Privacy Notice

Please use the contents list below to navigate to the section of the Privacy Notice which you are interested in.

• Who we are and how to contact us
• About this Privacy Notice
• Personal Data we collect
• How we collect Personal Data
• Why we process Personal Data
• Cookies and Tracking Technologies
• Retention of your Personal Data
• Who we may disclose it to
• Keeping your personal data secure
• Where your data may be transferred to
• Your rights and how to exercise them
• Notice of changes

Who we are and how to contact us

We are Reach group, which is made up of Reach plc and its subsidiaries (Reach, us, our, or we).

Reach plc is the largest national and regional news publisher in the UK with a portfolio in Ireland and the United States. We create engaging, relevant content which is distributed through newspapers, magazines, and digital platforms playing a central role in our audiences daily lives. We are the name behind some of the UKs most influential, iconic, and trusted news brands, such as the Daily Mirror, Daily Express, Daily Star and Daily Record as well as leading celebrity and entertainment magazine OK! and the online shopping site Yimbly.com. We also publish leading regional titles including the Manchester Evening News, Liverpool Echo, and Birmingham Mail plus the Mirror US and Express US. You can see the list of websites and brands we publish here.

Depending on who you are and how you interact with us, the legal controller of your personal data will be one or more of our group companies, like MGN Limited, Reach Regionals Media LimitedExpress Newspapers, Reach Publishing Group Limited or Reach Shared Services Ltd.

We have appointed a Data Protection and Privacy Officer (DPO) to oversee our data protection and privacy practices. If you have any comments, concerns or questions, including any requests to exercise your legal rights, our DPO can be reached as follows:

If you are from the UK/EU:

• By email: dataprotection@reachplc.com
• By mail: Data Protection Enquiries, Reach Plc, One Canada Square, Canary Wharf, London E14 5AP

If you are from the US:

• By email: privacyofficer@reachplc.com
• By mail: Privacy Officer, Reach Plc, 19th Floor, 200 Liberty Street, New York, NY 10281

About this Privacy Notice

This Recruitment Privacy Notice (Privacy Notice) describes how we handle and protect your personal data in connection with our recruiting processes and programs. This Privacy Notice only applies to the personal data of job applicants, potential candidates for employment or partnership, and those who participate in our recruiting programs and events. This personal data is submitted directly to us through the online application process and follow-up communications and/or through alternative channels (e.g., via professional recruiting firms). We may also collect and process your personal data regarding employment when we engage in due diligence related to a potential corporate acquisition of your current employer (e.g., if you are part of the senior leadership team of a target company). This Privacy Notice does not apply to the personal data of our employees, partners, clients, vendors or any other person from whom Reach collects personal data for other purposes.

By submitting your personal data to us, you acknowledge that:

• You have read and understood this Privacy Notice and agree to the use of your personal data as set out herein.
• All of your representations are true and correct to the best of your knowledge and belief, and you have not knowingly omitted any related information of an adverse nature.
• This Privacy Notice does not form part of any contract of employment offered to candidates hired by Reach.

Personal data we collect

Personal data means any information describing or relating to an identified or identifiable individual. An identifiable individual is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual.

In the US it may be referred to as Personal Information and may include data relating to a household. For purposes of this notice, personal information in the US is as defined under the CCPA, which generally includes any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household (subject to some exemptions under the CCPA).

In connection with your application for work with us, we will collect, store, and use the following categories of personal data about you:

• The information you have provided to us in your curriculum vitae and covering letter/email, which may include your name, home address, and telephone number...etc.;
• Any information you provide to us during an interview; and
• Information you provide in relation to your right to work documentation, collected via our third party system.

We may also collect, store and use the following special categories of more sensitive personal data:

• Information about your race or ethnicity, religious beliefs, sexual orientation and political opinions;
• Information about your health, including any medical condition, health and sickness records; and
• Information about your criminal record.
• In the US, depending on the applicable state, other types of data we collect may be deemed sensitive including your social security, drivers licence, state identification card or passport number, if we need to collect these as part of your application.

Categories of data we collect

The categories of personal information that we collect, and our use of personal information, may vary depending upon the position(s) or location, as well as the associated qualifications and responsibilities.

The table below generally identifies the categories of personal information we collect about Applicants, including those in California and from other US states with applicable legislation:

How we collect Personal Data

We collect this personal data from the following sources:

• You, the candidate;
• Recruitment agencies;
• Search consultants;
• Our employment background check provider;
• Your named referees; and
• Data from third party publicly accessible sources. For example, SRA and CILEX professional memberships.

