Recruitment Privacy Notice

Last updated: 30th March 2026

1. Who We Are

Hychor Ltd (“Hychor”, “we”, “us” or “our”) is the data controller in respect of personal data processed as part of our recruitment activities.

Registered address:
ABVenture Zone, MacRobert Building, King Street, Aberdeen, United Kingdom AB24 5UA

Email contact:
info@hychor.com

This notice is provided in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. How We Collect Your Data

We collect personal data when you:

  • Apply for a role by email; or
  • Apply via LinkedIn Easy Apply.

If you apply via LinkedIn, LinkedIn acts as an independent data controller in relation to your data on its platform. Once we receive your application, we process your personal data in accordance with this notice.

3. What Personal Data We Process

We may process:

  • Name and contact details (including email address)
  • CV content
  • Employment history and qualifications
  • Information contained in covering emails or LinkedIn applications
  • Interview notes (digital and handwritten)
  • Interview recordings and transcripts (where you have provided consent), including transcripts automatically generated by Microsoft Teams
  • Application correspondence and role-related assessment records

We do not request special category data (such as health or criminal records information) as part of our recruitment process.

4. Purpose and Lawful Basis

We process your personal data for the purpose of:

  • Assessing your suitability for a role
  • Managing and administering the recruitment process
  • Communicating with you regarding your application
  • Assessing right-to-work or sponsorship suitability where relevant

Our lawful basis for this processing is:

  • Article 6(1)(b) UK GDPR – Contract: as processing is necessary to take steps at your request prior to entering into an employment contract.

Where we retain your details for potential future roles (see Section 6), our lawful basis is:

  • Article 6(1)(f) UK GDPR – Legitimate interests: namely maintaining a record of applicants for future recruitment opportunities.

We do not carry out automated decision-making or profiling in relation to recruitment.

5. Provision of Data

Providing personal data during the recruitment process is voluntary. However, certain information (such as contact details and CV information) is necessary for us to assess your application. If this information is not provided, we may be unable to progress your application.

6. Interview Recordings

Interviews may be conducted using Microsoft Teams.

Where an interview is recorded:

  • Recording is optional and subject to your consent.
  • A transcript may be automatically generated.
  • Recordings and transcripts are stored securely and retained for up to 12 months after the recruitment decision.

You may decline to be recorded without affecting the fairness of your application.

Transcripts and interview materials may be analysed internally using productivity tools within our Microsoft 365 environment to assist with note-taking and candidate evaluation. These tools do not make automated decisions regarding candidates.

7. Retention

If your application is unsuccessful, we will retain your personal data for up to 12 months after the recruitment decision.

We may contact you during this period if a suitable role becomes available.

After 12 months, your data will be securely deleted unless we are required to retain specific records for legal or regulatory reasons.

If you are successful, your personal data will be retained in accordance with our Privacy Notice for Employees, Workers & Contractors.

8. International Transfers

We use Microsoft 365 to manage recruitment records.

Microsoft 365 services may involve storage of, or remote access to, personal data outside the United Kingdom. Where this occurs, we rely on the UK Addendum to the EU Standard Contractual Clauses to ensure appropriate safeguards are in place.

9. Data Sharing

We may share personal data with service providers who support our recruitment processes (for example, Microsoft 365), and with professional advisers where necessary. This may include sharing limited candidate information with professional advisers or consultants assisting the Company with recruitment or organisational development.

We may also disclose relevant personal data to regulatory authorities where required by law, including the Home Office or UK Visas and Immigration in connection with right-to-work checks, sponsor compliance, audits or related immigration requirements.

All such recipients are required to process personal data in accordance with applicable data protection laws where relevant.

Access to applicant data is restricted to authorised personnel involved in the recruitment process.

10. Your Rights

You have the right to:

  • Request access to your personal data
  • Request rectification of inaccurate data
  • Request erasure (in certain circumstances)
  • Request restriction of processing
  • Object to processing based on legitimate interests
  • Request data portability (where applicable)

To exercise your rights, please contact us at info@hychor.com.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).