Privacy Policy

JLR APPLICANT PRIVACY NOTICE

JLR Privacy Notice (“Notice”) UK

Introduction

JLR (“JLR Group,” “we,” “our,” “us”) collects and retains certain information about you/your child (collectively “your”) to provide you the services you have signed up to. We are committed to protecting and responsibly handling your information and have produced this Notice to provide you with information regarding JLR Group practices when handling your information and to explain how we collect, use, share and keep your information secure.

Where we collect your information for a specific programme or initiative that is not detailed in this Notice, we may supplement this with specific information about those data handling activities, e.g., if you take part in a JLR event or prize draw. Look out for information notices associated with those specific activities.

Got a question?

If you would like to get in touch, please contact talent@jaguarlandrover.com.

For senior executive appointments, please contact exechire@jaguarlandrover.com.

What information JLR holds about you and why

The information that we hold about you is any information that relates to you where you are identified or identifiable. Most of the information we hold will be provided directly by you or be generated by us as part of recruitment. For example:

Information provided by you or generated by us as part of the recruitment process, such as full name, contact details, previous work and CV details, assessment marks, interview notes and the right to work in the UK.

There may be times where we collect information from other sources for the purposes of recruitment. For example, for certain roles, in order to identify the best individuals to fill those roles, we may take a more proactive approach and complete a data gathering exercise using various external sources, such as professional networking platforms, approved background checking providers and other publicly available information sources (e.g., news articles).

We are committed to being transparent and fair in our dealings with you, therefore we only collect and hold your information where we have legally valid reasons to do so. There are various reasons why we require your information, the primary reason is to fulfil the services you have opted in to.

Please see the “Tell me more” box below.

TELL ME MORE.

...about why JLR holds your information...

The main reasons why we collect and use your information, and the lawful grounds we rely on are:

Why we collect and use your information:

Our lawful grounds to collect and use your information:

For the fulfilment of the recruitment process - when you apply for a new position, confirm your interest in a position that JLR has directly approached you about, or are promoted, we will use your information to confirm who you are, your eligibility to work for us, as well as whether you are suitable for the role, by assessing your work experience, interviews and tests you may undertake.

Information used includes your application details, any assessment test results, and interview notes.

In pursuit of fulfilling the recruitment process in a fair and effective manner, the lawful basis relied upon is:

JLR’s Legitimate business interest.

To carry out recruitment analytics - we may use information on your nationality, gender, age, disability and racial and ethnic origin (where provided) as part of diversity monitoring initiatives. Such information will be aggregated and used for equality of opportunity monitoring purposes.

Please note — disability and ethnicity are not mandatory fields. You may choose the option ‘prefer not to say’. These analytics and disclosure will not be visible to the recruiter.

From time to time, we may conduct mapping or research exercises. This is to enable us to understand a particular functional specialism or market. Here, we may include certain aspects of your personal data.

In order to understand application trends and ensure effective and fair use of recruitment tools and procedures as well as monitoring progress against the existence of equality of opportunity or treatment, the lawful basis relied upon are:

JLR’s Legitimate business interest.

Reasons of substantial public interest (with a basis in law).

Legal obligation to provide any reasonable adjustments required.

To ensure compliance with JLR policies and procedures - your information may be used as part of the external audit process as well as to ensure the recruitment standards and procedures are accurately followed.

Security - We use your information to maintain both onsite security and information security. We will also use your data to determine whether JLR policies and procedures are being upheld. Personal information used can include CCTV images and site access.

For the purposes of monitoring and maintaining the appropriate JLR recruitment policies and standards and the safety and security of all JLR sites, assets and workforce, the lawful basis relied upon is:

JLR's Legitimate business interest.

Keeping you informed - we may share and use the details we hold about you within our Company network if we believe you may be suitable for a future role.

In order to promote and offer further opportunities, the lawful basis relied upon is:

JLR's Legitimate business interest.

To ask you for feedback - we may contact you to participate in voluntary surveys to understand your experience of the recruitment process in order for us to make improvements where appropriate.

In order to obtain feedback to better improve our services, the lawful basis relied upon is:

JLR's Legitimate business interest.

Offer process and onboarding - if successful in securing a position at JLR, your information will be used to contact you in respect of any offer of employment we choose to make and providing you with information about our onboarding process.

Pre-employment checks - We must confirm the identify of our employees and their eligibility to work in the United Kingdom as well as perform background checks to ensure the right candidates are offered employment opportunities. Therefore, you will be required to provide:

Proof of your identity.
Proof of right to work in the UK.
Proof of qualification (in some instances).
Basic DBS check (in some instances).

In addition to the above, you will be requested to complete a questionnaire about your health to establish your fitness to work, and to determine if any reasonable adjustments should be made to your workplace.

