Global Job Applicant Notice

Grant Thornton Job Applicant Terms and Conditions

Updated: May 2026

Terms and Conditions

This Job Applicant Privacy and Data Protection Notice (“Privacy Notice” or “Notice”) explains how Grant Thornton Advisors LLC, Grant Thornton LLP, Grant Thornton International Holdings Ltd., or an affiliate entity or member firm organized under the laws of applicable jurisdictions in which each may operate under the Grant Thornton trading name[1] (collectively “Grant Thornton”, “the Firm”, “we”, “us”, or “our”) collects, uses,

and discloses the personal data of job applicants (“personal data” or “personal information”), including job applicants who are California residents, to the extent such personal data is collected, used, or disclosed by the Firm solely within the context of their status as a job applicant. This Notice supplements other privacy notices you may receive in connection with your relationship with us. For purposes of applicable data protection laws, including those in the European Union (“EU”)/United Kingdom (“UK”), the prospective employing Grant Thornton entity is the controller of personal data processed under or in connection with this Notice (“Controller”).

By using this website to apply for a job, you are about to submit personal data, including sensitive personal data, as part of the recruitment process. We may collect information such as name, address and other contact information, work and educational experience, licenses and certifications, and other personal data. Your decision to submit such information is entirely voluntary.

The information collected in our career center will be accessible to selected recruitment personnel and hiring managers relevant to the hiring process. We may use this information to process and evaluate your application for employment and to communicate with you about employment opportunities. We may also retain and use this information to identify, and communicate with you about, future potential employment opportunities with us.

If we elect to make an offer of employment, this information may become part of the employee file and may be used for other employment and work-related purposes. Regardless of whether you are offered and accept an offer of employment or not, we will retain your data in accordance with the Firm’s record retention policy.

The application will not be processed until it is complete.

We participate in the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework, and the UK Data Privacy Extension programs administered by the U.S. Department of Commerce (collectively, “DPF”) regarding our collection, use, and retention of personal data transferred from the EU, UK and Switzerland to the United States. Grant Thornton’s participation in the DPF applies to the collection, use, and retention of any personal data transferred from the EU, UK and Switzerland whether through our websites or in connection with providing our services or operating and administering our business.

To learn more, please visit www.grantthornton.com/privacy-policy/data-privacy-framework. By completing this online form, you understand that Grant Thornton transports this data to the United States where it will be kept in confidence in accordance with the Firm’s record retention policy or deleted as may be permitted by applicable law.

Notice Regarding Background Investigations

Certain offers of employment at Grant Thornton are contingent on the satisfactory completion of a background check, to the extent permitted by applicable local law.

As part of the background check process, Grant Thornton may obtain information about you from a designated third-party consumer reporting agency or similar background check provider, which may include information about your educational history, licenses and certifications, identity/social security verification, prior employment or military record, character, general reputation, personal characteristics, criminal record and/or mode of living through personal interviews. Grant Thornton conducts background checks in accordance with all applicable local laws and regulations and will provide and/or obtain all legally required notices, disclosures and authorizations prior to running the background check.

Your Acknowledgements

By submitting an inquiry or application for a job with Grant Thornton, you confirm that the statements given and the information provided by you on the application and during the application process are accurate to the best of your knowledge and belief, and you further understand that providing false or misleading statements during the application process or within the application may result in retraction/withdrawal any offer of employment made to you or separation/dismissal from employment, as applicable.

You acknowledge and confirm that I have read and understand this Notice and the information contained therein in regard to:

the collection of your personal data,
how the data is collected,
for what the information is used,
what information (if any) is transferred,
how long the information is retained,
the consequences of not providing the information, and
your rights in regard to the processing of your personal data.

Voluntary Disclosure – For Applicants in Ireland Only

By submitting an inquiry or application for a job online or through other channels, you confirm the following:

You understand that any offer of employment made to you may be conditional upon satisfactory results from checks undertaken by the Firm or any third party undertaking the checks on the Firm’s behalf including to verify the information you have provided on your application form.
You understand that these checks will cover information you have disclosed and may include educational/professional qualifications, professional affiliations (including, if appropriate, FSA standing), previous job experience, personal and professional references and other details supplied. Checks may also be carried out using records and information in the public domain.
You agree to these checks being undertaken by the Firm or any third party undertaking the checks on the Firm’s behalf.
You understand that unsatisfactory results from any background check undertaken (if applicable) may be considered cause for retracting any offer of employment made to you or for dismissal, as the case may be.
You also understand that any offer of employment and any subsequent ongoing employment by the Firm (as the case may be) will be conditional upon you having valid work authorization and the ongoing right to work for the Firm in the jurisdiction stated on the job application. Accordingly, you understand that the Firm or any third-party undertaking checks on the Firm’s behalf has the right to request evidence of your ongoing right to work for the Firm in the relevant jurisdiction. Further, you understand that any false statements or unsatisfactory evidence provided by you in respect of your ongoing right to work for the Firm may be considered cause for retracting any offer of employment made to you or for dismissal, as the case may be.

