Gallagher Recruitment Privacy Statement
Published: 8 July 2025
About personal data and how we process it “Personal data” (or personal information) means any information that relates to or is about an identifiable individual. This includes details, such as your name, email address, phone number, IP address, photo, location, or job history. “Processing” refers to any activity involving your personal data—such as collecting, storing, using, analyzing, or deleting it. We comply with applicable data protection and privacy laws in the countries where we operate. Gallagher is the data controller for the purposes of these laws. This means we decide how and why your personal data is used. When we use service providers to process data on our behalf, they act as data processors and must follow our instructions. What personal data do we collect? For all individuals: - Device data: IP address, browser type, location, language, and operating system. - Usage data: Pages visited, clicks, and interactions on the Career Site. - Communications: Emails, messages, or survey responses you send us. - Contact details: Name, email address, phone number, and physical address. For candidates: - Application data: CV, cover letter, work samples, education, references. - Recruitment process data: Interview notes, assessments, and salary expectations. - Public profile data: Professional information from LinkedIn or company websites. - Reference information: Details provided by those you list or who refer you. Where do we get your personal data? We collect data: - Directly from you: When you apply, create a profile, or contact us. - From the Career Site: Through cookies and analytics tools (see our Cookie Policy). - From public sources: LinkedIn or your employer’s website. - From others: Our employees, partners, or references you’ve provided. Why do we process your data? We use your data to: - Manage recruitment and communicate about job opportunities.
- Evaluate applications and professional profiles.
- Maintain and improve our Career Site.
- Comply with legal obligations or protect our rights.
- Contact references and request feedback via surveys.
Who do we share your data with?
We may share your data with:
- Service providers: For hosting, analytics, and recruitment software.
- Gallagher group companies: For shared systems and resources.
- Public authorities: If legally required.
- Parties in legal proceedings: To protect our rights.
- Business transfers: In case of mergers, sales, or acquisitions.
- Third parties setting cookies: With your consent (see Cookie Policy).
International transfers of data
We operate globally. This means your data may be transferred outside your country (e.g., from the EU/UK to the US, Australia, or New Zealand).
When we transfer data:
-EU, UK, Australia & New Zealand: We use GDPR-approved safeguards, such as adequacy decisions (including the UK and the EU-U.S. Data Privacy Framework), and Standard Contractual Clauses (SCCs) to protect personal data when transferring it across borders. For transfers from Australia and New Zealand to the EU, we rely on SCCs to ensure compliance with cross-border data protection requirements.
- Canada & US: We comply with applicable provincial and state privacy laws.
How long do we keep your data?
We retain your data only as long as necessary for the purposes described in this policy or as required by law.
Examples:
- Visitors: Up to 6 months for analytics and security.
-Candidates: We keep your personal data for up to 6 months after the recruitment process ends, to assess your suitability for the role you applied for. If you choose to let us retain your information for future job opportunities, we will keep it for up to 12 months to consider you for other vacancies.
-References: As long as we keep the candidate’s data.
If you’re hired, your data will be managed under our employee privacy policies.
Your privacy rights
Your rights vary slightly depending on your country, but may include:
- Access to your personal data.
- Correction of inaccurate or incomplete data.
- Deletion of your data (“right to be forgotten”).
- Objecting to or restricting how we use your data.
- Receiving your data in a portable format.
- Withdrawing your consent (where processing is based on consent).
- Filing a complaint with your local data protection authority.
To exercise these rights:
- Visit the Data & Privacy page on our Career Site.
- Log in to your profile settings.
- Or email us at privacy@gallagher.com
Updates to this policy
We may update this policy to reflect changes in our practices or legal requirements. Check the date at the top to see the latest version.
Contact us
For questions or to exercise your rights, contact:
privacy@gallagher.com
You can also contact your local data protection authority if you have concerns about how we handle your personal data.
