Our HR Privacy Policy

Here at OnePlusOne, we are always looking for great new talent to join our professional team. Our HR Privacy Policy details how we process your data when you participate within our recruitment events or apply via a third-party recruitment solution.

Our Policies
Two images, one showing a couple under an umbrella and the other showing two mums holding their child's hand.

Last Updated: August 2023

This privacy policy governs data collection and processing related to the HR processes of OnePlusOne ("we", "us" or “our”).

This policy covers the information you share with us and/or which may be acquired or produced during the application or recruitment process. If you are offered and accept employment, the information collected during the application and recruitment process will become part of your employment record.

By applying for a job opening, you ("you", or the "User") agree to the terms of this Privacy Policy. This privacy explains what information we collect and why we collect it; how we use that information; and how to access and update that information.

Please note that your use of OnePlusOne websites and services is governed by the general Privacy Policy and our service terms and conditions if any.


We define Personal Information (or "your information") in the following manner: Any information that you provide to us about yourself while using the service that could help someone else identify you as an individual entity. This may include information such as your name, phone number, location, IP address, system locale and preferences, picture, etc.

We define the following domains "www.oneplusone.org.uk", “www.indeed.com” and "www.breathehr.com" as “Career Site”. However, we may from time to time use a different recruitment provider which should also be defined as "Career Site".

What personal information is collected

Here is a summary of the Personal Information we collect:

Why do we collect personal information

We collect and process your information where it is necessary in order to take steps, at your request, to potentially enter into a contract of employment with you. We also seek your consent to process your personal information in specific circumstances to comply with legal obligations.

How your personal information may be used

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. We use encryption for data storage and data transfer using SSL. Access to certain data is controlled through access management controls.

Your information may be used for the following purposes:

Who may have access to your information

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page, and the updated Privacy Policy will be effective from the date of posting.

We will never sell, rent or loan any personal information to any third party. The following parties may have access to your personal data under certain conditions.

Your information may be shared with our employees, contractors, affiliates, subsidiaries, in relation to the purposes described above.

Governmental & Professional Services
Our charity is registered in the United Kingdom. We are therefore subject to UK legislative texts on data protection and privacy. We may also be required to disclose your information to external third parties such as:

Service providers
We primarily use “BreatheHR” and “Indeed” to host our Career site. The data is hosted within the UK/EU. You can learn more about the security measures taken by “BreatheHR” and “Indeed” to protect your data on their website. You can also find their associated Data Protection Agreements.

We may use additional recruitment portals and online services as part of our recruitment events. As such, we always advise our applicants to read the privacy policies of those additional services before submitting any data. We will link our HR Privacy Policy within the job advertisements on all portals used.

We will also share your personal information with other third parties to detect, prevent or otherwise address fraud, security audits and compliance or technical issues.

How long we retain your information

We take appropriate steps to protect information about you that is collected, processed, and stored as part of the application and recruitment process.

You can also edit, delete and get access to personal information that we hold within 60 days of any request you make by contacting us: privacy@oneplusone.org.uk

We are committed to delete personal information when the retention of data concerning you is no longer justified, and we have no legitimate reason (e.g., legal obligations) that justifies the retention of your data. Please note, however, that we may retain some information if required by law or as necessary to protect ourselves from legal claims.

How do we protect your data

Due to the sensitive nature of the information, we work hard to prevent unauthorised access to or unauthorised alteration, disclosure or destruction of information we hold. In particular:

What are your Data Protection Rights

By law, under the GDPR regulations, you are entitled to the following:

If you wish to exercise any of your Data Protection Rights above, please contact us using the following email address: privacy@oneplusone.org.uk

Changes to this Policy

We may change this policy from time to time. We will post any changes to this policy on this page. Each version of this policy is identified at the top of the page by its last updated date.