Personal Data We Collect

We collect the following categories of personal data about job applicants:

Personal identifiers: name, address, email address, government-issued identification documents.
Protected class information: race, ethnicity, gender, gender identification, veteran status, and other protected characteristics as permitted under applicable law.
Internet or other electronic activity information: your device and browser type, your browsing and search history on our website, information regarding your interaction with our website and our advertisements, and your interactions with our emails.
Professional information: information included in your resume/CV, including records of your work and education history, including but not limited to, internal and external work history and references.
Educational information: education history, trade school records, certificates obtained.
Sensitive personal data: driver’s license information, passport information, race, ethnicity, and other protected characteristics as permitted under applicable law and which may qualify as sensitive personal data under EU/UK data protection.
Data concerning criminal convictions and offences: where we carry out background checks this may involve the processing of criminal record data and this will only be processed where such processing is specifically authorized or permitted under applicable law.
Any other information you choose to voluntarily disclose in your application.

Purposes for Collection of Personal Data

We use personal data of applicants to evaluate your application for employment, to compare your qualifications with other applicants, to conduct job interviews, and to comply with applicable law. For more information on the purposes of personal data processing, see the section on “Legal Basis” below.

We do not sell or share for cross-context behavioral advertising personal data of applicants.

Retention Periods

If an applicant applies for a job with Grant Thornton and there are no vacancies, we will delete any personal data provided by the applicant when the Firm no longer has a legitimate business purpose for it, in accordance with our record retention policies and applicable law.

If we consider an applicant’s application for a job but the recruitment process does not result in employment, we will maintain their personal data for as long as we have a legitimate business purpose to retain it, unless we are expressly required by law to maintain this information longer, after which their personal data will be deleted.

We only retain personal data of applicants for as long as necessary to fulfill the purposes for which we collected it, including for any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of the personal data, the purposes for which we process applicant personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

The specific retention periods may differ depending on where applicants are employed or engaged. For further information on our record retention policies and procedures please contact us as noted at the bottom of this Notice.

If you are successful and a contract of employment arises, the Personnel Privacy Notice provides further information concerning the retention of your personal data.

Sources From Which We May Collect Personal Data

We collect personal data of applicants from the following sources: applicants, recruiters, recruiting agencies, any references or professional contacts that may provide references or other information about applicants, our employees or contractors that may interview or otherwise evaluate applicants, and from publicly-available sources.

Where the processing of personal data is necessary in order for us to fulfill our legal and regulatory/contractual obligations, failure by an applicant to provide certain personal data in whole or in part, could make it impossible for us to consider the application.

Use or Disclosure of Sensitive Personal Data

We do not use or disclose sensitive personal data of applicants to infer characteristics about applicants or for any purposes other than to identify and evaluate applicants, conduct background checks, comply with applicable laws, or operate our business.

Disclosure of Personal Data

The following chart describes the categories of personal data of applicants that we disclosed to third parties for a necessary business purpose. We may also share personal data of applicants as required or permitted by law to comply with a subpoena or similar legal process or government request, or when we believe in good faith that disclosure is legally required or otherwise necessary to protect our rights and property or the rights, property or safety of others, including to law enforcement agencies, and judicial and regulatory authorities.

