In order to recruit candidates, Dionach collects and processes personal information about you, the candidate.
Personal information means any information about you from which you can be identified, but it does not include information where your identity has been removed (anonymous data).
As the ‘controller’ of personal information, we are responsible for how that data is managed. The General Data Protection Regulation (GDPR), which applies in the United Kingdom and across the European Union, sets out our obligations to you and your rights in respect of how we manage your personal information.
As the ‘controller’ of your personal information, we will ensure that the personal information we hold about you is:
If you have any questions about this privacy policy or would like further explanation as to how your personal information is managed, then please contact us (see how to contact us below).
Dionach may process several different categories of personal data about candidates as part of our recruitment and screening processes. The information we collect may come directly from you, from your interactions with our recruitment systems, from publicly available sources, or from third‑party background‑screening providers (where relevant).
1. Identification and Contact Information
We may collect and process:
2. Application and Employment‑Related Information
This includes:
3. System and Communication Data
When interacting with our recruitment systems (such as our Applicant Tracking System), we may process:
4. Verification and Compliance Information
Where applicable to the role or required by law, we may collect:
5. Equal Opportunities and Monitoring Information
Where collected — and only with your explicit consent — we may process optional diversity‑monitoring information, including:
6. Publicly Available Professional Information
Where relevant for recruitment, we may review:
Special Category Data
Some of the information we process is classified as ‘special category data’, which is more sensitive in nature. Where processed, we have a heightened duty of care and only do so where necessary and lawful. This may include:
Special category data is handled with enhanced security measures and is only processed where strictly necessary for recruitment, legal obligations, or equality‑monitoring purposes (with consent).
In order to determine suitability for a role at Dionach we will process personal data for the following purposes:
To operate our business and manage our recruitment processes, we rely on third‑party service providers who support us in processing your personal information. These third parties may have access to, or a duty of care over, your data in order to carry out their services on our behalf. They include:
All third parties are required to process your personal information only in accordance with our instructions and in compliance with applicable data‑protection laws.
We will retain your personal data for a period of 18 months following the recruitment process decision. Please email us if you wish us to retain your details for longer if you wish to be considered for future opportunities as they arise.
You have the following rights:
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under the GDPR.
The confidentiality and security of your information is of paramount importance to us. We have appropriate organisational and technical security measures in place to prevent personal information from being accidentally lost, used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
We hope that we can resolve any query or concern you raise about our use of your information. Our contact details are below.
The GDPR also gives you right to lodge a complaint with a supervisory authority. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/make-a-complaint or by phoning 0303 123 1113.
Please contact us if you wish to exercise one of your privacy rights or to complain by email at hr@dionah.com or by telephone on 01865877830. Our address is Dionach Ltd, Unipart House, Garsington Road, Oxford, OX4 2PG.
Policy Last Updated: 2026-01-23