In certain circumstances we may receive your personal data via third parties such as recruitment agencies. This is usually done by the recruiting agency directly through our careers site, and therefore the agreement in terms of your data will be between yourself and the recruitment agency.

Why we process Personal Data

We collect and use your personal data for legitimate human resources and business management reasons, including:

• identifying and evaluating candidates for potential employment, as well as for future roles that may become available;
• maintaining records in relation to recruiting and hiring;
• ensuring compliance with legal requirements, including those relating to public health and workplace safety;
• fostering our diversity and inclusion programs and practices;
• conducting background checks, including, to the extent permitted by applicable law, and if you receive an offer from us, criminal history checks; and
• protecting our legal rights to the extent authorised or permitted by law.
• conducting background checks such as employment verification and reference checks, if you receive an offer from us.
• conducting criminal history checks, to the extent permitted by applicable law, and if you receive an offer from us.;
• analytic purposes, including in aggregated/pseudonymized form, to improve our recruitment and hiring process and augment our ability to attract successful candidates; and
• protecting our legal rights to the extent authorised or permitted by law.

We use AI-powered tools provided by SmartRecruiters (Winston Intelligence) to assist our recruitment team in reviewing applications and matching your skills to our current job openings. This includes the use of algorithms to rank or score' candidates based on skills, experience and qualifications. We use these tools to ensure a faster, more objective initial screening process, helping our hiring managers focus on the most qualified applicants.

At Reach, AI functions as a co-pilot, supporting, but not leading, our process. The AI-generated score is specifically a recommendation tool and is not the only criterion used to make hiring decisions. Our human recruitment team makes all final hiring decisions, including the choice to interview or reject a candidate, using AI insights to inform their judgment. More information on how SmartRecruiters process data can be found in their privacy notice here.

Some specific purposes for processing your personal information include:

Our Legal basis

Our processing of your personal data for the purposes mentioned above is based:

• on our legitimate business interests in evaluating your application to manage our relationship with you, to ensure that we recruit appropriate employees, and to evaluate and maintain the efficacy of our recruiting process more generally, and in operating our business and protecting Reach and its employees, clients, and third parties;
• on the performance of contractual and precontractual measures relating to our potential employment relationship with you;
• on our requirement to comply with applicable law, in order to satisfy our legal and regulatory obligations, including with regard to public health and workplace safety;
• on your explicit consent, where we process special categories of data, such as information about ethnic origin, sexual orientation, health, religion or belief.

If we need to process special categories data, as described above, in addition to being justified as set out above, it will also be collected on the basis of:

• the processing being necessary for such purposes as the prevention or detection of unlawful acts, carrying out our legal obligations under employment laws, health and safety law, social security and social protection law, for insurance purposes or to establish, exercise or defend legal claims.

Cookies and Tracking Technologies

When you visit our job site essential cookies are used to make our site work. With your consent, we may also use non-essential cookies to improve user experience and analyse website traffic. You can learn more by clicking on the Cookie Policy link here.

When you visit specific job advertisements hosted by SmartRecruiters, certain cookies and tracking technologies are used to ensure the functionality of the recruitment platform and to analyse candidate engagement. For the use of non-essential cookies and similar tracking technologies on our job ads, this processing is based on your consent, which you provide via the cookie banner. SmartRecruiters acts as our data processor in this capacity, managing a cookie banner on our behalf to collect your preferences. These cookies may collect information such as your IP address, browser type, and how you interact with the job advertisement. For information on how SmartRecruiters use your cookie data see here.

You can manage your cookie preferences directly through the banner provided on both the job site and the job advertisement page.

Retention of your Personal Data

If your application for employment is unsuccessful, we will generally hold your data on file for 12 months after the end of the relevant recruitment process, unless required for legal purposes where we may need to hold it for up to 3 years. After this period, we may reach out to you to ask if you would Reach to retain your data. If you respond back indicating No or do not respond, then we will automatically securely destroy your personal data in accordance with our data retention policy.

If we wish to retain your personal data on file, on the basis that a further opportunity may arise in future that we may wish to consider you for, we will write to you separately, seeking your consent to retain your personal data for a fixed period on that basis. If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your personnel file.

Data processed by our recruitment AI for the purpose of 'matching' is retained in accordance with our standard 12-month unsuccessful applicant policy; however, specific automated audit logs (tracking how the AI interacted with your profile) may be retained for up to 3 years to comply with our legal obligations to demonstrate non-discrimination and fairness in our hiring algorithms.