We may also share personal data of applicants with third parties to help detect and protect against fraud or data security vulnerabilities. And we may share or transfer personal data of applicants to a third party in the event of an actual or potential sale, merger, reorganization of our entity or other restructuring.:

Categories of Personal Data of Applicants	Categories of Third Parties to Which We Disclosed Personal Data of Applicants for a Business Purpose
Personal identifiers: name, address, email address, government-issued identification documents	Service providers that assist in providing human resource functions; that facilitate scheduling and email communications; that assist with recruitment activities; that assess and evaluate candidates; that assist the Firm with services necessary to operate the business
Protected class information: race, ethnicity, gender, gender identification, veteran status, and other protected characteristics as permitted under applicable law, which may qualify as sensitive personal data under EU/UK data protection qualifies	Service providers that assist in providing human resource functions; that assist with recruitment activities; that assist the Firm with services necessary to operate the business
Internet or other electronic network activity information: your device and browser type, your browsing and search history on our website, information regarding your interaction with our website and our advertisements, your interactions with our emails	Service providers that provide security services and cloud-based data storage, host our websites and assist with other IT-related functions; that assist with recruitment activities; that assist the Firm with services necessary to operate the business
Professional information: information included in your resume/CV, including records of your work and education history (including but not limited to internal and external work history and references)	Service providers that assist with recruitment activities; that assist in providing human resource functions; that assess and evaluate candidates; that assist the Firm with services necessary to operate the business
Educational information: education history; trade school records; certificates obtained	Service providers that assist with recruitment activities; that assist in providing human resource functions; that assess and evaluate candidates; that assist the Firm with services necessary to operate the business
Sensitive personal data: race, ethnicity, driver’s license information, passport information, and other protected characteristics as permitted under applicable law	Service providers that assist with recruitment activities; that assist in providing human resource functions; that assess and evaluate candidates; that assist the Firm with services necessary to operate the business
Data concerning criminal convictions and offences	Service providers that assist with recruitment activities, in particular to conduct background checks where such processing is specifically authorized or required under applicable law

Business Purposes for Above Disclosures

We disclosed the aforementioned categories of personal data of applicants to the categories of third parties identified above for the following purposes: to provide human resource functions, facilitate scheduling and email communications, assess and evaluate applicants, provide security services and cloud-based data storage, assist with other IT-related functions, provide analytics, host or facilitate teleconferencing or video conferencing, prevent fraud and other illegal activities, to obtain professional advice about legal matters, and to provide other services necessary to operate our business.

Cross-Border Transfers of Personal Data

Given the global nature of Grant Thornton’s activities, the Firm may, for the purposes identified in this Notice, transfer applicant personal data to other Grant Thornton entities, or to other recipients as referred to above, that are located outside of the country in which you reside, including to the U.S., and which may not be considered by the country in which you reside to provide an adequate level of data protection. As a result, your data may be accessed by the courts, law enforcement and national security authorities of the jurisdiction(s) to which your personal data has been transferred.

Applicant personal data will only be transferred from the EU/UK to a recipient in a country which is not considered to provide an adequate level of data protection when the transfer is in compliance with applicable data protection requirements and by implementing appropriate safeguards including participation in the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework, and the UK Data Privacy Extension, or application of the EU Standard Contractual Clauses, UK Addendum, or similar contractual mechanism as applicable in the jurisdiction, as necessary.

Applicants can request a copy of the relevant safeguards implemented by the Firm by contacting

privacy.questions@us.gt.com, or (877) 282-0109, through our webform or by writing to us using the contact details below:

Corporate Mailing Address: Grant Thornton

Privacy Office - Risk, Regulatory & Legal Affairs

171 N. Clark Street, Suite 200

Chicago, IL 60601

Legal Bases for Processing Personal Data in EAA/UK

If the applicant is located in the EEA/UK and/or the Controller is located in the EEA/UK, the processing of personal data by the Controller will be carried out in reliance on the following legal bases:

