Privacy Policy

Privacy Policy

This policy explains how your personal information is collected and used when you take part in a candidate screening or assessment through TrueFit. It applies to the screening process operated for Sanctuary Graduates.

• Identity and contact details you provide — such as your name and email address.
• Your screening responses — the answers you give to the assessment questions, including any eligibility or knockout answers.
• Equality and diversity information — only if you choose to provide it (see below).
• Technical and usage data — such as device type, approximate location from your IP address, and how you move through the assessment, used to keep the service working and secure.
• Correspondence — any messages you send us about your application.

We use your information to run the screening, assess your suitability for the role you applied for, share results with the relevant employer, keep the service secure, and communicate with you about your application.

• Performance of, or steps toward, a contract — to process your application and screening.
• Legitimate interests — to operate, secure and improve the screening service, where this is not overridden by your rights.
• Consent — for any optional information you provide (such as diversity data) and for any optional communications. You can withdraw consent at any time.
• Legal obligation — where we are required to process data to comply with the law.

We may invite you to share equality information, which can include data revealing ethnic origin. This is special category data and is given greater protection under UK data protection law. Providing it is entirely voluntary and is processed only with your explicit consent, for equal-opportunities monitoring. Choosing not to provide it will not affect your application.

• The employer or client whose role you applied for, where you progress through screening.
• neoOptic, as the operator of the TrueFit platform, acting as our processor under contract.
• Service providers who support the platform (for example hosting and IT), bound by confidentiality and data-protection terms. [Legal/ops to confirm the list of sub-processors.]
• Authorities or advisers where we are legally required to share, or to establish or defend legal claims.

[Legal/ops to confirm hosting location.] The platform and its data are intended to be hosted in the United Kingdom. If any data is transferred outside the UK, we will ensure an appropriate safeguard is in place (such as an International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses).

We keep your personal data only as long as necessary for the purposes above and to meet our legal obligations. [Legal to confirm retention periods — Sanctuary's current policy is a minimum of 1 year and a maximum of 10 years from last contact; confirm this is appropriate for screening data.]

Under UK data protection law you have rights over your personal data, including the right to:

• access a copy of the data we hold about you;
• have inaccurate data corrected, or incomplete data completed;
• have your data erased in certain circumstances;
• restrict or object to how we use your data;
• request portability of certain data;
• withdraw consent at any time, where our use relies on consent;
• complain to the Information Commissioner's Office (ICO).

To exercise any of these rights, or to ask us to delete your data, email students@sanctuarygraduates.co.uk.

The screening page uses a small amount of strictly necessary storage to work properly. See our Cookies Policy for details.

We may update this policy from time to time. The latest version will always appear on this page, with the date it was last updated shown at the top.

This screening is operated for Sanctuary Search Ltd (trading as Sanctuary Graduates), a company registered in England and Wales (company number 08013693), registered office Chanray House, Floor 4, 232 Bishopsgate, London EC2M 4QD. Our data protection contact is Andrew Neil (andrew.neil@sanctuarygraduates.co.uk). [Confirm.]