Candidate Privacy Notice
This Candidate Privacy Notice explains how Elida Beauty collects, uses, and protects the personal information you provide to us when applying for a role. It also explains who we share your information with and your rights as a candidate. For more information on your rights and how to exercise them, please see the Your Rights section later in this notice.
This notice applies from the point you submit an application or enquiry to us. If your application is successful and you join us as an employee, you will receive a separate Employee Privacy Notice, which covers the processing of your personal data during your employment.
This notice does not form part of any offer of employment or contract and may be updated from time to time. Where we make material changes, we will update this page accordingly.
Who we are
This Privacy Notice applies to the use and processing of personal information collected by Elida Beauty Group during recruitment. It applies to the following companies:
TIGI International Limited t/a Elida Beauty, TIGI Linea Corp d/b/a Elida Beauty, TIGI Australia PTY Ltd, Elida Beauty France SAS and Elida Beauty Canada Inc.
Wherever you see the words “we”, “us”, and “our” in this notice, these words refer to the Elida Beauty entity to which you are applying. As the data controller for your personal data during the recruitment process, that entity is responsible for deciding how your personal data will be processed.
If you have any questions about your personal data or how we use it, please get in touch with us at legal@elidabeauty.com.
What information do we collect from you?
Personal data means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
During the recruitment process, the personal information we may collect and hold about you includes:
- your name, address, and contact details, including email address and telephone number;
- your date of birth;
- your CV, covering letter, and details of your work history, qualifications, and references;
- information about your right to work in the relevant jurisdiction;
- identity documents, such as your passport or driving licence, for right-to-work verification purposes;
- information provided by referees nominated by you;
- notes and assessments made during interviews and assessment processes;
- information about any criminal convictions or proceedings, where we are legally permitted to request and process this; and
- any other information you choose to share with us as part of your application.
We may also receive personal data about you from third parties during the recruitment process. This includes information provided by recruitment agencies who introduce you to us, referees you have nominated, and identity or right-to-work verification providers. Where we receive your data from a third party, we will handle it in accordance with this notice.
We also hold certain categories of more sensitive personal data — sometimes called “special categories” — which require a higher level of protection. Please see the section on Special categories of personal data below for further details.
How will we use the information we collect about you, and what is our legal basis for doing so?
The personal information you provide will be used for the following purposes. For each purpose, we have identified the legal basis on which we rely.
Assessing your application and managing the recruitment process
We use your personal information to assess your suitability for the role you have applied for, to conduct interviews and assessments, to obtain references, and to make recruitment decisions. For internal candidates, we may also review relevant information held in our HR systems.
Legal basis: Steps before entering into a contract at your request (Article 6(1)(b) UK/EU GDPR) and legitimate interests in managing our recruitment process effectively (Article 6(1)(f) UK/EU GDPR).
Right-to-work and background checks
We are required by law to verify your right to work before you commence employment. Depending on the role and jurisdiction, we may also carry out background checks, including, where legally permitted, checks on unspent criminal convictions, fraud checks, and Disclosure and Barring Service (DBS) checks or local equivalents.
Legal basis: Legal obligation (Article 6(1)(c) UK/EU GDPR) and legitimate interests (Article 6(1)(f) UK/EU GDPR) where checks are conducted in connection with the nature of the role.
Reasonable adjustments
Where you inform us of a health condition or disability during the recruitment process, we will use that information only to assess whether any reasonable adjustments to the recruitment process or working environment are necessary, and to comply with our obligations under applicable equality and employment law.
Legal basis: Legal obligation (Article 6(1)(c) UK/EU GDPR); and, where health data is involved, the employment law condition under applicable data protection legislation (Schedule 1 DPA 2018 for UK candidates; Article 9(2)(b) EU GDPR for candidates in France and other EEA jurisdictions).
Equal opportunities monitoring
We may invite you to provide diversity information — for example, relating to your ethnic origin, gender, or disability status — for equal opportunities monitoring. Providing this information is entirely voluntary and will have no bearing on how your application is assessed. Where you choose to provide diversity information, it will be used only for statistical monitoring purposes and will be anonymised before any reporting takes place.
Legal basis: Explicit consent (Article 9(2)(a) UK/EU GDPR). You may withdraw your consent at any time without affecting your application by contacting us at legal@elidabeauty.com.
Communicating with you about your application
We will use your contact details to communicate with you about the status of your application, invite you to interviews or assessments, and notify you of the outcome.
Legal basis: Steps before entering into a contract (Article 6(1)(b) UK/EU GDPR) and legitimate interests (Article 6(1)(f) UK/EU GDPR).
Talent pipeline — with your consent only
If your application is unsuccessful, we may ask whether you would like to be considered for future suitable roles. If you consent, we will retain your details for this purpose for a limited period. Your consent is entirely voluntary, and you may withdraw it at any time by contacting us at legal@elidabeauty.com.
