Data Protection Consultant

WE’RE SERIOUSLY INTO HEALTHY SKIN.

AND SO ARE OUR BRANDS.

We are the home of scientifically proven, planet-positive skin health brands. Leading the way with science, innovation, and knowledge, we are proactively transforming how people feel in their skin.

Our founders David and Tracy have a pioneering vision to pro-actively transform the beauty industry through science, innovation, and education. This has led the way to better, scientifically proven, long-lasting results in skincare, and better business success for salon professionals and brand partners.

Uniquely, our brands work together as a whole to provide Feed, Fortify, Finish skincare solution. Advanced Nutrition Programme™ to feed the skin from within, Environ® to fortify the skin and et al. to finish. Eventis technology to support and enhance the journey to 100% skin health.

Awards:

Tatler Beauty Awards 2023 – Advanced Nutrition Programme, Winner Best Sustainable Supplement Skin Accumax

Get the Gloss Wellness Awards 2023 – Advanced Nutrition Programme, Silver Winner Best Skin Supplement – Skin Accumax

The Veggie Awards 2023 – GOLD: Vegan Makeup – et al Complexion Glow + Refillable Compact

SILVER: Vegan Makeup – et al. Cream Concealer

SILVER: Plastic Free Innovation – et.al. Complexion Glow + Refillable Compact

Press: Tatler titles Environ Focus Care Moisture+ HA Hydrating Serum as ‘Best Green Packaging’

Location: Riverside House (London) and Hemel Hempstead

We are looking for a contractor for this position. This sits outside IR35.

iiaa is a leading professional skincare company dedicated to providing high-quality products and exceptional customer service. We hold a significant amount of customer data, including personal details, end consumer information, medical information, financial data, and website user data.

About the Role:

We are seeking a passionate and experienced GDPR/Data Protection Specialist to join our team and play a vital role in ensuring our company’s continued compliance with the UK General Data Protection Regulation (UK GDPR).

The successful candidate will be responsible for developing, implementing, and maintaining our data privacy program. This includes overseeing all aspects of data collection, storage, usage, and security. You will work closely with various departments across the organisation to ensure alignment with data privacy best practices.

Role Responsibilities:

• Conduct a comprehensive end-to-end audit of the company's current data processing activities and record-keeping practices to identify any potential compliance gaps.
• Develop, implement, and maintain a comprehensive data privacy program that adheres to the UK GDPR.
• Conduct regular data privacy audits and gap analyses to identify and address any potential compliance risks.
• Manage data subject requests (DSARs), including access requests, rectification requests, and erasure requests.
• Develop and deliver data privacy training programs for staff at all levels, ensuring a very high standard of understanding.
• Advise on the development and implementation of data privacy policies and procedures.

About you:

• In-depth knowledge of the UK GDPR and other relevant data privacy laws and regulations.
• Experience with data subject requests (DSARs).
• Excellent understanding of data security principles and best practices.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills, with the ability to work effectively with all levels of the organisation.
• Project management experience.

We are committed to creating a work environment that doesn’t discriminate against age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, and sexual orientation