Who we may disclose it to

Your personal data may be accessed by or disclosed internally on a need-to-know basis to:

• Human Resources, including managers and team members;
• Local, regional and executive management responsible for managing or making decisions in connection with your relationship with the Company or when involved in an HR process concerning your relationship with the Company;
• System administrators; and
• Where necessary for the performance of specific tasks or system maintenance by staff in the Company teams such as the Finance, Company Secretariat and IT Department and the Global HR information systems support team.

Your personal data is also accessed by third parties whom we work together with for providing us with services, such as hosting, supporting and maintaining the framework of our HR information systems and IT systems. For example in the UK and EU we share disclosed data to SmartRecruiters, Inc. who are our primary recruitment platform provider and provide the technical infrastructure for our job advertisements. We share your application data with them to facilitate the hiring process, including using their own AI and matching algorithms. They also manage the deployment of cookies and the associated consent preferences on our behalf. SmartRecruiters acts as a data processor and is contractually prohibited from using your data to train their public models or sharing it beyond Reachs specific instructions.

Personal data will also be shared with certain interconnecting systems such as the main HR system, the employee HR portal, and local payroll and benefits systems. Data contained in such systems will be accessible by providers of those systems, their associated companies and sub-contractors.

Where these third parties act as a "data processor" or service provider (for example the provider of our recruitment site) they carry out their tasks on our behalf and upon our instructions for the above mentioned purposes. In this case your personal data will only be disclosed to these parties to the extent necessary to provide the required services.

Categories of personal data disclosed to third parties:

We have disclosed the following categories of Applicant Personal Information to service providers and third parties for a business purpose in the past twelve months:

• Identifiers, such a real name, alias, postal address, unique personal identifier, online identifier, internet protocol (IP) address, or other similar identifiers;
• Contact and financial information, including phone number, address, email address, bank account, payroll, benefits, pension and tax information;
• Audio, electronic, visual, or similar information, such as profile photograph;
• Professional or employment-related information, such as work history and prior employer;
• Education information, such as academic information and records. Also data relating to training and development needs, learning styles and preference, training received or assessments completed;
• Records relating to complaints, claims and litigation:
• Individuals written signatures; and
• Sensitive Personal Information, including Personal Information that reveals social security, drivers licence, state identification card, or passport number; or also other sensitive information, for example accessibility requirements.

Keeping your personal data secure

We take the security of your data seriously. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Where your data may be transferred to

From time to time your personal data (including special categories of personal data) will be transferred to other associated Reach companies and subsidiaries to process for the purposes described in this Recruitment Privacy Notice.

We have a small team based in the US who have access to our global recruitment site and associated information in the same way as other employees based within the UK, which contains applicant related contact information.

Personal data will also be transferred to third parties (e.g. service providers or regulators as set out above), who may have systems or suppliers located outside the European Union.

As a result, some of your personal data will be transferred to countries outside of the country in which you work or outside of the European Union to countries whose data protection laws may be less stringent than yours.

We will ensure that appropriate or suitable safeguards are in place to protect your personal information and that transfer of your personal information is in compliance with applicable data protection laws.

Where required by applicable data protection laws, we have ensured that service providers (including our associated companies) sign standard contractual clauses as approved by the European Commission and, if necessary, the supervisory authority with jurisdiction over the relevant Company exporter. Once approved we may also use similar clauses as approved by the ICO for the UK. If you have any questions regarding this you can obtain further information and detail by contacting dataprotection@reachplc.com.

Your rights and how to exercise them

The law gives you certain rights over your personal data.

You can exercise your rights by contacting our group Data Protection Officers team at dataprotection@reachplc.com or privacyofficer@reachplc.com if you are from the US in a state with applicable legislation. It is helpful to be as specific as possible about what you want us to do or what data you are looking for, because it enables us to respond to you more effectively.

Depending on your request, we may ask you to prove your identity to us first, in order to make sure that someone isnt impersonating you. For example, if you contact us about an application submitted to us using a different email address, we may first require you to prove that you control the email address which you initially supplied to us.

Most of your rights do have exceptions to them, designed to protect the rights of others or to ensure that we can comply with the law and operate our business in a prudent manner (for example, by keeping certain records). If we decline all or part of your request on the basis of one or more of those exceptions, we will tell you that we are doing so, and we will explain our reasons. We may also reject your request entirely if it is excessive or unfounded.

UK/EEA Applicants

Your right to access the information we hold about you

You have the right to have access to the information we hold about you. There are a few exceptions to that right, designed to protect the rights of other people.