Legal basis: Consent (Article 6(1)(a) UK/EU GDPR).
Special categories of personal data
Certain categories of personal data are regarded as particularly sensitive and require additional protection under applicable data protection laws. In the context of recruitment, this may include information relating to your health or disability (in connection with reasonable adjustments) and diversity information you choose to provide voluntarily.
Criminal records and information about criminal offences or proceedings are subject to separate and equally strict requirements. We process such information only where we are legally permitted to do so in connection with the role, and only to the extent required by applicable law.
Where the EU General Data Protection Regulation or UK GDPR applies, special categories of personal data include information relating to racial or ethnic origin, religious or philosophical beliefs, physical or mental health, trade union membership, genetic or biometric data processed for identification purposes, and sex life or sexual orientation. Where other data protection laws apply, equivalent definitions under those laws will apply.
We process special category data in the recruitment context only where one of the following conditions is met:
- employment law obligations — where processing is necessary to carry out our obligations under employment, equality, or health and safety law;
- explicit consent — where you have chosen to provide diversity or health information voluntarily, and we have obtained your explicit, separately given consent; or
- legal claims — where processing is necessary to establish, exercise, or defend legal claims arising from the recruitment process.
What information do we share, and with whom do we share it
We do not sell your personal data to third parties.
We may share your personal data with the following categories of recipients where necessary and in accordance with this notice:
Other companies in our group
We may share your personal data with other companies within the Elida Beauty group when necessary for group recruitment administration or IT infrastructure. Group companies will process your data either as our processors acting on our instructions, or as independent controllers, determining the purposes of processing themselves, with appropriate agreements in place in either case.
Service providers
We share your personal data with third-party service providers who support our recruitment process. These include the providers of our recruitment platform, background screening and verification, and IT and security systems. These parties process your data on our behalf and are contractually required to handle it in accordance with applicable data protection law.
Recruitment agencies
Where a recruitment agency has introduced you to us, we may share information with that agency in connection with your application. Recruitment agencies may act as independent controllers or processors depending on the nature of the arrangement, and you should also refer to their own privacy notice.
Business transfers and corporate transactions
We may disclose or transfer your personal data in connection with any merger, acquisition, restructuring, sale of company assets, or other corporate transaction involving Elida Beauty or any company within our group. In such circumstances, candidate data may be among the assets reviewed during due diligence and, if the transaction proceeds, transferred to the acquiring party. Where this occurs, we will take reasonable steps to ensure that your data continues to be handled consistently with this notice and that the recipient is subject to appropriate data protection obligations.
Regulatory and statutory bodies
We may share your personal data with government bodies, regulatory authorities, immigration authorities, and law enforcement agencies when required by law — for example, in connection with right-to-work verification obligations.
International transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), the United Kingdom, or your country of residence. We ensure that such transfers take place only where appropriate safeguards are in place in compliance with applicable data protection laws. Depending on the destination country, the safeguards we use may include:
- an adequacy decision by the relevant authority — for example, by the European Commission or the UK Secretary of State;
- standard contractual clauses approved by the relevant supervisory authority;
- the UK International Data Transfer Agreement (UK IDTA), where applicable; or
- Other lawful transfer mechanisms permitted under applicable data protection legislation.
You can request further information about the safeguards we have in place for international transfers by contacting us at legal@elidabeauty.com.
Security measures
We are committed to safeguarding the personal information you entrust to us. We have implemented appropriate technical and organisational security measures to prevent accidental loss, misuse, unauthorised access, alteration, or disclosure of your personal data. These measures are reviewed and updated regularly to reflect evolving security standards and risks.
Access to your personal data is restricted to those within our organisation and to service providers who have a legitimate need to process it for the purposes described in this notice.
If you become aware of or suspect a security incident involving your personal data — such as receiving suspicious communications purporting to be from Elida Beauty — please get in touch with us immediately at legal@elidabeauty.com.
How long will we keep my personal information?
We will retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law.
The criteria we use to determine appropriate retention periods for candidate data include:
- the outcome of your application — where your application is unsuccessful, we will retain your personal data for a limited period following notification of that outcome, in accordance with applicable law and regulatory guidance in the relevant jurisdiction;
- applicable statutory limitation periods — for example, the primary limitation period for employment tribunal claims in the UK, and the maximum retention periods set out in CNIL guidance for candidates in France;
- any consent you have given to be included in our talent pipeline — where you have consented, we will retain your data for the period described at the time consent is given, after which it will be deleted unless you renew your consent; and
- applicable mandatory record-keeping obligations under the laws of the relevant jurisdiction.
