Privacy Policy for Recruitment

At VMLY&R we are committed to ensuring that your personal information is protected and never misused.

Our privacy policy explains what personal information we collect, why we collect it, how we use it, the controls you have over your personal information and the procedures that we have in place to protect your privacy. It applies to personal information we collect through public sources such as LinkedIn, as well as resumes and other documents you send to us.

By sharing your personal information with us, you confirm that you have read and understood the terms of this privacy policy. We take responsibility for the personal information we collect about you, and we aim to be transparent about how we handle it, and give you control over it.

In this privacy policy, when we refer to "VMLY&R", "us", "we" or "our", we mean VMLY&R and its operating companies.

If you have any questions, comments or concerns about any aspect of this policy or how VMLY&R handles your information please email our privacy team at


What personal information do we collect?

We collect personal information from you in several different ways; you may share that information with us, or we may collect it using other means. In this section, we explain the different ways we collect personal information from you and some ways in which that information will be used. For more detail on how we use your personal information, please see the section titled “How do we use your personal information?”

We collect personal information that you share with us when you contact us or interact with us through our website, email, phone or otherwise. You can decide not to provide certain information or ask that any information you have previously shared is removed. If you do so, you may not be able to take full advantage of a career at VMLY&R and progress an application.

For example, you may provide information to us when in contact about an opportunity to work at VMLY&R, sharing a resume or other career information.

Through these interactions you may share with us: your name, address, email address, postal address, contact number, career history (usually in the form of a resume) as well as any other personally identifiable information you include in your interactions with VMLY&R. We may also ask for additional information to assist us with our recruitment process and in the event you are offered a job.


Most browsers are initially set up to accept cookies; however, you can reset your browser to refuse all cookies or indicate when a cookie is being sent or you can flush your browser of cookies from time to time. (Note: you may need to consult the help area of your browser application for instructions.)

How do we use your personal information?

We may share your personal information with companies in the WPP Group, and given the global nature of our company, your personal information may be transferred from one jurisdiction to another. When we make such transfers, we do so in accordance with data protection legislation, for example by using Standard Contractual Clauses where information is transferred from VMLY&R in the United States of America to VMLY&R in the European Economic Area.

By submitting your personal information to us, you agree to us transferring, storing and handling your personal information in this way.

We share your personal information with certain third parties who provide services on our behalf. They only have access to the personal information they need to perform those services. They are required to keep your personal information confidential and may not use it other than as we ask them to and always in accordance with this privacy policy.

We use the personal information you share with us in the following ways:

  • To communicate with you;
  • To provide you with updates about your VMLY&R application;
  • To provide services and support for any application you make;
  • To facilitate any application you make to VMLY&R;
  • To provide updates to you about any changes to VMLY&R policies, terms and conditions and any other matters which we may need to tell you;
  • If you have asked us to keep you informed of other opportunities at VMLY&R, we may periodically contact you to tell you about these; and
  • To respond to your queries and requests.

Contacting you in the future

If you have asked us to, we will keep you informed of other opportunities at VMLY&R. We do this in various ways, including email, post, SMS, via social media platforms and by phone, but only if you are happy for us to do so. We keep your information for a period of time reasonable to fulfill this purpose.

If you would like more information on how we share your personal information, please email our team at

Links to third party websites

We may provide links to other websites which are not operated and controlled by VMLY&R.

We have no control over and are not responsible for the content of those sites or how the third parties responsible for them collect and use your personal information. We do not endorse or make any representations about third party websites.

Third party websites may have their own privacy policies explaining how they use and share your personal information. You should carefully review those privacy policies before you use these websites to make sure that you are happy with how your personal information is being collected and shared.

How long do we keep your personal information?

We only keep your personal information for as long as we need to, to be able to use it for the reasons given in this privacy policy, and for as long as we are required to keep it by law. Following an application we keep your information should any other opportunities become available.

Informing us of changes

If any of the information that you have provided to VMLY&R changes, for example if you change your email address, name or postal address, you can update, amend or request removal of information by submitting a request to

How do we protect your personal information?

We use appropriate technical and organizational measures, including encryption, to protect your personal information and privacy, and review those regularly. We protect your personal information using a combination of physical and IT security controls, including access controls that restrict and manage the way in which your personal information and data is processed, managed and handled. While we cannot guarantee the security of your personal information, we commit to taking all reasonable steps to do so.

