Back to job vacancies

Privacy Policy

The company/organisation’s (company) careers site is powered by iKrut ( a web based recruitment application supplied by Zodo Ltd.

By submitting your application, you are agreeing for your information to be passed to that company/organisation.

Your personal information (and any additional details the company/organisation adds to your application) is stored on a secure database powered by servers within the UK. Data will not be kept for longer than is necessary in accordance with EU data protection regulations and any future contact we have with you will be for recruitment purposes only. Your details will be automatically deleted in 12 months time unless you give the company/organisation specific permission to keep them for a further period.

What personal data do we collect?

  • We collect and store the data you submit during the application process or the details you choose to submit into the talent pool of that employer. Typically this will be your contact information, experience and education, attachments, responses to screening questions but may include details on EEO monitoring question as well.
  • Your IP Address to identify where you are based
  • Your login details (email address and password) should you create a candidate portal.
  • Cookies, which allow us to understand the pages on our website that you visit.

We will maintain the confidentiality of and protect your information in accordance with our normal procedures and all applicable laws. We will only collect and process data in a fair and lawful manner. The personal data that we retain about you may include:

  • Information relating to references and records relating to your application.
  • Information about your health that is used to ensure compliance with health and safety and occupational health obligations when considering any health issues that may affect your ability to work to help us to accommodate any disability.
  • Recording racial or ethnic origin or religious beliefs to fulfil our statutory obligations to ensure equality of opportunity at work.
  • Information for security and fraud prevention purposes. We may in the course of your recruitment and from time to time during your career undertake appropriate security and credit reference checks. In some instances we may be required to provide certain information to a third party.

Why do we collect your data?

We collect your data so that the company can consider your application for a specific job you have applied to or for any possible opportunities in the future if you have submitted your details directly into their talent pool.

Your Personal Data could be transferred to a third-party supplier if the company uses such external services (background checks, testing providers). The responsibility to comply to the Data Protection laws falls on the company, and not Zodo. Your details are stored on Zodo’s UK based servers.

You have the right to access and the right to rectify your personal data, whether submitted as an application or otherwise, by sending the employer a written request. Zodo will not process any requests in connection with the adjustment or removal of personal data by a candidate. This can only be done by the company and you will need to contact the company directly to do that.

Your data may also be disclosed to a third party vendor contracted by Zodo with responsibility for maintenance and development work within iKrut’s servers or for the provision of additional services within the iKrut hiring platform. Zodo will not disclose your data to any other third party unless required to do so by law or regulators.

Zodo may also contact in order to gather information on the application process and issues you may have had at the time of submission.


Zodo does not sell, rent or lease your personal data to any third parties.


Decisions made on your suitability for any role you have applied to or any role the employer considers you for in the future are solely at the discretion of the employer.

Your rights:

  • You can choose to withdraw your application and request that the details are deleted. Please not the employer may wish to retain your details and applicable legislation in the country they are based may permit them to do this in certain circumstances.
  • You have the right to apply directly to the employer if you wish to circumvent iKrut
  • You have the right to edit your details though the employer may reserve the right to limit your ability to edit answers to screening questions if the employer considers your answers as part of the application process.

You confirm that information you submit as part of the job application process is complete and accurate. Providing false information during any of the steps of the application process will lead to your rejection.

The security of your data:

Our servers are hosted by Rackspace one of the world’s largest server hosting companies, which is fully compliant with all EU data protection security protocols.

The data centre is in the South East of the UK in an unmarked building, behind security fencing, with onsite security personnel and away from any major towns, flight paths, rivers or anything likely to cause damage to the building and therefore the servers.

The data centre has the most up to date security and safety features like fire suppression systems, biometric access controls and is above ground in case of flooding.

  • Access to the data centre is biometrically controlled.
  • Our servers are protected by a firewall on both the hardware and software with an additional virtual firewall provided by Cloudflare.
  • We have redundant hard drive backup in case 1 hard drive fails.
  • Incremental data is backed up each night and stored offsite.
  • Access to the system as a user is through secure logins only allocated by someone within your organisation. You cannot get into the system without those. It's important that you ensure those logins are tightly controlled and anyone no longer working for you is deleted as a user from the system without undue delay.
  • All applicant data is automatically deleted 9 months from the date of submission. This is in accordance with good data protection guidelines and you may only keep the data for longer in iKrut if the candidate gives you specific, written permission.
  • We conduct an annual penetration test to ensure there are no vulnerabilities in our code that could be hacked externally.
  • We do not download your data, store it anywhere other than within our servers or forward it to anyone. It’s your data, which we look after.
  • No data or user passwords are downloaded or ever taken outside of the office, which itself is locked.
  • Access to the server can only be made by password protected procedure by machines falling within designated IP addresses.
  • All devices (laptops and desktops) that could access the server are password protected
  • Candidates applying to a job powered by iKrut do so via the secure https:// pathway

Please note that the laws of the country you are based in at the time of the submission of your personal data may also be applicable.

Changes to our Privacy Policy

We reserve the right to change this Privacy Policy and our Terms of Use at any time. We will notify you of any material changes to our Privacy Policy and when they will come into effect.


Disclosure of Your Personal Data

Zodo may disclose Your Personal Data, without any notice provided to the candidate, only if required to do so by law or in the good faith belief that such action is necessary to:


  • conform to applicable law or to comply with any ongoing legal processes served on Zodo
  • protect and defend the rights or property of Zodo
  • protect the personal safety of users of Zodo or the public


Under the terms of GDPR, we need your authority to retain your personal data. By submitting this application you are confirming that the information you have provided is true and complete and agree to the processing outlined above.

Important - In addition to the policy stated above:

St. James's Place and/or any subsidiary and affiliated companies including Practices within the St. James's Place Partnership will use any personal data collected via our careers site for recruitment purposes only and should your application be successful, for purposes connected with your employment. By submitting your application, you are agreeing for your information to be passed to St. James's Place and/or any subsidiary and affiliated companies including Practices within the St. James's Place Partnership.