Where your application is successful, your candidate data will be transferred to your employee record and retained in accordance with our Employee Privacy Notice.
Where your personal data is no longer required, we will securely delete or anonymise it. If you have any questions about how long we retain your data, please get in touch with us at legal@elidabeauty.com.
Additional information for California residents
This section applies to candidates who are residents of California and supplements the information in this notice. It is provided in accordance with the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (together, “CCPA/CPRA”) and any associated regulations.
Categories of personal information collected
In the twelve months before the date of this notice, we have collected the following categories of personal information from California candidates:
- Identifiers: such as name, address, email address, telephone number, and date of birth.
- Personal information as defined in the California Customer Records Act (Cal. Civ. Code § 1798.80(e)), including name, address, telephone number, and employment history.
- Protected classification characteristics under California or federal law, including age, race, ethnic origin, gender, and disability status where voluntarily provided.
- Employment-related information: including qualifications, employment history, and references.
- Education information: qualifications and training records.
- Sensitive personal information: including government-issued identification numbers where required for right-to-work checks, and health or medical information where relevant to reasonable adjustments.
Purposes for which personal information is used
We use the personal information described above for the purposes set out in this notice, including: assessing applications and making recruitment decisions; conducting right-to-work and background checks; managing reasonable adjustments; equal opportunities monitoring (with consent); and communicating with you about your application.
Sale and sharing of personal information
We do not sell your personal information to third parties. We do not share your personal information for cross-context behavioural advertising.
Sensitive personal information
We collect and use sensitive personal information only for the purposes permitted by applicable law in connection with the recruitment process, including verifying your identity and right to work, and assessing reasonable adjustment requirements. We do not use sensitive personal information to infer characteristics about you beyond what is necessary for the recruitment process.
Your rights as a California resident
Subject to certain exceptions and limitations, California residents have the following rights under CCPA/CPRA in relation to personal information that falls within the scope of those laws:
- Right to know: You may request information about the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the purposes for which it was used, and the categories of third parties with whom it was shared.
- Right to delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
- Right to correct: You may request that we correct inaccurate personal information we hold about you.
- Right to limit use of sensitive personal information: You may request that we limit our use of sensitive personal information to purposes permitted under CCPA/CPRA.
- Right of no retaliation: We will not discriminate against you in the recruitment process for exercising any of your CCPA/CPRA rights.
To exercise any of these rights, please get in touch with us at legal@elidabeauty.com. We may need to verify your identity before processing your request and will respond within the timeframes required by applicable California law.
What are your rights?
As an individual whose data is being processed, you have rights under applicable data protection laws. The specific rights available to you will depend on the jurisdiction in which you are applying. These rights include:
- The right to be informed about how we collect and use your personal data — which this notice is intended to fulfil.
- The right of access — you can request a copy of the personal data we hold about you at any time.
- The right to rectification — you can ask us to correct any personal data we hold about you that is inaccurate or incomplete.
- The right to erasure — you can ask us to delete your personal data where we no longer have a lawful reason to retain it. Please note that we may be required to retain certain records for defined periods, and the right to erasure does not apply where retention is required by law or for the establishment, exercise, or defence of legal claims.
- The right to restrict processing — you can ask us to restrict the processing of your personal data in certain circumstances, for example while you contest its accuracy or while we consider an objection you have raised.
- The right to data portability — where we process your data by automated means based on consent or steps before a contract, you can request a copy of your data in a structured, commonly used, machine-readable format.
- The right to object — where we rely on legitimate interests as our lawful basis, you have the right to object to that processing at any time on grounds relating to your particular situation.
- Rights in relation to automated decision-making and profiling — you have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you. We do not make recruitment decisions based solely on automated processing; human review is applied before any decision is communicated.
- The right to withdraw consent — where we rely on your consent (for example, for diversity monitoring or talent pipeline retention), you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. Please get in touch with us at legal@elidabeauty.com to withdraw.
- The right to lodge a complaint with a supervisory authority — you have the right to raise a concern with the data protection supervisory authority in your jurisdiction at any time. This includes the Information Commissioner’s Office (ICO) for candidates in the UK, the Commission Nationale de l’Informatique et des Libertés (CNIL) for candidates in France, and the relevant authority in other jurisdictions. We would always welcome the opportunity to address your concerns directly in the first instance.
At Elida Beauty, we aim to resolve any query or concern you may have about how we use your information. If you have any questions, comments, or complaints regarding this privacy notice or our use of your data, please get in touch with us at legal@elidabeauty.com.
Changes to our Privacy Notice
Elida Beauty keeps this privacy notice under regular review and will update it from time to time to reflect changes in our recruitment practices, applicable law, or regulatory guidance. We encourage you to review this page periodically for the latest information.
This privacy notice was last updated in May 2026.