Privacy Policy

Introduction

This Privacy Policy (the “Policy”) describes how we collect and use personal information. It applies to all candidates for jobs at Star Lizard Consulting Limited or one of its subsidiaries (“Starlizard”) and any individuals involved in our recruitment processes as well as website users and sports professionals about whom we hold and collect personal data. We are required under data protection law to notify you of the information contained in this Policy.

Starlizard is committed to protecting the privacy and security of your personal information, so we take great care to ensure your personal information is held in the strictest confidence and in accordance with the Data Protection Principles set out in Article 5 of the UK General Data Protection Regulation.

What personal data do we collect?

We collect a range of personal data for various business purposes as set out below.

Recruitment

When you apply to us for a job, we collect the following personal data:

• Your name and contact details; and
• Your CV.

If you are invited for an interview and during the interview process, we collect the following personal data:

• Information about your current level of remuneration, including benefit entitlements;
• Whether or not you have a disability for which we need to make reasonable adjustments at interview or assessment stage; and
• Information about your performance at interview.

If we offer you a job, we collect the following personal data:

• Copies of documents to verify your identity (such as your passport and driving licence);
• Your address and date of birth;
• Marital status and family details;
• National insurance number;
• Next of kin and emergency contact information;
• Nationality;
• Information about your entitlement to work in the UK;
• References;
• Information about your criminal record; and
• Information about your health.

We collect the above information in a variety of ways throughout the recruitment process, whether by ourselves and/or through third-parties, depending on the style and stage of the recruitment process. For example, if you have a telephone interview with us, it will be recorded. In addition, if we make a job offer to you, we will ask you to complete certain forms (including a medical form) to provide us with the above data and supplement the information we have about yourself, your fitness to work, experience, education and qualifications.

Personal data that we collect about you from third parties may include: (a) at the beginning of the recruitment process, CVs and other information about you provided by recruitment agents at the beginning of the recruitment process; and (b) once a job offer to you has been made and we have obtained your consent, references supplied by former employers, information about you supplied by employment background check providers and information from criminal records checks.

You are under no statutory or contractual obligation to provide any personal data to us during the recruitment process. However, if you do not provide the information requested, we may not be able to process your application properly or at all.

Website Users

We may collect certain information about your use of our website which we will process for analytical purposes in accordance with our legitimate interests to improve our site.

If you get in touch with us, we will process information about your contact details and your correspondence in accordance with our legitimate interests so that we can reply.

Sports Professionals

We collect and process the personal data of certain sports professionals for the purpose of our specialist analysis. Such personal data may include name, gender, age, height, position/role, current and previous clubs, league/competition the individual plays in, nationality, publicly available information about injuries and suspensions, various match-related statistics and other similar information that is made manifestly public by the data subject.

Why do we use your personal data?

Recruitment

We have a legitimate interest in collecting personal data during the recruitment process and for keeping records of the process. Collecting personal data about job applicants allows us to manage the recruitment process, assess and confirm a candidate’s suitability for employment and determine the terms on which a candidate might work for us. We may also need to use personal data about job applicants to deal with any issues which may arise about the way the recruitment process was conducted.

In some cases, we need to use data to ensure that we are complying with our legal obligations. For example, we are required to check a successful applicant’s eligibility to work in the UK before employment starts and to ensure that we provide our employees with a safe working environment.

We collect health information about candidates in case we need to make reasonable adjustments to the recruitment process for candidates who have a disability, in accordance with applicable laws. For example, we ask you to complete a medical form if we offer you a job in order to ensure your health and safety in the workplace, assess your fitness to work and provide appropriate workplace adjustments.

We seek information about criminal convictions and offences with your consent in order to make an informed decision about your recruitment.

Sports Professionals

We have a legitimate interest in collecting and processing the personal data of certain sports professionals when made manifestly public by the data subject. Collecting such personal data enables us to carry out our specialist analysis.

Who has access to your personal data?

Recruitment

Your personal data will only be shared internally for the purposes of the recruitment process with authorised members of staff who are involved in interviewing you or otherwise making a decision about your recruitment, on a need-to-know basis.

We will only share your personal data with third parties if we offer you a job, and only after we have obtained your consent. Such third parties may include former employers (for references purposes) and employment background check providers and the Disclosure and Barring Service (for background and criminal records check purposes).

We will not transfer your personal data to any country outside the UK or EU unless such country has been recognised by the UK or European Commission as providing an adequate level of data protection and the appropriate safeguards are in place to ensure the secure transfer.

Sports Professionals

We may disclose sports professionals’ personal data with a small, highly secure and trusted group of sub-processors with whom we share resources for internal and operational purposes.

We may be legally required or otherwise be requested to disclose your personal data to law enforcement agencies or legal representatives, for example to cooperate with law enforcement investigations or other legal proceedings.

In addition, we may use your personal data to provide an analysis of sports professionals’ performance for third parties such as sport governing bodies, sports federations and clubs and law enforcement agencies in order to assist with the fight against betting-related match-fixing and other sporting integrity threats.

How do we protect personal data?

We take the security of all personal data we process very seriously. We have implemented the appropriate technical and organisational controls and internal policies to ensure that your personal data is not lost, accidentally destroyed, misused or inadvertently disclosed, and is processed by authorised parties on a need-to-know basis in accordance with this Policy.

Where we engage third parties to process personal data on our behalf, they do so on the basis of written instructions, are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data.

We will put in place appropriate safeguards when making international transfers where it is required by law or where we consider it necessary in the circumstances.

For how long do we keep data?

Recruitment

If your application for employment is unsuccessful, we will hold your personal data securely on file for 12 months after the end of the recruitment process, or for such other period of time as may be recorded in our Data Retention Policy. Your personal data will be securely destroyed at the end of these time periods.

If your application for employment is successful, any personal data gathered during the recruitment process will be transferred to your personnel file and retained during your employment in accordance with our internal staff privacy policy, which is available to read for all staff members.

Sports Professionals

We have implemented and maintain robust organisational controls and data retention policies to ensure that personal data is retained only for as long as is reasonably required for legal or specific business purposes, as recorded in our Data Retention Policy.

Your rights

As a data subject, you have certain rights under applicable data protection legislation in respect of your personal data. These rights include:

• The right of access – upon request, you have the right to access and obtain a copy of any of your personal data;
• The right to rectification – you can require us to change incorrect or incomplete any personal data;
• The right to erasure – in certain circumstances, you can require us to delete any of your personal data;
• The right to restrict processing – in certain circumstances, you can restrict the use of your personal data;
• The right to data portability – in certain circumstances, you can request to have your personal data moved, copied or transferred to a third party controller;
• The right to object – in certain circumstances, you can object to the use of your personal data;
• Rights in relation to automated decision-making and profiling – in certain circumstances, you have the right not to be subject to decisions made solely by automated means where such decisions will have legal or similarly significant effects on you; and
• The right to withdraw consent – where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before your consent was withdrawn. Where we process your personal data on another lawful basis, such as for the performance of a contract or our legitimate interests, different rights may apply.

Please note that these rights are not absolute and, in certain circumstances, we may refuse to comply with all (or part) of your request. We also reserve the right to refuse to give effect to a request to exercise any of the above data protection rights if we are unable to ascertain your identity.

How to contact us

Should you have any questions, concerns or complaints regarding the processing of your personal data or your data protection rights, we ask that you reach out to us in the first instance, through our Data Protection Officer on dataprotection@starlizard.com.

However, you also have the right to complain at any time to the Information Commission, the UK supervisory authority for data protection issues.

Last Updated: September 2026