Privacy policy for CoppaFeel! Recruitment
CoppaFeel! is the first breast cancer charity in the UK to solely create awareness amongst young people, with the aim of instilling the knowledge and tools they need to get to know their bodies. We like to talk about a serious message in a light-hearted way, empowering people to start healthy habits for life, so that everyone can have the best possible chance of surviving breast cancer.
Our community are important to us and we’re committed to protecting the personal information you give us. In this policy we explain how we process your personal data in the recruitment process, what rights you have when we process your personal data, and how you can exercise these rights. For information on how CoppaFeel! uses data outside of the recruitment process please see our full privacy policy.
The processing of your information is carried out by or on behalf of the data controller CoppaFeel!. When we refer to “we” or “us” on this page, we’re talking about: CoppaFeel!, which is a registered charity in England and Wales (1132366), and Scotland (SC045970) & a company limited by guarantee (06974733) and. CoppaFeel! Trading Ltd, which is our trading subsidiary (company number 10707836). CoppaFeel! is registered under the Data Protection Act 2018 (registration reference: ZA113845), as is CoppaFeel! Trading Ltd (ZA836425).
We at CoppaFeel! manage our employer branding and recruitment process through our career site (the “Career Site”), and by using a related applicant tracking system.
In this privacy policy, we explain how we process your personal data if:
You visit our Career Site (you being a “Visitor”)
You connect with us via our Career Site, to create a profile with us and receive information about current or future vacancies with us (you being a “Connecting Candidate”)
You apply for a position with us, via our Career Site or a third party service (you being an ”Applying Candidate”)
We collect information about you from other parties, sites and services, since we believe your profile is of interest for our current or future vacancies (you being a “Sourced Candidate”)
We receive information about you from our employees or partners, since they believe your profile is of interest for our current or future vacancies (you being a “Referred Candidate”)
We receive information about you from a Candidate, who lists you as their reference (you being a “Reference”).
This privacy policy also describes what rights you have when we process your personal data, and how you can exercise these rights.
When we use the term “Candidate” in this privacy policy, we are referring to each of Connecting Candidates; Applying Candidates; Sourced Candidates; and Referred Candidates, unless it’s stated otherwise.
If you have any questions about this privacy policy or how we use your information please send an email to data@coppafeel.org. If we are unable to resolve any issues you may have or you would like to make a further complaint, you can contact the Information Commissioner’s Office by visiting http://www.ico.org.uk/ for further assistance.
We may revise this privacy policy from time to time. Any change will take effect once the revised privacy policy is available on this website.
Last updated January 2026
When do we collect your personal information?
Under the UK GDPR, we have legitimate interest to engage in activities which help us further our aims as a charity, in this instance to be able to recruit talent with the relevant competence for us. Whilst legitimate interest is our predominant legal basis for processing, there may be specific circumstances when the processing is only performed if and when you provide your consent to the processing. This is for example the case if we propose to record an interview with you.
We process your personal data when:
You visit our Career Site (you being a “Visitor”)
You connect with us via our Career Site, to create a profile with us and receive information about current or future vacancies with us (you being a “Connecting Candidate”)
You apply for a position with us, via our Career Site or a third party service (you being an ”Applying Candidate”)
We collect information about you from other parties, sites and services, since we believe your profile is of interest for our current or future vacancies (you being a “Sourced Candidate”)
We receive information about you from our employees or partners, since they believe your profile is of interest for our current or future vacancies (you being a “Referred Candidate”)
We receive information about you from a Candidate, who lists you as their reference (you being a “Reference”).
What data do we process?
All individuals
When you visit the Career site: When you visit the Career site we will automatically collect technical information including the IP address of your computer and other device related and statistical data (as described in our Cookie Policy). This information is used to administer the Career site and for internal operations, including troubleshooting, testing, analysis of how our services are used and identifying trends in order to improve user experience.
Contact details and communications data: We will collect and store your contact details and communication with us, including the information you provided in the communication. This may include the content of emails, video recordings, messages on social media, the information you add to your account with us, surveys, etc.
Candidates
Data from interviews, assessments and other information from the recruitment process: Such as notes from interviews with you, assessments and tests made, salary requirements.
Information in your application: Such as your CV, cover letter, work samples, references, letters of recommendation and education.
Information in your public profile: Meaning the information we collect about you from public sources related to your professional experience, such as LinkedIn or the website of your current employer.
Information provided by references: Meaning the information we receive from our employees or partners who refer you to us, or by the persons you have listed as your references.
Where do we receive your personal data from?
All individuals
From the Career Site: If you visit our Career Site, we collect technical and statistical information about how you use the Career Site, and information from your device.
Directly from you: Most of the information we process about you, we receive directly from you, for example when you apply for a position with us or connect with us. You can always choose not to provide us with certain information. However, some personal data is necessary in order for us to process your application or provide you the information you request to get from us.
References
Candidates
From public sources: We may collect personal data about you from public sources, such as LinkedIn or the website of your current employer.
From our references: We may receive information about you from our employees or partners (such as recruitment service providers), when they believe your profile is of interest for our current or future vacancies.
From your references: If you provide us with references, we may collect information about you from them.
