PRIVACY NOTICE – RECRUITMENT                             
Star Academies is the Data Controller of the personal information you provide to us.  This means it determines the purposes for which, and the manner in which, any personal data relating to staff is to be processed.

The Head of Governance and Corporate Services is our Data Protection Officer.  The Data Protection Officer’s role is to oversee and monitor our data processing practices.  If you have any queries regarding anything in this privacy notice, please contact:

Head of Governance and Corporate Services
Data Protection Officer
Star Academies
Shadsworth Road
Blackburn, BB1 2HT  

or email  

Where necessary, third parties may process personal information required for recruitment.  Where this is required, Star Academies places data protection requirements on third party processors to ensure data is processed in line privacy rights. 
Star Academies has the legal requirement and a legitimate interest to collect and process personal data relating to those we are considering for employment.  This includes those seeking both paid and unpaid voluntary roles.  

We process personal data in order to meet the safeguarding requirements set out in UK employment and childcare law, including those in relation to the following:

  • Multi-Funding Agreement and Supplementary Funding Agreements with the Department for Education (DfE)
  • Legal and statutory framework
  • Safeguarding Vulnerable Groups Act 2006
  • The guidance “Keeping Children Safe in Education”
  • The Childcare (Disqualification) Regulations 2009 

The personal data of those seeking employment within the Trust is also processed to assist in the running of Star Academies and its schools for the following reasons:

  • for considering an applicant’s suitability to a job role within the Trust;
  • for employment contractual requirements;
  • for employments checks, e.g. right to work in the UK and Safeguarding checks;
  • to enable individuals to be paid;
  • to support professional development;
  • to inform the development of recruitment and retention policies;
  • to enable the development of a comprehensive picture of the workforce and how it is deployed;
  • to enable equalities monitoring and to ensure reasonable adjustments are made if required;
  • to allow better financial modelling and planning;
  • to assess the quality of our services; and
  • to comply with the law regarding data sharing. 


  • personal information (i.e. name, address, employee or teacher number, national insurance number);
  • characteristics (i.e. age, gender);
  • special categories of data (i.e. ethnicity);  
  • work history (i.e. previous employers, roles and skills);  
  • reference information (i.e. attendance, performance and disciplinary history);
  • education and qualifications;  
  • proof of right to work;
  • criminal record;
  • results of pre-employment screening checks (i.e. DBS checks, fitness for role health checks, vetting and due diligence checks); and
  • contract and payroll set-up information. 


  • Article 6 1(b) of the GDPR which allows processing that is necessary for the performance of a contract;  
  • Article 6 1(c) of the GDPR which allows processing that is necessary to comply with a legal obligation;
  • Article 6 1(e) of the GDPR which allows processing that is carried out in the public interest;
  • Article 9 2(b) of the GDPR which allows the processing of special category data that is necessary for carrying out obligations in the fields of employment and social security and social protection law;
  • Article 9 2(g) of the GDPR which allows the processing of special category data that is necessary for reasons of substantial public interest;     

Star Academies maintains Records of Processing that identify the lawful basis on which personal information is processed. 

Whilst the majority of information that you provide to us is mandatory, some of it is provided on a voluntary basis to undertake our recruitment process. In order to comply with data protection legislation, we will inform you when your consent is required.  Recruitment applicant personal data may be obtained and processed from third parties where the law requires us to do so. 

Personal data is stored in line with our Records Management Policy.  In accordance with data protection legislation, it is only retained for as long as necessary to fulfil the purposes for which it was obtained, and not kept indefinitely. 

If your application for employment is unsuccessful, we will hold your data for six months from the date of appointment of the successful candidate unless we have your consent to hold the data for longer.  If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your personnel file and retained during your employment.  You will be provided with a new Privacy Notice upon employment.  

Processors that we use may transfer, and hold, personal data outside of the EU.  We will ensure that organisations who process personal data on our behalf only transfer data to countries that the EU deems as having adequate levels of protection in place.  Processors that transfer data to the United States must be covered by the EU-US Privacy Shield.  If a processor is found to be transferring data to a country that does not have adequate protections, or to an organisation that is not covered by the EU-US Privacy Shield, we will terminate our contract/subscription. 

Your information will be shared internally for the purposes of the recruitment exercise.  We do not share information about those seeking employment without consent unless the law and our policies allow us to do so.  

We share information with the following:  

  • Disclosure and Barring Service
  • HMRC
  • Payroll providers
  • Teachers’ Pension Scheme
  • Local Government Pension Scheme
  • Occupational health and wellbeing providers
  • Management Information Systems  
  • Recruitment Service Providers 


As the data subject, you have specific rights in relation to the processing of your data.  You have a legal right to:

  • Request access to the personal data that Star Academies holds.
  • Request that your personal data is amended if it is inaccurate or incomplete.
  • Request that your personal data is erased where there is no legal basis for its continued processing.
  • Request that the processing of your personal data is restricted.
  • Object to your personal data being processed if it is likely to cause, or is causing, damage or distress. 

Requests must be submitted to the Data Protection Officer (contact details above).  Star Academies also has a Subject Access Request Form that may be obtained from the Data Protection Officer all of its schools.  Star Academies will consider all requests in line with your legal rights and our legal obligations.
Where the processing of your data is based on your explicit consent, you have the right to withdraw your consent at any time.  This will not affect any personal data that has been processed prior to withdrawing consent. 

If you have a concern about the way we are collecting or using your personal data, you should raise your concern with the Data Protection Officer in the first instance or directly to the Information Commissioner’s Office at