Job Description

Global Data Privacy Support
Application Deadline: 3 August 2025
Department: Data Privacy
Employment Type: Permanent - Full Time
Location: Poole
Compensation: 28,000 - 32,000 / year
Description
This is currently an internal-only opportunity.
Diversity matters
We are building a brand that represents the people of the world. It's what you do that counts, and we are always looking to expand perspectives and voices to shape our future.
We see you, we celebrate you, we want you!
Who we are
You might know us as the inventors of the bath bomb, but there's more to this great-smelling, partly employee-owned, family-run company than pioneering cosmetics. We believe our business should put more back into the world than it takes and demonstrate that capitalism can be a force for good.
The Living Wage Foundation's statement 'a hard day's work deserves a fair day's pay' is one that we are proud to commit to in the UK. As an accredited Living Wage employer, we put our people first and fight cruel practices like animal testing, promote regeneration, and show that it is what's inside that counts - whether that's an ingredient in a product, or the minerals in a smartphone.
The role
We encourage new ways of working and take our own perspective on data privacy and security and we hope those applying will bring fresh and innovative ideas to the role. The candidate will be responsible for implementing and progressing Data Privacy activities across the global business.
Please note: We may close this vacancy early if we receive an overwhelming response or our business requirements change.
Key Responsibilities

• Taking and utilising resources provided by the Data Privacy team, you will act as the Data Privacy Support for new and existing projects across the UK business, including for Retail, Manufacturing, and Support, to ensure compliance with data protection legislation.
• Promoting Data Privacy awareness training to all areas of the business.
• Being a Data Privacy contact and support for all Lush countries (including partners who may require an individual approach) and helping to coordinate compliance work between the UK and group/partner countries.
• Liaising with key stakeholders from across the business and carrying out/assisting in Data Protection Impact Assessments (DPIAs) for new projects.
• Assisting with helpdesk, data protection incidents, Subject Access Requests (SARs), and queries.
• Maintaining evidential logs of activities carried out, including Records of Processing Activities (ROPA).
• Coordinating UK and Global audit-like reviews alongside the Data Privacy team and facilitating remediation work
• Facilitating and updating Data Privacy training for all UK staff and promoting training initiatives globally.
• Promoting effective work practices and encouraging a culture of data privacy within the business

Skills, Knowledge and Expertise

• An excellent communicator with an approachable nature, organised and self-motivated
• Ability to work independently with minimum supervision
• Ability to process requests quickly, especially with regard to legal matters such as security incidents and customer data requests
• Willing to learn lots of new skills and ability to learn on the job
• Knowledge or previous experience working with GDPR/data privacy is preferred
• Experience working with data privacy in a customer-facing business is preferred
• Note that some travel will be required, attendance of events and organising materials for events (training, presentations, etc.) may be required

Benefits

• 25 days holiday plus bank holidays
• 6 months of full pay for parental leave (primary caregiver must qualify for SMP)
• Enhanced paternity leave*
• Bonus scheme
• Day off for weekday birthdays
• Holiday purchase scheme
• 50% discount on Lush products and spa treatments
• Cycle to work scheme
• Discounted rail and bus season tickets
• Employee assistance programme
• Financial childcare support on return to work*
• We're 10% Employee Owned - all colleagues play a role in protecting our ethics, our independence, contributing ideas for the future and share in the rewards of success when the company is doing well.
• Support groups, film nights, yoga, meditation sessions and much more
• *Tailored gender affirming care

*qualifying period/hours required
We believe that your information is yours and that it is Lush's responsibility to process your personal information in a secure, fair and accurate manner. Every individual processed by LUSH has certain rights over their data, which are detailed in our .