If we make a final offer, we will request you to provide us with your banking details for processing of salary payments as well as emergency contact details.

We will also use your information to communicate to you the starting arrangements as well as ordering of any equipment necessary for your role.

Only where required, we will share relevant personal information with third party suppliers assisting you, and JLR, with activities such as relocation or immigration support relating to your employment.

In order to complete the offer and onboarding process, and complete relevant pre-employment checks, the lawful basis relied upon are:

Pre contractual requirements;
JLR's Legitimate business interests; and
Legal obligation.

Disputes or legal proceedings - we may use your information where it is relevant or potentially relevant to a dispute or legal proceeding affecting us.

In order to manage any potential / actual legal claims, the lawful basis relied upon is:

JLR's Legitimate business interest.

JLR will, as part of our recruitment process, carry out some automated decision making (including profiling) using your information. This activity enables us to effectively identify candidates (i) who do not meet set criteria critical for a specific role, or (ii) where there is very high volume of applications which require an immediate response. The consequences of automated decision making within the recruitment process is that you will not be able to continue to the next stage of the selection process.

If we propose to use your information in a manner that is not detailed above, we will contact you to inform you of any additional reasons for processing (and where necessary, obtain your consent).

Who we share your information with and why

We may share your information with:

Those third-party suppliers who need to handle your information so we can manage the recruitment process, for example, to provide appropriate IT support services and to provide administration support, or background checking services for successful applicants.
For recruitment purposes, we may share your information with other JLR group companies. For example, for Executive Recruitment, we may share recruitment information with other JLR Group companies (e.g. JLR China) when we are leading recruitment projects in those countries.
If we are under a duty to disclose or share your information in order to comply with any legal or regulatory obligation or requests, or in order to enforce these terms or to investigate actual or suspected breaches.

Please see the “Tell me more” box below.

We have safeguards in place with our third-party suppliers to ensure that your data is kept securely, in a lawful manner and used in accordance with the purposes set out in this Notice.

TELL ME MORE ...

... about third-party suppliers ...

We use a number of third-party suppliers to provide recruitment research, Customer Relationship Management (CRM) tools, administrational and technical support, some of these suppliers have access to our systems in order to provide services to us and on your behalf, for example the coordination and administration of the recruitment process (including validation and verification exercises).

... about JLRs independent third parties ...

We work with a number of independent third parties who provide JLR with support and services, such as legal advice. In limited circumstances, where necessary we may share your information with them where appropriate to support our requirements.

... about JLR Group companies, and how they may provide service support ...

As a member of the Tata Group of companies, we can benefit from the large IT infrastructure and expertise that exists within our wider corporate structure. This means that the information you provide to us may be accessed by members of our group of companies only as necessary for service and system maintenance and support, business continuity, IT and administrative purposes.

... about public bodies, government agencies, law enforcement and regulators ...

From time to time, the police, other law enforcement agencies, HMRC, Department for Work and Pensions and regulators can request information, for example for the purposes of investigation, preventing or detecting crime, or apprehending or prosecuting offenders.

JLR has strict processes in place which govern such disclosures. These shall be affected where disclosures are mandated by law or by virtue of the authorities’ role and there is a compelling business and legal reason to do so.

Each third-party supplier is only permitted to use your information on our written instructions, within the limited scope of the service contract they fulfil for JLR. We take all necessary steps to safeguard your information by imposing strict restrictions on how your information is used, stored and processed by our suppliers. We have in place audit processes designed to verify that service providers meet our standards.

For further information on how we safeguard your information, please see section below.

How we keep your information secure and international data transfers

We are committed to keeping your information secure. We have put in place organisational and technical security measures designed to adequately protect your information.

You also have a role to play in the security of your information. Where you have a password enabling you to access the recruitment portal, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

We will always aim to use servers which are hosted in the EU. However, in limited circumstances we may be required for access to be granted to your information by a third-party supplier or group company located outside of the EU where this is necessary for the purposes described above. Where this happens, we apply safeguards to add to the data protections that apply to those data transfers.

This includes an assessment of the adequacy of the third country in question and use of European Commission and UK approved international transfer safeguards, where appropriate.

Please see the “Tell me more” box below.

TELL ME MORE ...

... about the adequacy checks JLR puts in place for international data transfers ...

Where JLR chooses to share your information with a third-party supplier located outside the UK/EU, the following factors are assessed to support adequate transfer of this data:

Internal checks to identify the existence or absence of any adequacy decision by the UK/European Commission. We have group companies and use third-party suppliers located in countries that have been approved by the UK/European Commission as having essentially equivalent data protection. A full list of these countries as at the date of this Privacy Policy is: Andorra, Argentina, Canada, Faroe Islands, Guernsey, Isle of Man, Israel, Japan, Jersey, New Zealand, Republic of Korea, Switzerland, UK (under the GDPR and LED), and Uruguay. This list and information about the protections the European Commission has considered is available via this link.
Use of measures like the European Commission and UK approved measures to support adequate transfers of personal data. We also have group companies and use third-party suppliers located in countries that are elsewhere in the world. To manage data protection compliance with these transfers, we will use European Commission or UK approved data transfer mechanisms such as use of Model Contractual Clauses (approved by the Commission) or the International Data Transfer Agreement (approved by the UK).

