Global Candidate Privacy Notice

Effective Date: March 2026

Burford is committed to protecting the privacy and security of your Personal Data. Personal Data means any information relating to an identified or identifiable natural person.

The purpose of this Privacy Notice is to let you know clearly how Burford collects and uses Personal Data about you for the purposes of the recruitment exercise that you are taking part in (whether as an employee, worker or contractor).

For the purposes of this Privacy Notice, “Burford” means Burford Capital Holdings (UK) Limited, certain of its subsidiaries and other applicable entities¹. Burford is the ‘data controller’. This means that we are responsible for deciding how we hold and use Personal Data about you. We are required under data protection legislation to notify you of the information contained in this Privacy Notice.

It is important that you read and understand this notice so that you are aware of how and why we are using your Personal Data.

Further, we may use artificial intelligence (AI) and machine-learning technologies to support and improve our services. These technologies help us operate our business efficiently and enhance functionality. We do not use AI to make decisions that produce legal or similarly significant effects on individuals without appropriate safeguards, human oversight or notice when required by law.

For California residents, please also see the “Supplemental Notice for California Residents” section below.

For Singapore residents, please also see the “Supplemental Notice for Singapore Residents” section below.

How is your Personal Data collected and stored?

In connection with your application for work with us, we will collect, store, and use Personal Data about you that you have provided to us directly as part of the application process. This may include, for example, information in application forms, CVs or resumes and covering letters, or collected through interview or other forms of assessment.

We may also collect Personal Data about you from the following sources:

Recruitment agencies
Suppliers who undertake background screening
Credit Reference agencies
Disclosure and Barring Service in respect of criminal convictions
Your named referees
Information from third parties from a publicly accessible source, for example, the Law Society

Personal Data that we collect about you from third parties may include:

Recruitment information (including copies of right to work documentation, references and other information included in a CV or cover letter or as part of the application process)
Employment records (including job titles, working hours, training records, qualifications, professional memberships and employment history, including start and end dates with previous employers)
Information about your entitlement to work in the country in which you are being recruited to work

We may collect, store and use the following "special categories" of more sensitive Personal Data about you:

Information about your race or ethnicity, religious beliefs, sexual orientation and political opinions
Information about your health, including any medical condition, health and sickness records
Information about criminal convictions and offence

Your Personal Data will be stored in a range of different places, including on your application records, in HR management systems and on other IT systems (including email).

Why do we collect and use Personal Data about you?

Burford has a legitimate interest in processing your Personal Data during the recruitment process and for keeping records of the process. Processing Personal Data about candidates allows Burford to manage the recruitment process, assess and confirm a candidate's suitability for employment or engagement and decide who to make an offer to. Burford may also need to process Personal Data about candidates to respond to and defend against legal claims.

Burford needs to process Personal Data about you to take steps at your request prior to entering into a contract with you. It may also need to process your Personal Data to enter into a contract with you.

In some cases, Burford needs to process Personal Data about you to ensure that it is complying with its legal obligations. For example, it is required to check a successful candidate's eligibility to work in the UK before employment starts.

Burford may process special categories of Personal Data, such as information about ethnic origin, sexual orientation or religion or belief, for equal opportunity monitoring purposes. It may also collect information about whether or not candidates are disabled to make reasonable adjustments for candidates who have a disability. Burford processes such information to carry out its obligations and exercise specific rights in relation to employment.

For certain roles, and where permitted by applicable law, Burford may carry out background checks that may include information about criminal convictions and offences. These checks are not conducted for all candidates and are only undertaken after an offer of employment has been accepted and with the candidate’s prior consent.

Burford will only collect and process information relating to criminal convictions and offences where it is legally entitled to do so and where it is necessary to meet its legal or regulatory obligations, or to exercise specific rights in connection with employment.

If you decide not to provide Personal Data

If you do not provide information when requested, which is necessary for us to consider your application, we will not be able to process your application successfully.

Automated decision-making

Our recruitment processes are not based solely on automated decision-making.

Who has access to recruitment data?

Your Personal Data may be shared internally for the purposes of the recruitment exercise. This includes members of the HR and recruitment team, interviewers involved in the recruitment process, managers in the business area with a vacancy and IT staff if access to the data is necessary for the performance of their roles.

As part of the recruitment process Burford may share your Personal Data with third party test providers in order to assist in assessing your suitability for the role for which you are applying or with other entities within the Burford corporate family. Otherwise, Burford will not share your Personal Data with third parties, unless your application for employment is successful and it makes you an offer of employment. Burford will then share your Personal Data with former employers to obtain references for you, employment background check providers to obtain necessary background checks and the Disclosure and Barring Service to obtain necessary criminal records checks.