Categories of Personal Data	Purpose(s) for Processing	Legal Bases for Processing
Personal identifiers, protected class information, internet or other electronic activity information, professional information, education information, sensitive personal data	To receive and undertake initial review of job applications and managing the recruitment process, including assessing the applicant’s skills, qualifications and suitability for the role	Our legitimate business interests in reviewing whether an applicant is suitable and qualified for the relevant role (Article 6(1)(f), GDPR) As necessary to enter into a contract with applicant (Article 6(1)(b), GDPR) Where the processing is necessary for employment, social security and social protection law (Article 9(2)(b), GDPR)
Personal identifiers, internet or other electronic activity information	Communicating with the applicant, recruitment agents and other vendors and business associates, including liaising with (potential) applicants by email or phone to provide updates on the progress of their application, and organising/conducting an interview	Our legitimate business interests in communicating promptly and effectively regarding the recruitment process (Article 6(1)(f), GDPR) As necessary to enter into a contract with applicant (Article 6(1)(b), GDPR) Where the processing is necessary for employment, social security and social protection law (Article 9(2)(b), GDPR)
Personal identifiers, protected class information, internet or other electronic activity information, professional information, education information, sensitive personal data	Making a decision about the applicant’s recruitment or appointment, including checking applicants’ legal right to work	Our legitimate business interests in appointing a suitable and qualified applicant to the relevant role (Article 6(1)(f), GDPR) As necessary to enter into a contract with applicant (Article 6(1)(b), GDPR) Legal obligation under immigration and asylum laws (Article 6(1)(c), GDPR) Where the processing is necessary for employment, social security and social protection law (Article 9(2)(b), GDPR)
Personal identifiers, protected class information, professional information, education information	To contact successful applicants’ chosen referees. Note that where consent is revoked, such revocation will apply from the point of revocation forward	Where the processing is necessary for employment, social security and social protection law (Article 9(2)(b), GDPR)
Personal identifiers, protected class information, internet or other electronic activity information, professional information, education information, sensitive personal data	Maintaining records regarding the recruitment process	Our legitimate business interests in maintaining accurate and comprehensive records regarding the recruitment process (Article 6(1)(f), GDPR) Where we have a legal obligation to do so (Article 6(1)(c), GDPR) Where the processing is necessary for employment, social security and social protection law (Article 9(2)(b), GDPR)
Personal identifiers, protected class information, internet or other electronic activity information, professional information, education information, sensitive personal data	For successful candidates, to create a personnel file	As necessary to enter into a contract with applicant (Article 6(1)(b), GDPR) Where the processing is necessary for employment, social security and social protection law (Article 9(2)(b), GDPR)
Personal identifiers, professional information, education information	To match the details of unsuccessful applicants and contact them in relation to any vacancies which may arise within the Firm which may be of interest	With consent (Article 6(1)(a), GDPR)
Personal identifiers, protected class information, internet or other electronic activity information, professional information, education information, sensitive personal data	In connection with a potential asset or stock acquisition of the Firm, providing reasonable diligence material to a third party, or meeting any disclosure obligations as required by law	Our legitimate business interests in managing our business including legal, personnel, administrative and management purposes (Article 6(1)(f), GDPR) Where the processing is necessary for employment, social security and social protection law (Article 9(2)(b), GDPR)
Personal identifiers, internet or other electronic activity information, professional information, education information	To assess recruitment trends across the Firm	Our legitimate business interests in managing our business including legal, personnel, administrative and management purposes (Article 6(1)(f), GDPR)
Personal identifiers, protected class information, internet or other electronic activity information, professional information, education information, sensitive personal data	To investigate and resolve any grievances, complaints, misconduct, breaches of any contract of employment, any applicable internal regulations or any codes or policies of the Firm by or involving an applicant or where necessary to take disciplinary action against an applicant, or in relation to audits or inquiries involving the Firm	Our legitimate business interests in managing our business and to ensure that all investigations and proceedings are managed efficiently and effectively (Article 6(1)(f), GDPR) Where we have a legal obligation to do so (Article 6(1)(c), GDPR) Where the processing is necessary for employment, social security and social protection law (Article 9(2)(b), GDPR)
Personal identifiers, protected class information, internet or other electronic activity information, professional information, education information, sensitive personal data	To co-operate in proceedings, inquiries, examinations and investigations of governmental, administrative, judicial, regulatory or professional bodies or authorities involving the Firm and responding to any requests or demands made to the Firm by any such authorities	Our legitimate business interests in managing our business and to ensure that all investigations and proceedings are managed efficiently and effectively (Article 6(1)(f), GDPR) Where we have a legal obligation to do so (Article 6(1)(c), GDPR) Where the processing is necessary for employment, social security and social protection law (Article 9(2)(b), GDPR)
Personal identifiers, protected class information, internet or other electronic activity information, professional information, education information, sensitive personal data	To conduct activities in connection with actual or prospective legal proceedings involving the Firm, or for the purposes of obtaining legal advice or establishing or defending legal rights of the Firm	Our legitimate business interests in managing our business and to ensure that all investigations and proceedings are managed efficiently and effectively (Article 6(1)(f), GDPR) Where we have a legal obligation to do so (Article 6(1)(c), GDPR) Where the processing is necessary for employment, social security and social protection law (Article 9(2)(b), GDPR)
Data Concerning Criminal Convictions and Offences
Personal identifiers, criminal convictions and offences data	Where permitted by applicable laws, to process a pending hire’s data relating to criminal convictions and offences to determine whether an individual should be offered a role with the Firm where such processing is specifically authorized or required under applicable law	Our legitimate business interests in determining whether an applicant is suitable for a particular role in the organization (Article 6(1)(f), GDPR) and/or as permitted under applicable data protection law (Article 10 GDPR) Where the processing is necessary for employment, social security and social protection law (Article 9(2)(b), GDPR)