How long we keep your information

We'll keep your information for as long as we need it to provide you the services you have signed up to, including adding you to the candidate pool in order for you to be considered for other suitable roles within JLR.

We may also keep it to comply with our legal obligations, respond to queries and resolve any disputes, to meet our legitimate interests and to enforce our rights. The criteria we use to determine storage periods include the following any applicable contractual provisions that may be in force, legal statutory limitation periods, applicable regulatory requirements and industry standards.

Your data protection rights

You have rights in connection with your information, including: to withdraw consent where you have given it, to be informed and have access to your information, to correct or complete inaccurate data, and in certain circumstances to restrict, request erasure, object to processing, or request portability of your information to another organisation.

If you want to get in touch with us for any reason regarding your data protection rights, please get in touch with the Privacy and Data Protection Team at DPOffice@jaguarlandrover.com, and inform them / add into the subject header that it relates to your data protection rights.

If you are not happy and have a data protection related complaint, please contact us direct at this email address: DPOffice@jaguarlandrover.com. If you are not satisfied, you also have the right to complain to the Information Commissioner's Office.

To learn more about these data protection rights, see the “Tell me more” box below.

TELL ME MORE ...

... about my data subject rights ...

There may be limited circumstances where you have consented to us collecting and processing your data. Where this is so, you have the right to withdraw your consent at any time. If you withdraw consent, we will cease processing your information for the reasons that consent was obtained.

You can ask for access to the information we hold about you, object to the processing, request that we correct any mistakes, restrict or stop processing or delete. If you do ask us to delete or stop processing it, we will not always be required to do so. If this is the case, we will explain why.
Where automated decision making takes place, you can request human intervention to review any decisions made and contest the decision made if you disagree.

If you no longer wish to receive recruitment communications, want to update or delete your Candidate profile you can do so at any time. For non-executive roles, you can do this by logging onto your account and making the changes required. For Senior Executive appointments, please email exechire@jaguarlandrover.com with your preferences.

... about how I can make a complaint...

You have the right to make an official complaint about the way we handle your information. In the first instance, please contact the Privacy and Data Protection Team (details below). If you do not feel that your complaint has been suitably addressed, you can contact your local data protection regulator. Within the UK, this is the Information Commissioner's Office (ICO).

... about how to get in touch with the Information Commissioner’s Office (ICO) ...

The Information Commissioner’s Office (the ICO) is the supervisory authority that regulates personal data in the UK. You can get in touch with the ICO in any of the following ways:
By going to their website: ico.org.uk
By giving them a call on 0303 123 1113
or by writing to them. Their address is: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow SK9

Cookies

A cookie is a text-only string of information that a website transfers to the cookie file of the browser on your computer's hard disk in order to enhance your experience on this site and remember you when you revisit.

For further information on what cookies are used and how to disable them, please see the “Tell me more” box below.

