Home/Legal/Candidate Privacy

Candidate privacy notice

Last updated: 2 November 2026

This notice explains how the Cedarstone Research Group uses the personal data of job applicants and Emerging Talent participants.

The controller is Cedarstone Research LLC, registered with the Dubai Multi Commodities Centre (DMCC) Free Zone Authority, United Arab Emirates, registered office Office 1801, Churchill Tower, Business Bay, Dubai, United Arab Emirates. Contact: info@cedarstoneco.co.uk.

Data we collect

Contact details; CV, education and employment history; right-to-work information; interview notes and exercise results; references; for Emerging Talent, programme attendance, performance and portfolio work; and equal opportunities data (optional and anonymised).

How we use it, and our lawful bases

PurposeLawful basis
Assessing applications for roles across the Cedarstone Research GroupSteps prior to a contract; legitimate interests
Running the Emerging Talent programme and providing referencesLegitimate interests
Introducing you to prospective employers in our networkYour consent (withdraw at any time)
Right-to-work checksLegal obligation
Equal opportunities monitoringExplicit consent; anonymised

Sharing

Within the Cedarstone Research Group for recruitment purposes; with prospective employers only with your explicit consent for each introduction; and with our applicant tracking and portal service providers. Where a prospective employer hires you, it may pay Cedarstone Research a fee. We never charge candidates.

Retention

Unsuccessful applications: 12 months. Emerging Talent records: [NUMBER OF YEARS], so we can provide references. Records of successful hires move to employee files.

Your rights

Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. To exercise them, contact info@cedarstoneco.co.uk. You can also complain to the UAE Data Office (u.ae).