An applicant has a right to object to the processing of their personal data where it is processed for Controller’s legitimate interest

Data Subject Access rights

Where applicable laws require the firm to honor the exercise of the following rights, and subject to permitted exceptions, the Firm will respond to such requests.

Know About Personal Information We Collect

You can ask us for the following information with respect to the personal data of applicants that we have collected about you:

Specific pieces of personal data we have collected about you;
Categories of personal data we have collected about you;
Categories of sources from which such personal data was collected;
Categories of personal data that the business sold or disclosed for a business purpose about you;
Categories of third parties to whom the personal data was sold or disclosed for a business purpose;
The business or commercial purpose for collecting your personal data; and
Ask for a copy personal data to be provided to or a party you designate in a digital format.

Request Deletion of Personal Data

Upon your request and subject to any applicable legal exceptions, we will delete personal data we have collected about you unless doing so would cause us to violate any applicable legal obligations.

Correct Personal Data

You have the right to request that we correct personal data regarding you as an applicant that we hold that you believe is not accurate. We will take steps to determine the accuracy of the personal data that is the subject of your request to correct, and in doing so will consider the totality of the circumstances relating to the personal data regarding you as an applicant that you have identified as being incorrect. We may ask that you provide documentation regarding your request to correct in order to assist us in evaluating the request.

If applicant or Controller is located in the EEA/EU/UK, the following rights may also apply:

obtain restriction of processing or to object to processing of their personal data;
withdraw their consent to the processing of their personal data where this is the legal basis Controller is relying on for the processing. The withdrawal of consent does not affect the lawfulness of Controller’s processing of their personal data based on such consent before the withdrawal.

Applicants also have the right to lodge a complaint about the processing of their personal data with the competent data protection authority.

Our Commitment to Honoring Your Rights

No applicant will be subject to retaliation for exercising any of their rights set forth in this Privacy Notice.

Exercising Your Rights

To exercise your applicable legal rights in your personal data or to ask a question about your data subject rights, contact us at Privacy Questions, or (877) 282-0109 or through our webform. We will provide a response to your request within time limits required under applicable law.

We usually act on requests and provide information free of charge, but we may charge a reasonable fee to cover our administrative costs of providing the information in certain situations and where we are permitted by law to do so.

In some cases, the law may allow us to refuse to act on certain requests. When this is the case, we will endeavor to provide you with an explanation as to why.

Verification of Identity

If you submit a request, and you are located in the U.S. state of California, we will ask you for two (2) pieces of personal data and attempt to match those to information that we maintain about you. If you submit a request, and you or the Controller is located in the EEA, EU, or UK, we reserve the right to verify your identity.

If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of the denial.

Authorized Agents

Where permitted by applicable laws, you may designate an agent to submit requests on your behalf. The agent can be a natural person or an entity.

If you would like to designate an agent to act on your behalf, you and the agent will need to comply with our verification process. Specifically, if the agent submits requests to access, know or delete your personal data as an applicant, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the request on your behalf. We will also require that you verify your identity directly with us or confirm with us that you provided the agent with permission to submit the request.

Please note that this subsection does not apply when an agent is authorized to act on your behalf pursuant to a valid power of attorney. Any such requests will be processed in accordance with applicable law pertaining to powers of attorney.

Third Party Websites

Our Services may contain links to third-party websites. This Privacy Notice does not govern how those third parties collect or use personal data and we do not endorse or have control over their practices. The privacy policies and terms of use for those third parties’ websites/apps govern those companies’ privacy practices. We are not responsible for the content or privacy practices of any third-party websites or platforms.

How We Keep Your Personal Data Secure

We maintain reasonable security measures appropriate to the nature of the personal data of applicants that we collect, use, retain, transfer or otherwise process. Those measures include administrative, technical and physical safeguards designed to protect the personal data you provide against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. However, data security incidents and breaches can occur due to a variety of factors that cannot reasonably be prevented; therefore, our safeguards may not always be adequate to prevent all breaches of security.