TELL ME MORE. ...about Cookies... Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. The table below explains the cookies we use and why. Cookies we use and how to manage them:
Type of Cookie	Technical Name	Purpose	Possible effects to disable/deleting cookies
Persistent Cookies	_utma, _utmb, _utmc, _utmz	These enable Google Analytics, which takes and analyses visitor information such as browser usage, new visitor numbers, responses to marketing activity and browsing times. That information helps us to improve the website and your experience, and to make our marketing campaigns relevant.	JLR will not be able to recognise you as a unique visit (using a number, you cannot be identified personally) when you return to our website. JLR will not be able to tailor content to your interests. May result in seeing repeated content. JLR will not be able to compile anonymous, aggregated statistics that allow us to understand how users use our site and to help us improve the structure of our website. We cannot identify you personally in this way.
Persistent Cookies	JSESSIONID	This cookie allows our webservers to respond to your actions and browsing the website.	The website wouldn't work for you without it.
Persistent Cookies	X40UI	Previously used to store an accessible version of the JLR GWS websites preference – now redundant.	JLR will not be able to recognise you as a unique visit (using a number, you cannot be identified personally) when you return to our website. JLR will not be able to tailor content to your interests. May result in seeing repeated content. JLR will not be able to compile anonymous, aggregated statistics that allow us to understand how users use our site and to help us improve the structure of our website. We cannot identify you personally in this way.
Persistent Cookies	Sreferrer	Used to track specific campaign activities throughout a user journey for lead generation effectiveness analysis.	JLR will not be able to recognise you as a unique visit (using a number, you cannot be identified personally) when you return to our website. JLR will not be able to tailor content to your interests. May result in seeing repeated content. JLR will not be able to compile anonymous, aggregated statistics that allow us to understand how users use our site and to help us improve the structure of our website. We cannot identify you personally in this way.
Persistent Cookies	Campaignid	Used to track specific campaign activities throughout a user journey for lead generation effectiveness analysis.	JLR will not be able to recognise you as a unique visit (using a number, you cannot be identified personally) when you return to our website. JLR will not be able to tailor content to your interests. May result in seeing repeated content. JLR will not be able to compile anonymous, aggregated statistics that allow us to understand how users use our site and to help us improve the structure of our website. We cannot identify you personally in this way.
Persistent Cookies	splash-overlay	Used to prevent pop-up reappearing for 24 hours after first showing. .	JLR will not be able to recognise you as a unique visit (using a number, you cannot be identified personally) when you return to our website. JLR will not be able to tailor content to your interests. May result in seeing repeated content. JLR will not be able to compile anonymous, aggregated statistics that allow us to understand how users use our site and to help us improve the structure of our website. We cannot identify you personally in this way.
Persistent Cookies	fc/conf_basket, fc/conf_ configured_basket	This cookie enables the use of the 'Finance Calculator' tool on the website, and is used to remember which products you've selected to compare – expires after 7 days. .	JLR will not be able to recognise you as a unique visit (using a number, you cannot be identified personally) when you return to our website. JLR will not be able to tailor content to your interests. May result in seeing repeated content. JLR will not be able to compile anonymous, aggregated statistics that allow us to understand how users use our site and to help us improve the structure of our website. We cannot identify you personally in this way.
Persistent Cookies	ASPSESSIONIDAQTDSCQT	This cookie allows our web servers to respond to your actions on the website and browsing the website. .	The website wouldn't work for you without it.
3rd Party - Psyma	psyma_participation	Stores users' preference in participation of the Psyma research survey. .	JLR will not be able to track usage of site features. JLR will not be able to tailor content to users' preferences. JLR will not be able to count number of anonymous users of the site.
Addthis	di, dt, loc, psc, uvc, uid, uit, xtc	These cookies are used in recording user sharing and social activity and to help publishers know approximately where people sharing information are located. For more information you can visit: www.addthis.com .	JLR will not be able to track usage of site features. JLR will not be able to tailor content to users' preferences. JLR will not be able to count number of anonymous users of the site
Atlas Solutions	AA002, MUID	These cookies allow us to provide relevant information to our visitors. For more information you can visit: www.atlassolutions.com .	JLR will not be able to track usage of site features. JLR will not be able to tailor content to users' preferences. JLR will not be able to count number of anonymous users of the site
Doubleclick	id.tes_cookie	These cookies are used to measure the effectiveness of online marketing campaigns. For more information you can visit: www.google.com/doubleclick .	JLR will not be able to track usage of site features. JLR will not be able to tailor content to users' preferences. JLR will not be able to count number of anonymous users of the site.
Scorecardresearch	UID, UIDR	These cookies are used for anonymous usage statistics. For more information you can visit: www.scorecardresearch.com .	JLR will not be able to track usage of site features. JLR will not be able to tailor content to users' preferences. JLR will not be able to count number of anonymous users of the site.

You have the ability to accept or decline cookies by modifying the settings in your browser. However, you may not be able to use all the interactive features of our site if cookies are disabled.

HOW DO I CHANGE MY COOKIE SETTINGS?

Find out how to manage cookies on popular browsers:

To find information relating to other browsers, visit the browser developer's website.

Contact us

If you have an issue regarding the information we hold on you or wish to exercise your rights, we would ask that you contact the relevant teams in the first instance:

For recruitment, please contact talent@jaguarlandrover.com with your query and relevant personal details.

For senior Executive appointments please contact exechire@jaguarlandrover.com

Should you have any complaints or queries that have not been addressed to your satisfaction with the relevant team, feel free to escalate to the Privacy and Data Protection Team at DPOffice@jaguarlandrover.com

We will aim to respond to any queries, concerns or complaints raised with the Privacy and Data Protection Team within 5 working days.

JLR Limited, Abbey Road, Coventry, CV3 4LF.

Company Number 1672070.

How we are regulated: For UK data protection legislation purposes, JLR Group is registered with the Information Commissioner’s Office under registration number ZAO2O510

Changes to this Privacy Information Notice.

This Privacy Information Notice will be reviewed on an annual basis and updated as required. Whenever significant changes are made, we will aim to issue a notification with a link to the new updated version.

Last updated: March 2024.