WHO WE ARE

You might know us as the inventors of the bath bomb, but there’s more to this great-smelling, partly employee-owned, family-run company than pioneering cosmetics. We believe our business should put more back into the world than it takes and demonstrate that capitalism can be a force for good.
The Living Wage Foundation’s statement ‘a hard day’s work deserves a fair day’s pay’ is one that we are proud to commit to in the UK. As an accredited Living Wage employer, we put our people first and fight cruel practices like animal testing, promote regeneration, and show that it is what’s inside that counts - whether that’s an ingredient in a product, or the minerals in a smartphone.

SKILLS, KNOWLEDGE AND EXPERTISE

• An excellent communicator with an approachable nature, organised and self-motivated.
• Ability to work independently with minimum supervision.
• Ability to process requests quickly, especially with regard to legal matters such as security incidents and customer data requests.
• Willing to learn lots of new skills and ability to learn on the job.
• Knowledge or previous experience working with GDPR/data privacy is preferred.
• Experience working with data privacy in a customer-facing business is preferred.
• Note that some travel will be required, attendance of events and organising materials for events (training, presentations, etc.) may be required.

THE ROLE

We encourage new ways of working and take our own perspective on data privacy and security and we hope those applying will bring fresh and innovative ideas to the role. The candidate will be responsible for implementing and progressing Data Privacy activities across the global business.

KEY RESPONSIBILITIES

• Taking and utilising resources provided by the Data Privacy team, you will act as the Data Privacy Support for new and existing projects across the UK business, including for Retail, Manufacturing, and Support, to ensure compliance with data protection legislation.
• Promoting Data Privacy awareness training to all areas of the business.
• Being a Data Privacy contact and support for all Lush countries (including partners who may require an individual approach) and helping to coordinate compliance work between the UK and group/partner countries.
• Liaising with key stakeholders from across the business and carrying out/assisting in Data Protection Impact Assessments (DPIAs) for new projects.
• Assisting with helpdesk, data protection incidents, Subject Access Requests (SARs), and queries.
• Maintaining evidential logs of activities carried out, including Records of Processing Activities (ROPA).
• Coordinating UK and Global audit-like reviews alongside the Data Privacy team and facilitating remediation work
• Facilitating and updating Data Privacy training for all UK staff and promoting training initiatives globally.
• Promoting effective work practices and encouraging a culture of data privacy within the business.