we keep your data

We retain candidate data throughout the recruitment process and for:

  • 12 months after the recruitment process ends for unsuccessful applications
  • Longer, if required by law or to defend legal claims

In Northern Ireland, equality monitoring data is retained for 3 years.

If you are unsuccessful for the role for which you have applied, or you sent us a speculative application, then, if we have your consent to do so, we will keep your personal data on file to identify if you might be suitable for any other vacancies that may arise in the next 12 months and will contact you if we believe this is the case. We will not keep your personal data for this purpose for longer than 12 months.

Successful candidates’ data will be handled under our Employee Privacy Notice.

1.8 Your data protection rights

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion (in certain circumstances)
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time

You are also entitled to lodge a complaint with FinTrU – dataprotection@fintru.com - or with your supervisory authority:

UK: Information Commissioner’s Office (ICO)

Ireland: Data Protection Commission (DPC)

Portugal: Comissão Nacional de Proteção de Dados (CNPD)