Data we create ourselves or in cooperation with you: Information about your application and profile is usually created by us, or by us in cooperation with you, during the recruitment process. This may for example include notes from interviews with you, assessments and tests made.
What about sensitive information?
We recognise the value in encouraging a diverse range of perspectives, skills, experience and knowledge at CoppaFeel!. Our charity is committed to the positive promotion of equality, diversity and inclusion in our staff, volunteer programmes and projects.
In order to monitor our progress in this area we may collect personal information of job applicants and volunteers using our Equal Opportunities Monitoring form. Some of the personal information that you may share with us may be very sensitive, including what is legally known as special categories of personal data. This personal information could be relating to your racial or ethnic origin, your health, religious or sexual orientation, sex life, political opinions, religious or philosophical beliefs. We lawfully collect this data as it is of substantial public interest. Submitting this data is entirely optional, is anonymous and is in no way linked to any application you have made. Staff at CoppaFeel! have had training on how to responsibly look after special category data.
How do we look after your personal information?
We take looking after your personal information seriously and take measures to protect your data against unlawful access and accidental loss or damage. These measures include:
Regular training for the CoppaFeel! team on responsible data handling
When necessary, disposing of or deleting your personal information in a secure way
Working with our IT providers to ensure they maintain appropriate IT security
Sometimes third parties that work on our behalf process information outside the European Economic Area (EEA), in countries that may not be subject to the Data Protection laws as here in the UK. In these instances, we assess the adequacy of their data protect standards and if necessary, ensure there is a contract in place that requires them to handle your personal information in line with UK privacy regulations.
Who do we share your personal information with?
We will only share your personal information with third parties when we are legally required to, or with third parties that we have appointed to work on our behalf when we have a legal basis to do so and they are under contractual obligations as data processors to only use your information as we instruct and for no other purposes. We will never share any personal information to third parties for their own purposes.
Examples of how we may share your recruitment data:
Our service providers: We share your personal data with our suppliers who provide services and functionality in our recruitment process. For example, this includes recruitment service providers and the supplier of our Career Site and related applicant tracking system.
Companies providing cookies on the Career Site: If you consent to it, cookies are set by other companies than us, who will use the data collected by these cookies in accordance with their own privacy policy. You can find information about which cookies this applies to in our Cookie Policy.
Regulatory bodies and/or law enforcement authorities to comply with a regulatory requirement: eg. health and safety or law enforcement authorities when we believe an individual may be in danger, or professional advisers and service providers such as accountant, auditors, HR and/or legal advisors.
Mergers and acquisitions: As part of the transfer of our assets, for example if CoppaFeel! merges or collaborates (on a temporary or permanent basis) with another organisation.
Technical: IT and other technical support companies to administer services and enforce any terms and conditions or agreements that may apply.
If you prefer that we do not share your information with third-party platforms, you can contact us by email on data@coppafeel.org or post at CoppaFeel!, Unit 4 Bickels Yard, 151-153 Bermondsey Street, London, SE1 3HA
How long do we keep your personal data for?
All individuals
Visitors
Candidates
If you are a Connecting Candidate (only), we keep your personal data for as long as you remain connected with us.
For other types of Candidates, we keep your personal data to decide if you are a suitable candidate for the relevant vacancy(ies) with us.
If you don’t succeed in the initial recruitment process, we keep your personal data for as long as needed to consider, and potentially contact you, for relevant future job openings.
If you are hired, we will keep your personal data during your employment, for other purposes than those stated above, which you will be informed of.
References
Your rights: How you can access, correct or delete your personal data
In this section, you will find information about the rights you have when we process your personal data. As described below, some of the rights only come into play when we process your personal data under a particular legal basis.
If you want to exercise any of the rights listed here, we suggest that you:
Visit the Data & Privacy page on our Career Site, where we offer features to let you exercise your rights;
Log in to your account with us, where you can use the settings in the account to exercise your rights; or
Contact us directly via email at data@coppafeel.org or by post at CoppaFeel!, Unit 4 Bickels Yard, 151-153 Bermondsey Street, London, SE1 3HA.
Under the Data Protection law Act 2018 you have the following rights:
You have a right to know about how we use and protect your personal information, (as set out in this policy).
You have the right to access to the personal information that we hold about you by making a ‘subject access request’. Please be aware that you will be asked to provide proof of identification.
You have the right to ask us to correct inaccurate data or incomplete data we hold on you. You may do so on our website here or by contacting us by email data@coppafeel.org or by post at CoppaFeel!, Unit 4 BickelsYard, 151-153 Bermondsey Street, London, SE1 3HA.
You always have the right to unsubscribe from any service where we rely on your consent for holding your personal information.
In certain circumstances you also have the following rights:
You have the right to restrict our use of your personal information and the right to object to your personal information being processed in certain ways.
You have the right to ask us to delete your personal information. Unless we have reasonable grounds to refuse to delete your personal information, we will securely delete the data in question within one month. The personal information may continue to exist in certain backups, but we will take steps to ensure that we honour your wishes and treat it as deleted.
You have the right to ask us to transfer your personal information to another person or organisation.
