Forge Holiday Group Recruitment Privacy Notice

The purpose of this Recruitment Privacy Notice is to make sure that as a job applicant or candidate for a role within any of the companies within the Forge Holiday Group you are aware of how your personal data will be collected, used and shared. It contains all the information you have a legal right to know under the Data Protection legislation in the UK.

Who we are

We are Forge Holiday Group, and we are made up of the following trading companies: Forge Holiday Group Limited, Sykes Cottages Ltd, Forest Holidays Limited, and Bachcare Limited. This privacy notice applies to you if you apply for a role with any of these companies.

The data we collect, the purpose & lawful basis

During the recruitment process, we are likely to collect the following types of data about you:

Type of Data	Purpose	Lawful Basis
Personal details (name, address, contact information)	To identify and contact you during recruitment	Necessary prior to contract
Application details (CV, cover letter, application form, skills, education, experience)	To assess your suitability for the role	Necessary prior to contract
Interview notes, teams recording and assessment results	To evaluate your skills and experience	Necessary prior to contract
References from previous employers	To verify employment history and suitability	Legitimate interest
Right-to-work documentation	To confirm eligibility to work in the UK	Legal obligation
Basic DBS check (Forest Holidays roles)	To ensure guest safeguarding requirements are met	Legitimate interest
Unspent criminal convictions	To assess risk and comply with safeguarding obligations	Legitimate interest
Health/disability information	To identify reasonable adjustments under the Equality Act	Legal obligation

Who we share data with

Forge Holiday Group Ltd provides HR, Technology, Legal, Finance and Data & Analytics services to the rest of the Group companies and so if you apply for a role with Sykes Cottages Ltd or Forest Holidays Limited or your data will be shared with Forge Holiday Group Ltd where necessary for the purposes of the provision of these services.

Your data may also be shared with the following service providers:

Recruitment platform provider
DBS check provider
Occupational health provider (for reasonable adjustments)
Professional advisors, insurers and auditors

Data transfers

Most of the service providers we work with are based in the UK or the EU. In cases where we need to work with providers located outside these regions, we take steps to ensure your personal data remains protected. This includes implementing safeguards such as adequacy decisions or standard contractual clauses. If you’d like more details, contact Forge’s Data Protection Officer (DPO) at dpo@forgeholidays.com.

Monitoring
We do not actively monitor applicants. However, communications sent through our recruitment platform, as well as data and messages stored in our internal systems, may be logged for compliance, security, and record-keeping purposes. compliance, security, and record-keeping purposes.

How long will we keep your data for

We will retain your recruitment data for 12 months following the end of the recruitment process for unsuccessful candidates. For successful candidates, data will be retained in accordance with our Employee Privacy Notice.

Your rights over your data

You have the following rights over your data:

The right to be informed about the collection and use of your personal data
Request access to your personal information (data subject access request)
Request rectification of inaccurate information
Request erasure of your personal information where applicable
Object to processing where we rely on legitimate interest
Request restriction of processing in certain circumstances

To exercise these rights, contact our Data Protection Officer at dpo@forgeholidays.com.

Contact details

Forge Holiday Group Data Protection Officer
Email: dpo@forgeholidays.com

Version Control

Version: Recruitment Privacy Notice v1.0
Date: December 2025