Opt-out Preference Signals

An opt-out preference signal is sent by a platform, technology, or mechanism on behalf of consumers and communicates a consumer’s choice to opt out of the sale and sharing of personal data for cross-context behavioral advertising with all businesses that recognize the signal, without having to make individualized requests. The signal can be set on certain browsers or through opt-out plug-in tools.

We recognize the Global Privacy Control signal and do so at the browser level and it does not apply to personal data we may collect offline or that we may associate only with your name or email address. This means that if the signal is sent through a specific browser, we will recognize it for that browser only, and only with respect to the identifiers for that browser. If you would like more information about opt-out preference signals, including how to use them, the Global Privacy Control website has such information (https://globalprivacycontrol.org/).

Changes to This Notice

We may update this notice from time to time. When we make substantive changes, we will update the “Last Updated” date of this Notice. In certain cases and if the changes are material, you will be notified via email or a notice on our website.

Accessibility

We work to make our communications accessible to people with disabilities. To submit accessibility-related requests or report barriers, please contact us a HRhelp.

Contact Us

If there are any questions regarding this Privacy Notice or to request a copy of this Privacy Notice in another format you may contact us at Privacy Questions, or (877) 282-0109.

[1] Including, in addition but not limited to, Grant Thornton (NI) LLP; Grant Thornton Financial & Taxation Consultants Limited; Grant Thornton Business Advisory Services Limited; Grant Thornton Corporate Finance Limited; Grant Thornton Consulting Limited; Grant Thornton Financial Counselling Limited; Grant Thornton Debt Solutions Limited; Grant Thornton Pensioner Trustees Limited; Grant Thornton Limited (Isle of Man) and Grant Thornton (Gibraltar) Limited.

Careers Privacy Notice – Grant Thornton Philippines

Grant Thornton Philippines is committed to protecting your personal data in accordance with the Data Privacy Act of 2012. This notice explains how we collect, use, share, and protect personal data you submit through our careers site or recruitment processes.

1. Types of Personal Data Collected

We may collect and process the following types of personal data:

Full name, contact information (email, phone number, address)
Curriculum vitae (CV), cover letter, academic and professional qualifications
Employment history, references, salary expectations
Government-issued identification numbers (as permitted by law)
Results from interviews, assessments, or background checks (where applicable)

2. Purposes of Processing

Your personal data will be used for the following purposes:

Evaluating your suitability for employment with Grant Thornton
Managing our recruitment and selection process
Conducting interviews, assessments, and background screening
Maintaining a record of applications and recruitment decisions
Compliance with legal, contractual and regulatory obligations
Activities related to creating our employment relationship with you

3. Legal Basis for Processing

We process your data based on:

Your consent, provided when you submit your application
Legitimate interests in evaluating and selecting qualified candidates
Compliance with legal obligations, including labor and employment regulations

4. Data Sharing with Third Parties

We may share your personal data with:

Background check and assessment service providers
Recruitment and HR technology platforms (e.g., applicant tracking systems)
Professional references you have nominated
Clients, as necessary
Service providers necessary for managing employment and post-employment activities
Government entities, as needed
Service providers supporting firm security functions

These third parties are contractually obligated to protect your data and process it only for recruitment-related purposes.

5. Data Retention Period

Your application data will be retained for 12 months from the date of submission unless:

You provide consent for a longer retention period, or
Applicable law requires a longer or shorter retention period

After this period, your data will be securely deleted or anonymized.

6. Your Rights under the Data Privacy Act

As an applicant, you have the right to:

Access and obtain a copy of your personal data
Request correction or updating of inaccurate data
Request deletion or blocking of your data under certain circumstances
Withdraw consent to processing, subject to legal or contractual limitations

To exercise any of these rights, please contact our Data Protection Officer.

7. International Data Transfers

If your application data is transferred outside the Philippines (e.g., to Grant Thornton International member firms or global service providers), we will ensure appropriate safeguards are in place to protect your privacy, such as contractual data protection clauses and secure transfer mechanisms.

8. Contact Us

For questions or requests related to your personal data, please contact:

Data Protection Officer
Grant Thornton Philippines
Privacy.questions@us.gt.com

27th & 28th Floor, Tower 2, The Enterprise Center 6766,
Ayala Avenue corner Paseo de Roxas, Brgy. San Lorenzo,
Makati City, Philippines 1226