Effective Date: 10th November 2025
BCR Group respects your privacy and is committed to protecting the personal data you share with us during the recruitment process. This notice explains how we collect, use, and protect your information when you apply for a position with BCR Group, whether directly, through our website, or via a recruitment agency. It also outlines your rights under the Data Protection (Jersey) Law 2018 (“DPJL”).
This notice applies to all job applicants, potential candidates, and individuals who have expressed an interest in working with us. It should be read alongside our main Privacy Notice, which describes our wider data protection practices.
BCR Group comprises the following entities registered with the Jersey Financial Services Commission (JFSC) and the Jersey Office of the Information Commissioner (JOIC):
BCR Group Limited acts as the data controller for recruitment-related personal data.
You can contact our Data Protection Officer regarding any questions or concerns about this notice at:
Data Protection Officer
BCR Group, 12 Hill Street, St Helier, Jersey, JE2 4UA
Email: dpo@bcrlawllp.com
Alternatively, you may contact our external Data Protection Officer, Paul Byrne of Propelfwd, at dpo@propelfwd.com.
If you are unhappy with how we handle your personal data, you may also contact the JOIC at enquiries@jerseyoic.org or on +44 (0)1534 716530.
We collect and process personal data relevant to your application and our recruitment processes. This may include your name, address, email address, and telephone number, as well as details about your education, qualifications, professional experience, and employment history.
We may also collect information provided in your CV, covering letter, or other communications, including references, interview notes, or test results. If you are invited to interview or offered a position, we may collect additional data such as proof of identity, eligibility to work in Jersey, and other pre-employment checks required by law or firm policy.
Where appropriate, and only, when necessary, we may process special category data such as information about health, disability, or criminal records, but only where permitted under the DPJL and relevant employment laws.
Your data may be collected directly from you through our careers page, hosted by Webflow, or by email correspondence with our HR team. It may also be provided by third parties such as recruitment agencies, referees, or background check providers.
We may also obtain publicly available professional information, such as from LinkedIn, where this is relevant to your application.
Your personal data is used only for recruitment and employment-related purposes. This includes assessing your suitability for a role, communicating with you about your application, verifying qualifications or background information, arranging interviews, and maintaining records of the recruitment process.
We process your data because it is necessary to take steps at your request before entering into a contract of employment. We may also rely on our legitimate interests in recruiting qualified candidates, on compliance with legal obligations such as verifying your right to work, or on your consent where required.
If your application is unsuccessful, we may retain your information for a limited period in case a suitable future opportunity arises, but only with your consent.
Your personal data will be shared internally with those involved in the recruitment process, such as HR staff, hiring managers, and relevant partners. It may also be shared with third-party service providers who support our recruitment and IT systems.
These may include Webflow, which hosts our careers application forms and securely stores submitted data; Comtech Solutions, provider of YourDataSafe, our secure data governance platform used to manage and track data processing records; and Propelfwd, which provides Data Protection Officer services.
All third parties are required to maintain strict confidentiality and process your data only according to our instructions and applicable data protection laws. We will not sell or rent your personal data to any organisation.
Some of our service providers, such as Webflow, may process or store personal data outside Jersey or the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission and appropriate risk assessments in line with JOIC guidance.
We use appropriate technical and organisational measures to keep your personal data secure and to prevent unauthorised access, alteration, or loss. Access to personal data is restricted to those who require it for legitimate business purposes. All staff with access to candidate data receive data protection training and are bound by confidentiality obligations.
In the unlikely event of a data breach that could affect your rights or freedoms, we will inform you and the Jersey Office of the Information Commissioner as required by law.
We keep personal data only for as long as necessary to complete the recruitment process and to meet our legal and business obligations.
If your application is successful, the information you provide during recruitment will form part of your personnel record and will be retained in accordance with our internal HR data retention schedule.
If your application is unsuccessful, we will retain your personal data for up to six months after the recruitment process concludes. This allows us to respond to any follow-up queries or to consider your application for similar roles that may arise shortly afterwards.
With your consent, we may keep your application data for a longer period, typically up to twelve months, so that we can contact you about future opportunities that may be of interest. You can withdraw this consent at any time by contacting us at dpo@bcrlawllp.com.
After the retention period expires, or if you withdraw your consent earlier, your data will be securely deleted or anonymised in accordance with our Data Retention Policy.
You have rights under the DPJL, including the right to access your personal data, request correction or deletion, object to processing, restrict processing, and request the transfer of your data to another organisation.
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing carried out before it was withdrawn.
To exercise your rights, please contact our Data Protection Officer at dpo@bcrlawllp.com or complete this on-line form. We will acknowledge your request within 72 hours and respond within four weeks, unless an extension is necessary in complex cases.
If you are dissatisfied with our response, you may contact the JOIC at 2nd Floor, 5 Castle Street, St Helier, Jersey JE2 3BT, or by email at enquiries@jerseyoic.org.
We may update this notice from time to time to reflect changes in our recruitment practices or in legal requirements. The most recent version will always be available on our website or provided upon request.