Changes to this privacy policy

We will review and update this privacy policy from time to time and will note the date it was last updated below.

Contact us

If you have any questions, comments or concerns, or would like to make a complaint about how we use your personal information, please email our team at

We will get back to you as soon as possible.


CCPA Privacy Policy

To comply with the California Consumer Privacy Act of 2018 (“CCPA”) and other California privacy laws this privacy policy is for California residents and supplements the information contained in the Privacy Policy of VMLY&R (collectively, “we,” “us,” or “our”) above. This policy applies to visitors and users who are residents of the State of California (“consumers” or “you”).  Any terms defined in the CCPA have the same meaning when used in this policy.

Categories of personal information we collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information”). Within the last 12 months, we have collected the following categories of personal information from consumers:

Category of Personal InformationExamples


A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.

Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))

A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. 

Protected classification characteristics under California or federal law

Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).

Internet or other similar network activity

Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.

Professional or employment-related information

Current or past job history or performance evaluations.

Personal information does not include publicly available information from government records, deidentified or aggregated consumer information.

Sources, purposes and sharing of personal information

The table below outlines how we collect or receive the categories of personal information, the business purpose for this and, if we share the personal information, the categories of third parties we share it with.

We may disclose your personal information to other group companies, affiliates and third parties to help us process your personal information for the purposes set out in this policy. When we disclose personal information for a business purpose, we enter a contract that describes the purpose of the processing and prevents the recipient from retaining, using or disclosing the personal information for any purpose other than performing the contract.

Category of Personal InformationCategory of source (including direct from consumer) Business purpose for which the information is collected


Direct from consumer
  • Processing, evaluating, and communicating with you about your application, including to check references or your background, and communicate with you about other jobs that may interest you.
  • Other business purposes as identified in the CCPA, which include:
    • Auditing related to our interactions with you;
    • Legal compliance;
    • Detecting and protecting against security incidents, fraud, and illegal activity;
    • Debugging;
    • Internal research for technological improvement;
    • Internal operations;
    • Activities to maintain and improve our business; and
    • Other one-time uses.

Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))

Direct from consumer

Protected classification characteristics under California or federal law

Direct from consumer

Internet or other similar network activity


Professional or employment-related information

Direct from consumer and previous employers


Sharing and Sale of Personal Information

In the preceding twelve (12) months, we have not shared or sold any personal information to third parties.  

Your Rights

The CCPA provides consumers (California residents) with specific rights regarding their personal information, these are explained below.

Access to your Personal Information and Data Portability

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your request, we will disclose to you:

  • The categories of personal information we collected about you.
  • For each category of personal information we collected about you: 
    • the categories of sources from which this was collected.
    • our business or commercial purpose for collecting that personal information.
    • our business or commercial purpose for selling or disclosing that personal information.
    • the categories of third parties with whom we disclose or sell your personal information.
  • The specific pieces of personal information we collected about you.

For data portability requests, we will provide your personal information in a format that is readily useable and should allow you to transmit the information from us to another entity.

Deletion Request 

You have the right to request that we delete any of your personal information that we collected from you and retained. We may deny your deletion request if it is necessary for us or our service providers to retain your personal information, based upon allowed exceptions. 

Once we receive and verify your request, and no exception applies, we will delete and direct our service providers to delete your personal information as requested. We will contact you to confirm the deletion and the manner in which it was deleted.


We will not discriminate against you for exercising any of your rights under the CCPA.

Exercising Access, Data Portability, and Deletion Rights

To exercise the rights described above please submit your request to us at

Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. 

For the purpose of verification, we may request further information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request.  

There is no charge for exercising your request, however, if it is excessive, repetitive, or manifestly unfounded we may charge a reasonable fee based upon the administrative costs of providing the information to you or taking the action requested. We may also refuse to act on the request and will notify you of the reason for refusing the request. 

Response Timing

Upon receiving a verifiable consumer request, we aim to deliver the required information within 45 days. Where we require more time (up to a further 45 days), we will inform you of the reason and extension period.

How to contact us

If you wish to exercise any of your rights in relation to your personal information or if you have any queries about how we use your personal information, please let us know by contacting us at

Changes to this Privacy Policy

We review this privacy policy on a regular basis to ensure that it is up-to-date with our use of your personal information, and compliant with applicable data protection laws.

We reserve the right, at our discretion, to revise this privacy policy at any time. The updated privacy policy will be posted on our website. You are encouraged to review this privacy policy from time to time.