Your right to have inaccurate information about you rectified

If we hold information about you that is factually inaccurate (for example, we have spelled your name wrong) then you have the right to have it corrected. This right does not extend to matters of opinion.

Your right to have your information erased in some circumstances

You may have the right to have some or all of your information deleted, principally if the information you want deleted is no longer needed or if we dont have a legal basis to continue using it (for example, if we are using it on the basis of your consent and you withdraw your consent).

Your right to withdraw your consent

If were relying on your consent to do something with your information (for example, to send you emails about further opportunities) then you have the right to withdraw that consent at any time. For job emails and other email communications, you can do this by clicking the unsubscribe link at the bottom of the message.

Your right to object to what we do with your data, and to have restrictions placed upon it

If we are doing something with your data on the basis of our legitimate interest, then you have the right to object to what we are doing, and we must stop unless we can show that there is a compelling and legitimate reason to continue or what we are doing relates to a legal claim.

Your right to restrict what we do with your information in some circumstances

In certain circumstances, you have the right to restrict our use of your information to simply storing it and using it only for legal claims, protecting the rights of others and matters of important public interest. Those circumstances are: if you dispute the accuracy of information we hold about you; if we do something unlawful with your information but you dont want us to delete it; if we dont need the information anymore but you want us to preserve it in connection with a legal claim; or for the duration of the period in which we are considering a valid objection you have raised under your right to object discussed above.

Your right to portability

You have the right to receive the personal data concerning you which you have provided to us in a portable electronic format, or have it transmitted to another controller, where processing is based upon consent and is undertaken by automated means.

Your right to contest automated decisions

Our recruitment process utilises AI for initial screening and ranking of applications. However, all final decisions regarding candidate progression to interview or hiring remain the responsibility of our human recruitment and hiring teams. Although our process is not fully automated, you retain the right to request a manual (human) review of your application. This option is available if you believe the automated outcome unfairly assessed your qualifications or if you wish to contest the AI's assessment.

Right to complain

We hope that our HR team and/or Data Protection team can resolve any query or concern you raise about our use of your information. You also have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes applicable law. UK employees can contact the Information Commissioner at ico.org.uk/concerns/ or telephone: 0303 123 1113, ROI employees can contact the Data Protection Commissioner at https://forms.dataprotection.ie/contact telephone 01 7650100 / 1800437 737 for further information about your rights and how to make a formal complaint.

US Applicants

Privacy laws in some US states, such as California, give residents certain rights with respect to their personal data. These rights include:

• Information. You can request the following information about how we have collected and used your Personal Information during the past 12 months:
• The categories of Personal Information that we have collected;
• The categories of sources from which we collected Personal Information;
• The categories of Personal information collected both directly and indirectly, including through a service provider or contractor;
• The business or commercial purpose for collecting and/or selling Personal Information;
• The categories of third parties with whom we share Personal Information;
• Whether we have disclosed your Personal Information for a business purpose, and if so, the categories of Personal Information received by each category of third party recipient; and
• Whether weve sold your Personal Information, and if so, the categories of Personal Information received by each category of third party recipient.
• Access. You can request a copy of the Personal Information we collected about you.
• Deletion. You have the right to delete personal information that you have provided or that we have obtained about you. Additionally, if you request the deletion of your personal information and we have obtained such information from a third-party source, we may retain such data by keeping a record of the deletion request and the minimum data necessary to ensure that your personal information remains deleted from our records and that such retained data is not used for any other purpose, or we may opt you out of the processing of such personal information for any purpose except for those allowed under the relevant legislation.
• Correction. You have the right to correct inaccuracies in the personal information we collect from you, taking into account the nature of the personal information and the purposes for which we process it.
• Portability. You have the right to receive your information in an easily understandable, machine readable and transmittable form.
• Opt out of the sale or sharing of your personal data and to limit employers use of your sensitive personal information. Please note we do not "sell" or share your personal information as the law describes, and only share your data with our service providers who deliver our services on our behalf. In addition, we do not use your sensitive data beyond what is reasonable and proportionate to provide applicant services to you.
• Non-discrimination. The right not to be subject to discriminatory treatment for exercising their rights.

Please note these rights may not apply to all US employees and may not be absolute. In certain cases we may decline your request as permitted by law.

For further information regarding your rights, or to exercise any of your rights, please contact the privacyofficer@reachplc.com or mailto:uspeopleexperience@reachplc.com.

Notice of changes

Reach reserves the right to modify this Privacy Notice. We will post any changes to our Privacy Notice on this page. Please check this page regularly to keep up-to-date.

Privacy Notice last updated: 04/06/2026