This Privacy Notice explains what personal data G-Research (“we”, “us”, “our”) collects about you when you interact with us and this website, including when you apply for a job with us, and how we use it.
Who we are
The data controller for your personal data is Alastair LLP (G-Research is the trading name of Alastair LLP and its affiliates). You can contact our Data Protection Officer at dpo@gresearch.co.uk.
Information we collect and how we use it
Your use of this website. We collect: questions, queries or feedback you submit (including your name and email address if you email us); your IP address and browser version; and information on how you use the site, via cookies and page-tagging (using Google Analytics and Inspectlet to collect standard internet log information and visitor behaviour patterns). This usage information is processed in a way that does not identify you, and we make no attempt to identify visitors. Legal basis: our legitimate interests in operating and improving the website and understanding how people engage with our content.
Recruitment and marketing. If you apply for a position, we collect information you provide or that is generated during the application process – contact information, employment, education and professional certifications, government-issued ID or similar identifiers, job preferences, test/assessment results and background checks. We may also collect data from your CV and application documents, referrals or recruitment partners, other job websites, references, and publicly available sources (e.g. LinkedIn). For marketing, we collect details you submit when registering for events, talks, competitions, challenges and newsletters. We use this to manage recruitment and organisational planning, to administer the recruitment process (evaluating and selecting candidates, arranging interviews and tests, reviewing results), and to contact you about future opportunities that may interest you. Legal basis: our legitimate interests in running our recruitment and marketing activities and operating any competition or challenge; and, for identity verification and background checks, compliance with our legal obligations and our legitimate interests in meeting our security standards. Some background screening may involve criminal-record information, which we process only where a lawful condition applies.
Where we collect your data from sources other than you (for example LinkedIn, referrals or recruitment partners), we are telling you about that use here, as required by data protection law.
Correspondence. If you are a supplier, customer or otherwise have a commercial relationship with us, we collect your contact details, the correspondence you send, and other information you or your organisation provide as part of day-to-day business. Legal basis: our legitimate interests in pursuing and managing day-to-day commercial relationships.
Use of Artificial Intelligence
We may process your personal data using artificial intelligence (AI) tools and systems – including in recruitment (for example, to help review or assess applications), in operating this website, and to improve our internal processes. Where we do so, we ensure appropriate safeguards are in place, that any automated processing complies with applicable data protection law, and that meaningful human oversight is retained over decisions that significantly affect you. We will not make decisions producing legal or similarly significant effects concerning you based solely on automated processing, unless this is permitted by law. Where such processing takes place, you have the right to obtain human intervention, to express your point of view, and to contest the decision.
Disclosing your information
We have affiliated entities and use service providers in various countries. Your personal data may be shared with entities within the G-Research group and with third parties acting on our behalf. If you apply for a position, this includes our recruitment platforms Workday, Inc., Greenhouse Software, Inc. and HubSpot Inc., which collect and store details of your application (including the information and documents you submit and your recruitment status).
This may involve transferring your data to countries outside the UK or European Economic Area (including the US). Where we do so, we protect it using an approved transfer mechanism.
In addition:
- If you reach the final interview stage, you will be asked to provide documents to verify your identity and address, as this is legally required to enable background checks.
- If you accept an offer of employment, your name, email address and identity/address documents will be shared with our background screening provider, to ensure prospective staff meet our security standards and terms of employment.
- We may also disclose your data where legally required (for example, to a regulator or law enforcement).
Data retention
We keep personal data only for as long as necessary to fulfil the purposes set out above. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from its unauthorised use or disclosure, the purposes for which we process it and whether we can achieve those purposes by other means, and any legal, regulatory, or contractual obligations that apply including any period for which we may need to retain data to establish, exercise or defend legal claims. Once the data is no longer required, we securely delete, destroy, or anonymise it.
Your rights
You have the right to request access to, correction of, deletion of, or restriction of processing of your personal data. In certain circumstances you also have the right to object to processing based on legitimate interests, and the right to data portability. Where we rely on your consent, you can withdraw it at any time. Where we carry out solely automated decision-making with legal or similarly significant effects, you have the additional rights set out under “Use of Artificial Intelligence” above.
To exercise any of these rights, or for more information about how we use your personal data, email dpo@gresearch.co.uk.
You also have the right to lodge a complaint with the UK’s data protection regulator, the Information Commissioner’s Office (ICO). We would ask that you raise any concerns with us first at dpo@gresearch.co.uk so we can try to resolve them.
Keeping your data secure
Transmitting information over the internet is generally not completely secure, and we cannot guarantee the security of data you transmit to us; any transmission is at your own risk. We have appropriate procedures and security features in place to keep your data secure once we receive it.
Third-party websites and social media
This website may contain content and links to third-party websites that we do not own, operate or control. We are not responsible for the privacy practices or content of those websites. When you engage with our content on or through a third-party social networking website, plug-in or application, we may process personal data associated with your social media account.
Updates
We may change this Privacy Notice from time to time. Following an update, we will post the revised notice on the G-Research website. Please check periodically for updates.