Applicant Privacy Notice

Last updated: November 29, 2025

This Applicant Privacy Notice explains how Lucashousestudios Ltd (“we”, “our”, “us”) collects and processes your personal data when you apply for a role with us. This notice applies to all job applicants, including speculative submissions.

1. Who We Are

Lucashousestudios Ltd
Registered Office: 5 Pether Close, Chichester, West Sussex, PO19 3GQ
Email: app@lucashousestudios.co.uk

We act as the Data Controller for all personal data processed during the recruitment process.

2. Personal Data We Collect

During the application process, we may collect:

Full name
Email address
Position applied for
Cover message or supporting information
CV, résumé, portfolio links, or work samples
IP address and submission timestamp
Technical and behavioural data from Google reCAPTCHA (for fraud/spam protection)

We do not request sensitive personal data (e.g., health information, ethnicity, religious beliefs). Please avoid sending any unnecessary sensitive information.

3. How We Use Your Data

Your application data is used for:

Assessing your suitability for the role
Contacting you regarding your application
Reviewing your skills, qualifications, and experience
Maintaining website and form security

We do not use applicant data for advertising, marketing, or unrelated purposes.

4. Legal Bases for Processing

Your data is processed under the following lawful bases:

Consent – When you voluntarily submit your application.
Legitimate interests – To assess your suitability for roles and ensure system security.
Legal obligation – To comply with employment and data protection laws, where applicable.

5. Who Has Access to Your Data

Your personal data may be accessed by:

The internal recruitment team at Lucashousestudios Ltd
IONOS UK (our secure email hosting provider)
Google (strictly for reCAPTCHA anti-spam verification)

We do not sell, rent, or share applicant data with third parties for marketing.

6. International Data Transfers

Google reCAPTCHA may process data in the United States or other countries. These transfers are safeguarded by Google’s implementation of Standard Contractual Clauses (SCCs) and other approved UK GDPR mechanisms.

7. How We Store and Protect Your Data

We take appropriate measures to protect your personal information, including:

Encrypted email transmission where supported
Restricted-access inboxes and secure internal storage
Temporary server-side storage of uploaded CVs before forwarding
Immediate deletion of uploaded CV files after processing
Use of Google reCAPTCHA to prevent automated abuse

8. Data Retention

8.1 CVs and uploaded files

Uploaded CVs and attachments are stored temporarily in a secure, non-public server directory solely for processing. They are deleted immediately after being forwarded to our internal hiring inbox.

8.2 Application metadata

We may retain a minimal record of your application (name, email, position applied for, IP, timestamp) for up to 12 months for administrative and security purposes unless a longer period is required by law.

9. Automated Decision-Making

We do not use automated decision-making or profiling in our hiring process. Every application is manually reviewed.

10. Your Rights Under UK GDPR

You have the right to:

Request access to your personal data
Request correction of inaccurate or incomplete data
Request deletion of your data (where appropriate)
Withdraw your consent at any time
Restrict or object to certain types of processing
Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO Website: https://ico.org.uk

To exercise your rights, please contact us at:
app@lucashousestudios.co.uk

11. Withdrawal of Consent

You may withdraw your consent at any time. Upon withdrawal, we will delete your application data unless we are legally required to retain it.

12. Changes to This Notice

We may update this Applicant Privacy Notice to reflect changes in our hiring practices or legal requirements. Any updates will be posted on this page with a new “Last updated” date.