Privacy Policy


The following explains how we Plymouth College of Art (Controllers) intend to use the information you provide in your application, along with your rights, our reasons for requesting it and who will have access to it.



NETWORX Candidates

As defined by the General Data Protection Regulation (GDPR) Plymouth College of Art, Tavistock Place, Plymouth, PL4 8AT is the Data Controller and ultimately responsible for ensuring the data you provide is kept secure, processed correctly and that you understand your legal rights in relation to the data you provide.  As part of our Data Controller responsibilities we have an assigned Data Protection Officer (or equivalent).


Tom Archer can be contacted at


The recruitment software we use via this website is supplied by Net-Worx (2001) Ltd (trading as networx) and they are defined as a Data Processor under the GDPR.  They will only process your data in accordance with our instructions. 

networx can be contacted at: The Engine House, Wharfebank Business Centre, Ilkley Rd, Otley LS21 3JP. 


The Data Protection Officer for networx is Rob Baker and can be contacted at



Plymouth College of Art is committed to safeguarding the privacy of your information. By “your information” we mean any information about you, which you or third parties provide to us. If you as a candidate submit information to this Website, you agree to the use of such data in accordance with this privacy statement.

Our Privacy Principals, set out below, explain how your information will be treated. 

Collection of Information

  • We will only collect & use your information where we have lawful grounds and legitimate business reasons to do so
  • We will be transparent in our dealings with you, and will tell you about how we will collect and use your information
  • If we have collected your information for a particular purpose we will not use it for anything else unless you have been informed and where relevant your permission obtained
  • We will not ask for more information than we need for the purposes for which we are collecting it

Maintenance of information

  • We will update our records when you inform us that your details have changed
  • Candidates who choose to apply may access their profile, correct and update their details, or withdraw their details at any time.
  • We will continue to review and assess the quality of our information.
  • We will implement and adhere to information retention policies relating to your information and will ensure that your information is securely disposed of at the end of the appropriate retention period
  • Normally, unsuccessful applications are only retained for a period of 12 months. In certain circumstances where applications have been refused, such as conviction of financial fraud, we may retain application information for up to six years

Our Commitment to You

  • We will observe the rights granted to you under applicable privacy and data protection laws and will ensure that queries relating to privacy issues are promptly and transparently dealt with
  • We will train our staff on their privacy obligations
  • We will ensure we have appropriate physical and technological security measures to protect your information regardless of where it is held
  • We will ensure that when we outsource any processes we ensure the supplier has appropriate security measures in place and will contractually require them to comply with these Privacy Principles. This will only take place where it is needed to process your application
  • We will only use the information you provide to us on these pages in order to process the relevant application and will not be used for marketing purposes

Changes to our Recruitment Privacy Principals


We reserve the right to modify or amend this privacy statement at any time and for any reason, any changes to our Recruitment Privacy Principals will be posted on this page so that you are always kept informed of the information we collect and how we use it. Nothing contained herein creates or is intended to create a contract or agreement between us and any user visiting the Website or providing identifying information of any kind.


What information do we collect from you?

We collect information that is specifically provided by you as part of an application process. We will collect the following (but not limited to):

  • Name, address, email, telephone number
  • CV (if applicable)
  • Equal opportunities monitoring information (defined as special categories data) - this information is purely for statistical analysis and monitoring purposes
  • Answers to application questions
  • Any other information you wish to provide in support of your application


By agreeing to this privacy statement, you are allowing us to form a contract that will mean we can use your details and information presented so that we can assess your suitability for employment with us and carry out our statistical analysis.


Why do we collect this information and who do we share it with?

Details you provide in this application:

  • Will be held on our computer systems and may be downloaded by us
  • Will be used to deal with your application
  • Will be made available to us and our processors
  • Will be used for communication with you regarding the vacancy
  • Will be used to satisfy legal requirements
  • Will be used for statistical analysis
  • Will be held and may be used to contact you about other vacancies


We will store your application data for 12 months after the vacancy has closed. After this period, it will be fully deleted.


Candidate Questions


If you have any questions or concerns regarding your privacy while using this Website, please direct them to us. Contact


HR/Payroll reports

We collect your data for statistical analysis or to extract it as part of a successful employee process in to our HR/Payroll system. 


People HR

Only if you are successfully recruited, will we upload your details to our HR system, People HR.  As a member of staff you will sign a contract of employment and agree to additional terms on how your data is handled and stored.


Background Checks

If you are successful through the application stage, as part of our pre-employment checks, we will perform a number of background checks.  We use the following providers 

IMASS (online health assessment -

DBS (records disclosure service at Devon County Council -

to handle your data in order to complete the checks on our behalf.  For information on their privacy policy, please visit their websites.



How can I access the information you hold about me? Your rights.


We are dedicated to providing reasonable access to visitors who wish to review the personal information retained when they apply via our website site and correct any inaccuracies it may contain. If you choose to register, you may access your profile, correct and update your details, or withdraw your details at any time. To do this, you can access your personal profile by using the secure login. In all cases we will treat requests to access information or change information in accordance with applicable legal requirements.


You have the following rights in relation to the way in which we deal with your personal data:

  • the right of erasure or to be forgotten
  • the right to rectification if information is inaccurate or out of date
  • the right of data portability (to obtain and reuse your personal data)
  • the right to object to networx and the controller and processors handling of your personal data
  • the right to withdraw your consent with regards to the handling of your personal data
  • you have the right to ask for a copy of the information we hold about you (Subject Access Request - S.A.R)
  • You have the right to lodge a complaint with a supervisory authority - the ICO
  • Within your candidate account, you can also use the Download Data feature to generate an XML file of the current data we hold on you that you have provided and/or have access to within the account.


Where you exercise your right to object or withdraw your consent we may process your personal data without your knowledge or consent where we are permitted or required by law or regulatory requirements to do so. In such a case, we will not process more personal data than is required under the circumstances.


If you are not satisfied by our actions, you can seek recourse through our internal complaints procedure. If you remain dissatisfied, you have the right to refer the matter to the Information Commissioner ( or seek recourse through the courts.