International transfers of Personal Data

Your Personal Data may be transferred outside the UK, the European Economic Area (EEA), or your jurisdiction of residence as we store electronically held Personal Data primarily with cloud storage providers located in the US. Where data is transferred outside your jurisdiction of residence, we will ensure there are appropriate safeguards in place to protect your Personal Data.

When data is transferred to other Burford entities, it may be subject to Burford's International Data Transfer Agreement which seeks to ensure that adequate protections are in place and that transfers are subject to applicable data protection or data privacy laws. Transfers to third parties will be made in compliance with local laws and will be subject to appropriate contractual, organisational and technical controls to ensure that appropriate levels of security and privacy are maintained.

Such disclosures of data may in some circumstances involve the transfer of your data to countries which may not offer the same level of data protection as is available in your jurisdiction of residence, including those listed in Appendix A. Where Burford does make such transfers, it will ensure that your Personal Data is protected by data transfer agreements in the appropriate standard forms compliant with the EU General Data Protection Regulation and the UK General Data Protection Regulation (together, “GDPR”) and other applicable privacy regulations.

How does Burford protect your Personal Data?

Burford takes the security of your Personal Data seriously. We have put in place appropriate technical and organisational measures to prevent your Personal Data from being accidentally lost, destroyed, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your Personal Data to those employees, agents, contractors and other third parties who need to access it in the proper performance of their roles for Burford. They will only process your Personal Data on our instructions and they are subject to a duty of confidentiality. These measures are in accordance with applicable laws and regulations.

Where Burford engages third parties to process your Personal Data on its behalf, they are also obliged to implement appropriate technical and organisational measures to ensure the security of data.

How long will Burford retain your Personal Data for?

If your application is successful, Personal Data gathered during the recruitment process will be transferred to our HR files and retained during your employment or engagement. The periods for which we will continue to hold your Personal Data will be notified to you in a new Privacy Notice.

If your application is unsuccessful, we will retain your Personal Data for so long as is necessary for the purposes of compliance with our multi-jurisdictional laws and regulations and so that we can show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way.

Your Rights

Various privacy laws provide data subjects with certain rights regarding their Personal Data. Depending on your jurisdiction and subject to specific local law provisions you may be entitled to some of the following rights:

The right to obtain information regarding the processing of your Personal Data and access to the Personal Data which we hold about you.
The right to withdraw your consent to our processing of your Personal Data at any time. Please note, however, that we may still be entitled to process your Personal Data if we have another legitimate reason (other than consent) for doing so. Where the processing of Personal Data is based on legitimate interest, you have the right to object to the data processing under certain circumstances.
In some circumstances, the right to receive some Personal Data in a structured, commonly used and machine-readable format and/or to request that we transmit the data to a third party where this is technically feasible. Please note that this right only applies to Personal Data which you have provided to us.
The right to request that we rectify your Personal Data if it is inaccurate, outdated, or incomplete.
The right to request that we erase, delete, or destroy your Personal Data in certain circumstances. Please note that there may be circumstances where you ask us to erase your Personal Data, but we are legally entitled to retain it.
The right to object to, and the right to request that we restrict our processing of your Personal Data in certain circumstances. Again, there may be circumstances where you object to, or ask us to restrict, our processing of your Personal Data but we are legally entitled to continue processing your Personal Data and/or to refuse that request.
Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes.
Request that we limit the use of your sensitive Personal Data.
Choose to opt-out of the sale of Personal Data or the sharing of Personal Data for cross-context behavioral advertising. Currently, however, Burford does not sell or share candidate Personal Data.
The right to lodge a complaint with the data protection regulator (details of which are provided below) if you think that any of your rights have been infringed on by us. See Appendix A for a list of applicable jurisdictions and corresponding regulatory authorities.

Burford will not retaliate or take adverse action against you for having exercised these rights.

You can exercise your rights by contacting us using the details set out in the “Contact Us and How to Exercise Your Rights” section below.

Supplemental Notice for California Residents

This section provides additional details about the Personal Data we collect about individuals and the rights afforded to them under California privacy laws.

Categories of Personal Data Collected

Specifically, we collect the following types and categories of Personal Data from you:

Category	Data Elements
Identifiers	A real name, alias, postal address, email address, Social Security number, or other similar identifiers
Personal Data categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	A name, signature, Social Security number, address, telephone number, education
Protected classification characteristics under California or federal law	Age (40 years or older), national origin, citizenship, physical or mental disability, sex (including gender, gender identity), veteran or military status
Professional or employment-related information	Employment history, recruitment information, copies of right to work documentation, references, CV, cover letter, employment records, job titles, working hours, training records, qualifications, professional memberships
Sensitive Personal Data	Government ID, criminal convictions and offences

Your Rights Over Your Personal Data

As a resident of California, you have the following rights under the California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”):

Right to Access: You have the right to request that we disclose to you in a portable format the Personal Data we collect, use, disclose, share and or sell about you (if applicable).
Right to Correct: You have the right to request that inaccurate Personal Data we hold about you be corrected.
Right to Delete: You have the right to request that we delete your Personal Data that we’ve collected.
Right to Opt Out: You have the right to opt out of behavioral or targeted advertising, automated profiling, and sales of Personal Data, (if applicable*).
Right to Restrict the Use and Disclosure of Sensitive Personal Data: You have the right to request that we limit our use and disclosure of your sensitive Personal Data.
Right to Nondiscrimination: You have the right not to receive discriminatory treatment in the event that you exercise any of your above rights.

