Job Candidate Privacy Notice

Last reviewed: October 2025

Who is Goji?

Goji (“we”, “us”, “our”) develops, implements and operates private markets technology and services. Goji is comprised of the following entities registered in England and Wales:

Goji Administration Services Limited whose registration number is 10249853 (the data controller);
Goji Holdings Limited whose registration number is 09429688;
Goji Financial Services Limited whose registration number is 10234133; and
Goji Nominee 2 Limited whose registration number is 12318485.

The registered office and main trading address for all the above entities is:

Second Floor, 10-12 Alie Street, London, E1 8DE.

What does this Privacy Notice apply to?

This Privacy Notice applies to the collection, use, storage, and processing of personal data we collect from or about current and past job candidates (‘you’) in the course of our recruitment activities.

Current and past employees of Goji will be provided separate information about how we use their personal data.

Visitors to our website and prospective, current and past clients of Goji can find information on how we use their data here.

You should read this Privacy Notice carefully to understand our practices regarding your personal data and how we will treat it during and after the recruitment process.

We are committed to protecting and respecting your privacy.

What is personal data?

Personal data, sometimes referred to as personal information, means information which identifies you, like your name or email address. Any information that falls outside of this is “non-personal data”.

If we store your personal data with data that is non-personal, we will consider the combination as personal data. If we remove all personal data from a set of data, then the remaining is non-personal data.

What personal data does Goji collect?

Personal data collected from you

You may give us information about you by:

applying for job vacancies with Goji;
corresponding with us by phone, e-mail, social media or otherwise;
attending interviews;
completing assessments;
registering to use and engaging with our sites;
reporting a problem with our site(s); and
completing surveys.

The categories of personal data you give us may include:

biographical details such as your name;
contact details such as your email address, postal address and phone number;
past and current employment information;
educational history, qualifications and skills;
right to work status;
signatures;
copies of documents needed to verify your identity, qualifications or any other information you have provided; and
other personal information or descriptions that may be necessary for us to assess your suitability for the role you have applied for.

Personal data we collect about you

We may collect data about you from publicly available sources, such as social media, for the purpose of our legitimate interests in sourcing candidates for our job vacancies.

Personal data received from other sources

We work closely with third parties, including recruitment agencies, and may receive information about you from them.

We operate a referral scheme and may receive information about you from a Goji employee where you have asked them to refer you for a role.

If your application is successful and you receive a job offer, we may:

request information about you from your current and past employers; and
conduct credit, disclosure and barring service (DBS) and identity verification checks.

Special Category Data

Special category data, sometimes referred to as sensitive personal information, is a type of personal data that requires additional protections due to it being highly sensitive in nature.

You may voluntarily disclose special category data to us for the purpose of ensuring you are treated fairly during the recruitment process.

How does Goji use personal data and on what lawful basis?

We may use your personal data for the following purposes:

processing job applications, conducting interviews and assessments and evaluating candidate performance;
sourcing candidates from publicly available sources and through Goji's internal referral scheme;
contacting candidates for roles other than the one they originally applied for; and
Reference, credit and DBS checks.

When carrying out the above activities, we will rely on one of the following lawful bases under Article 6(1) of the GDPR:

you have consented to the processing of your data;
the processing is necessary to enter into a contract with you (employment contract);
to comply with our legal obligations; or
in order to fulfil our legitimate interests.

We may combine personal data we receive from other sources with personal data you give to us and personal data we collect about you. We may use this personal data and the combined personal data for the purposes set out above (depending on the types of information we receive).

Artificial Intelligence

Goji may use artificial intelligence (AI) during interviews to transcribe and summarise interview notes. All interview notes will be subject to manual review. If you do not wish for AI to be used during your interview, please let your recruiter know.

Who does Goji share personal data with?

We may share your personal data with any member of our group of companies, which includes our subsidiaries and our ultimate holding company, as defined in section 1159 of the UK Companies Act 2006.

We may share your personal data with selected third parties including suppliers and sub-contractors to further the purposes detailed in the table above.

Goji will always take reasonable steps to ensure suppliers are legitimate and trustworthy and that any personal data shared with them is handled appropriately, including:

conducting due diligence and ongoing monitoring on material partners; and
ensuring a written contract is in place which requires the supplier to only process personal data as necessary to fulfil its contract with Goji and in accordance with Goji’s instructions.

We may also disclose your personal information to third parties:

if Goji or substantially all our assets are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets; or
if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce any agreements, or to protect the rights, property, or safety of Goji, our customers, or others.

Where does Goji process and store personal data?

Goji primarily stores personal data in the United Kingdom and the European Economic Area (“EEA”). Goji is based in the United Kingdom and will normally access and use your data from this location as appropriate. The data that we collect from you may be transferred to, and stored at, a destination outside the EEA. It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Notice. Whenever we do transfer your Personal Data out of the EEA or UK, we will only do so if:

it is to a country that has been deemed to provide an adequate level of protection for personal data by the European Commission; or
we have entered into standard contractual clauses approved by the European Commission or the UK, which gives personal data the same protection as it has in the EEA or the UK.

All information you provide to us is stored securely.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our sites; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

How long does Goji keep personal data for?

Goji does not store personal data for longer than necessary.

If your application is unsuccessful, we will generally retain your records and personal data for 12 months after the recruitment process for the role you applied for has concluded.

If your application is successful, your personal data will be held in line with our Employee Privacy Notice, which will be provided to you separately if applicable.

What rights do I have?

Under the Data Protection Act 2018 and associated regulations and guidance, you have various rights regarding your personal data.

You have the right to request access to, deletion of or correction of your personal data stored by us. You can also request that your personal data stored by us is transferred to another data controller.

You can exercise these rights at any time by contacting us at data.protection@goji.investments.

How will I know if changes have been made to this Privacy Notice?

Any changes we may make to our Privacy Notice policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our Privacy Notice.

How can I contact Goji's Data Protection Officer?

If you have any questions or concerns about our use of your personal data, you can contact our Data Protection Officer by email at data.protection@goji.investments or write to us at:

Data Protection Officer,
Second Floor,
10-12 Alie Street,
London,
E1 8DE

How can I make a complaint about the use of my personal data?

If you would like to make a complaint about how Goji handles your personal data, please consider contacting us using the details above so we can investigate in the first instance.

You also have the right to lodge a complaint with the relevant data protection authority. You can contact the Information Commissioner’s Office (“ICO”) if you are unhappy with how we have used your data using the contact details below.

Email: casework@ico.org.uk

Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk