Data breach policy

• Date of Last Review – May 2025
• Review Frequency – 1 year
• Review Date – May 2026

Data Controller

The data controller is Orange Aero Limited, Unit O, Howland Road Business Park, Howland Road, Thame, Oxfordshire, OX9 3GQ, Tel: +44 (0) 1844 260150.

Purpose of This Notice

This notice explains how any personal data that you provide to us (the data controller) or we collect from you (the data subject) will be processed by us during the recruitment process.

Personal Data Collected, Stored and Processed

We may collect and process the following personal data:

• Name
• Job title
• Addresses
• Telephone numbers
• Email addresses
• Any information on your CV
• Any information you provide to us during an interview
• References if provided
• Social media information such as LinkedIn (if applicable)

The information is gathered via a CV, email, telephone, post, or in person during the recruitment process, or from external sources such as referees. Personal data is securely stored on our internal systems.

Future Processing

If, in the future, we intend to process your personal data for a purpose other than that for which it was collected, we will provide you with information on that purpose and any other relevant information.

Lawful Basis for Processing Your Personal Data

We rely on the following lawful bases under the UK GDPR:

• Legitimate Interests – processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
• Contract – processing is necessary for a contract you have with us or because you have asked us to take specific steps before entering into a contract.
• Consent – if we wish to retain your CV for future opportunities beyond 6 months, we will request your explicit consent.

Sharing Your Personal Data

Your personal data may be shared with any referees that you have supplied to us, but only with your permission. We do not sell, rent, exchange, give or otherwise share personally identifiable information with other organisations unless we are legally obliged to do so or where necessary to comply with our contractual duties.

Special Category Personal Data

While we do not actively request special category data (e.g., health, ethnicity, religion), if you voluntarily provide such data, we will handle it securely and only process it where necessary and with an appropriate lawful basis.

Data Retention

Following the recruitment process, if you are not subsequently employed by Orange Aero, we will retain your personal data for 6 months, after which it will be securely deleted. If your application is successful, the information gathered will become part of your employee record.

Data Transfers Outside the EEA

We do not transfer your personal data outside of the EEA.

Automated Decision-Making

We do not make decisions based solely on automated processing, including profiling.

Your Rights

You have the following rights under the UK GDPR:

• Right of Access – to your personal data
• Right to Rectification – to correct inaccurate data
• Right to Erasure – to request deletion in certain circumstances
• Right to Restrict Processing – to request limitation of data use
• Right to Data Portability – to move or reuse your data
• Right to Object – to data processing based on legitimate interests
• Right to Withdraw Consent – where consent was the lawful basis

Right to Complain

You have the right to complain to the Information Commissioner’s Office (ICO) if you believe we are handling your data improperly.

Website: https://ico.org.uk
Tel: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Exercising Your Rights

You can make a request verbally or in writing and we will respond within one calendar month. We may ask you to verify your identity. Please contact: Hannah Parson, Orange Aero Limited, Unit O, Howland Road Business Park, Howland Road, Thame, Oxfordshire, OX9 3GQ, Tel: +44 (0) 1844 260150, Email: hparson@orange.aero

Contact Us

This website is owned and operated by Orange Aero Limited, a company registered in England and Wales under company number 2990055. Registered office: Yew Tree House, Lewes Road, Forest Row, East Sussex, RH18 5AA, United Kingdom.

Tel: +44 (0) 1844 260150
Email: info@orange.aero

Changes to Our Privacy Policy

Any changes to our privacy policy will be posted on this page. Please check back frequently for updates.