Privacy Notice for Job Applications

1. Who we are and what we do

Quadrangle is an independent research and strategy business which helps clients create, use, and communicate insight to drive and inspire change. This often involves us conducting studies on our clients' behalf with their customers, prospective customers and the wider general public to improve their understanding of what people like, dislike, are satisfied with or want in the future.

We also undertake research to help our clients communicate better and more effectively with their customers. We conduct surveys using a variety of methodologies including by telephone, face to face, online, by email and by SMS.

Quadrangle is a trading name of Quadrangle Research Group Limited, a company incorporated in England with Company Number 8064640.

2. About this Privacy Notice

Your privacy is important to us, and we ask that you read this Privacy Notice carefully as it contains important information on who we are, how and why we collect, store, use and share your personal data, your rights in relation to your personal information and on how to contact us and supervisory authorities in the event you have a complaint.

This privacy notice relates to personal data of:

• Visitors to Quadrangle controlled websites, and if you are visiting one of our websites, please also refer to our Cookie Notice;
• Applicants for jobs at Quadrangle Research Group.

3. What is personal data?

Under Data Protection laws of the United Kingdom, the term "personal data" means any information relating to a person who can be directly or indirectly identified. There are "special categories" of more sensitive personal information which require a higher level of protection. In this Privacy Notice, "data protection laws" means all applicable UK data protection legislation, including the EU General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA), the UK General Data Protection Regulation (UK GDPR), and the Data (Use and Access) Act 2025 (DUAA).

3.1 Why did you contact me in the first place?

As a business we may have your personal data because you have applied for a role at Quadrangle. You may have applied to us directly about a specific vacancy, speculatively or via a recruitment agent.

3.2 Information we collect

We collect personal information in order to manage your application. We may collect personal information that can identify you, such as:

• your name, job title, company name, your work or home address, your work or personal email address and your telephone number;
• details of your emergency contact;
• your education and employment history and current employment information;
• your right to work status and documents regarding your eligibility to work in the UK e.g. passport, National Insurance number;
• information and results of any training, tests or tasks you complete as part of the recruitment process;
• personal and employment references from contact details you provide to us;
• details of any health conditions, allergies or disabilities you choose to share with us; or
• any other personal information that you include in your application.

It is important that the personal information we hold about you is accurate. Please keep us informed if your personal information changes during the course of the recruitment process.

3.3 How we use your information

Unless specified otherwise, the legal basis for the processing of your personal data during the recruitment process is the legitimate interests of the company, namely the efficient management of the recruitment process. Purposes include:

• to respond to requests you may make of us, including updating you regarding the status of your application;
• to make any necessary arrangements for interviews;
• to assess your application;
• to assess and record information about your qualifications and experience as part of the selection process;
• to manage the recruitment exercise effectively to decide to whom to offer a job;
• to assess whether any reasonable adjustments are required to any aspect of the recruitment process in respect of any disability;
• to resolve any disputes;
• to send you future reports and newsletters written by Quadrangle;
• to comply with our obligations under any contracts with recruitment agencies.

3.4 Who we share the information with

From time to time we may employ other companies and individuals to perform functions on our behalf. We may use third-party AI tools or applications to carry out tasks such as analysing data, drafting, summarising and transcribing information, identifying trends or themes, generating ideas. Third-party AI tools or applications are vetted prior to use and the outputs are not used for automated decision-making.

We will not sell your personal data to third parties.

4. Quadrangle as a Data Controller

4.1 Our role as a Data Controller

We will only process data as outlined in Section 3.3. You may contact Quadrangle in order to invoke your rights as a data subject under applicable laws.

4.2 Information we must provide you

The purposes of the processing are: to evaluate your job application; to contact you regarding a job application (including speculative applications); to verify your identity; and to undertake the processing activities identified in Section 3.3.

If you no longer wish to receive communications from us, you may opt-out by emailing us at recruitment@quadrangle.com.

4.3 Cross-border flows of personal data

Quadrangle conducts research and has partners globally. We will not transfer personal data of citizens of the UK and EU outside of the UK and EU unless this has been notified to you and any transfer is under a contract which includes the use of UK and EU approved standard contractual clauses (Model Clauses).

4.4 Data storage, data access and data retention

We will retain personal data for as long as needed to evaluate your application and conclude the recruitment process and to contact you regarding job opportunities at Quadrangle that may interest you in the future. Specifically:

• If you applied for a specific role and are unsuccessful, we will retain your contact details, employment and education history, CV/application form and any notes for a period of up to 12 months after the recruitment process has finished;
• If you applied speculatively and we have no suitable vacancies we will retain your details for a period of up to 12 months;
• If your application is successful and you accept a job offer, the retention period will be informed to you as part of your employment onboarding;
• We may keep a record of your name and the method of your application for up to 6 years to comply with our contracts with recruitment agencies.

4.5 Sharing with Service Providers

We may share your information with third parties who provide services on our behalf, including applicant tracking services, personality profiling services, recruitment agencies and legal advisers.

4.6 Tracking technologies

Quadrangle and its partners may use cookies or similar technologies to analyse trends, administer their websites, track users' movements around the website, and to keep track of the domains from which people visit.

4.7 Disclosures required by law or to fulfil a business transition

We may also disclose your personal data as required by law. If Quadrangle is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified.

4.8 Notification of changes

We may update this Privacy Notice to reflect changes to our information practices.

4.9 User data supplementation

We may receive information about you from other sources including from your referees. This helps us to manage our recruitment process.

5. Security measures

Quadrangle operates under a strong security and privacy regime. We have successfully undergone third party auditing in relation to our Information Security Management System, and we are accredited by the British Assessment Bureau that we have met the requirements of ISO 27001 in relation to information security.

Quadrangle conducts all research in accordance with the Market Research Society (MRS) code of conduct.

6. Privacy questions, access rights, incident reporting

If you have any questions about how we use your personal data or about this Privacy Notice, you can contact Quadrangle's Data Protection Officer using the contact details in section 1.

If you are unhappy with how we have handled your personal data, you have the right to raise a concern. Please see our Data Protection Complaints Policy for more details about this process.

If you have an unresolved privacy or personal data use concern, you can complain to the Information Commissioner's Office (ICO):

Phone: 030 3123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Online: https://ico.org.uk/concerns