*California residents have the right to opt-out of the sale or sharing of their Personal Data under the CCPA. However, we do not sell or share (for cross-context advertising purposes) applicant Personal Data to any third parties. If our practices change, we will update this Notice and take any other necessary action to comply with applicable law.

Supplemental Notice for Singapore Residents

This section provides additional details about the Personal Data we collect about individuals and the rights afforded to them under Singapore privacy laws.

Right to Access: You have the right to access the Personal Data we hold about you and information on how we have used or disclosed it within the past year.
Right to Correct: You have the right to correct errors in your Personal Data.
Right to Withdraw Consent: In certain circumstances, you have the right to withdraw consent regarding the processing of your Personal Data.
Right to Complain: You have the right to submit a formal complaint regarding the processing of your Personal Data.
Right to be Informed: You may request further information about our Personal Data practices and how your Personal Data is handled.

Additionally, the following Personal Data processing practices apply:

Data Retention. We will not retain your Personal Data longer than is necessary for legal or business purposes.
Cross Border Data Transfers. If we transfer your Personal Data outside of Singapore, we will ensure that the receiving organization provides a standard of protection comparable to that required under the Singapore Personal Data Protection Act.

To exercise any of the foregoing rights or if you have any other questions about this Privacy Notice, please contact the Data Privacy Compliance Team by sending an email to [email protected] in the first instance. If you are located in the U.S., you can also dial 1-877-204-1643.

Appendix A – Authorities

Jurisdiction	Regulation	Authority	Contact
Dubai	The DIFC Data Protection Law	The DIFC Commissioner of Data Protection	https://www.difc.ae/business/registrars-and-commissioners/commissioner-of-data-protection
EU	EU General Data Protection Regulation	European Data Protection Board	https://edpb.europa.eu/edpb_en
Singapore	Personal Data Protection Act	Personal Data Protection Commission	[email protected]
United Kingdom	UK General Data Protection Regulation	Information Commissioner's Office	https://ico.org.uk/
United States (California)	California Consumer Privacy Act	California Privacy Protection Agency	https://cppa.ca.gov/

1. Burford Asia Investments Pte Ltd and Ballard Singapore Investments Pte Ltd

This material has been prepared by Burford Capital Limited (together with its subsidiaries, “Burford Capital”) solely for informational purposes, is not intended to be relied upon as a forecast, research or investment advice and is not a recommendation, offer or solicitation to subscribe for, buy or sell any securities, products or services or to adopt any investment strategy. The opinions expressed in this material are as of the date of this material and are subject to change at any time without notice, and Burford Capital does not have any responsibility to update this material to account for such changes. Unless otherwise specified, information contained in this material is sourced from and reflects the views and opinions of Burford Capital. Certain information contained in this material has been obtained from sources other than Burford Capital. While such information is believed to be reliable for purposes used in this material, no representation or warranty, either express or implied, is made as to fairness, accuracy, reasonableness or completeness thereof, and Burford Capital does not take any responsibility for such information. Certain information contained in this material discusses general market activity, industry or sector trends or other broad-based economic, market or political conditions and should not be construed as research or investment advice. There can be no assurances that any of the trends described in this material will continue or will not reverse. Past events and trends do not imply, predict or guarantee, and are not necessarily indicative of, future events or results. The information contained in this material is not intended to provide, and should not be relied upon for, accounting, legal or tax advice or investment recommendations. Reliance upon information in this material is at the sole discretion of the reader.

This material may contain “forward-looking statements”. Although Burford Capital believes that the assumptions, expectations, projections, intentions and beliefs about future results and events reflected in forward-looking statements have a reasonable basis and are expressed in good faith, forward-looking statements involve known and unknown risks, uncertainties and other factors, which could cause Burford Capital’s actual results and events to differ materially from (and be more negative than) future results and events expressed, targeted, projected or implied by these forward-looking statements. The forward-looking statements speak only as of the date of this material and, except as required by applicable law, Burford Capital undertakes no obligation to update or revise any forward-looking statements, whether as a result of new information, future events or otherwise.

Global Candidate Privacy Notice

Get in touch