Next Gen Launch Programs Privacy Notice

This Privacy Notice describes how the Cadillac Formula 1® Team (which comprises TWG Cadillac Formula 1 Team, LLC (File Number: 6816903) of Corporation Trust Center, 1209 Orange Street, Wilmington, Delaware 19801 USA and TWG Cadillac Formula 1 Limited (Company Number: 14194212) of Unit 1134, Silverstone Park, Buckingham Road, Silverstone, England, NN12 8FU) (together, the “Team”, “we”, “us”, or “our”) collects and uses personal information about you in accordance with applicable data protection laws, which may include the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), UK General Data Protection Regulation, the Data Protection Act 2018, and other US and international privacy laws (the “Data Protection Legislation”).

We are the data controller for personal information you share with us and are responsible for, and control the processing of, that personal information.

The Team takes its responsibility to look after your personal information very seriously and is committed to protecting the privacy and security of your information.

We are required under Data Protection Legislation to notify you of the information contained in this Policy. Please read this Policy in full so that you are aware of how and why we are using your information. If you have any questions about this Policy, please contact us using the details in the ‘Contact Us’ section below

Where you apply for opportunities through our Next Gen Launch programs, these Privacy Notice provisions will apply to our processing of your personal information in addition to our other Privacy Policy available on our Website at www.cadillacf1team.com/privacy-policy.

Your Personal Information

Information we may collect from you

We collect and process some or all of the following types of information from you:

Information that you provide when you apply for a role. This includes information provided through your application form, via email, in person at interviews and/or by any other method.

In particular, we process identifiers such as name, email address, address, telephone number, date of birth, information relating to your education and employment history, qualifications, skills and experience, financial or government-issued information as well as your video in case you conduct your interview using a video interview feature.

If you contact us, we may keep a record of that correspondence.

A record of your progress through any hiring process that We may conduct.

Information we collect from other sources

We may collect personal information from a third party who supports your application for any of our Next Gen Launch programs, publicly available sources such as professional networking sites, background screening providers, educational institutions or certification bodies and service providers supporting our recruitment and hiring activities.

Uses made of your information

Lawful basis for processing

We generally rely on our legitimate interests in recruiting and assessing candidates as the lawful basis for processing your personal information. In certain circumstances, we may also process personal information where necessary to comply with legal obligations, establish, exercise or defend legal claims, or where another lawful basis applies under applicable Data Protection Legislation.

Purposes of processing

We collect and use information about you in the following ways:

To consider your application in respect of any of our Next Gen Launch programs;

To consider your application in respect of other roles;

To communicate with you in respect of our Next Gen Launch programs recruitment processes;

To enhance any information that we receive from you with information obtained from third parties;

To find appropriate candidates to fill our job openings;

Conduct employment-related assessments;

Perform background checks where permitted by law;

Comply with legal, regulatory and reporting obligations.

How we share and store your personal data

Disclosure of Your Information

We will only share personal information where permitted by applicable law. We may share your information with trusted suppliers who perform services on our behalf solely to the extent necessary to perform those services, and other entities within our corporate group where needed for administrative, legal, compliance or legitimate internal business purposes.

We use Jotform Inc. to collect and process applications on our behalf. Jotform acts as our processor and is contractually required to process personal information only on our instructions and to implement appropriate security measures.

We do not sell personal information and do not share personal information for cross-context behavioral advertising purposes as those terms are defined under California law.

Security

We take appropriate measures to ensure that all personal data is kept secure including security measures to prevent personal data from being accidentally lost or used or accessed in an unauthorized way. We limit access to your personal data to those who have a genuine business need to know it. Those processing your information will do so only in an authorized manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where We are legally required to do so.

Unfortunately, the transmission of information via the internet is not completely secure. Although We will do our best to protect your personal data, We cannot guarantee the security of your data transmitted through any online means, therefore any transmission remains at your own risk.

If you would like further information, please contact us using the details in the ‘Contact Us’ section below.

Where We store your personal data

Your application to any of our Next Gen Launch programs will be reviewed and processed in the United States of America (“US”) and your personal information may be transferred between our staff in the US and the United Kingdom (“UK”), and it may also be transferred, and stored or processed in, countries outside the US, UK or the European Economic Area (“EEA”). It may also be processed by staff operating outside the US, UK or the EEA who work for the Team or for one of our suppliers. These countries may have different Data Protection Legislation than the country where you are based. Where we transfer personal information to a country outside the US, UK or EEA, we will implement appropriate safeguards to protect your information as required by applicable Data Protection Legislation. These measures may include entering into an appropriate data sharing and/or processing agreement to help safeguard your privacy rights and give you remedies in the unlikely event of a misuse of your personal data.

Whenever we transfer your personal information internationally, we take appropriate steps to ensure that your data remains protected in accordance with applicable Data Protection Legislation. These safeguards may include:

the use of approved international data transfer agreements, such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses; transferring data to countries that have been recognized as providing an adequate level of protection; or

implementing other lawful safeguards required under applicable Data Protection Legislation.

How long we keep your personal data

We generally retain candidate information for up to 24 months following the conclusion of the recruitment process. We may retain information for longer where necessary to comply with legal obligations, resolve disputes, establish, exercise or defend legal claims, or where otherwise permitted by applicable law.

Where you successfully exercise a deletion right, we will delete your personal information unless we are entitled or required to retain it under applicable laws.

Equal Opportunities Information

We do not generally seek to collect information relating to race, ethnicity, disability status, veteran status, gender or other protected characteristics as part of our Next Gen Launch programs application processes. Where collected, information relating to race, ethnicity, disability status, veteran status, gender or other protected characteristics is used solely for lawful equal opportunities monitoring, diversity and inclusion initiatives, and regulatory reporting purposes. This information is not used to assess an individual's suitability for a role or to make unlawful recruitment decisions. Providing such information is voluntary unless otherwise required by applicable law.

Your rights

Subject to local data protection laws and in particular under the CCPA, GDPR and the UK GDPR, you have a number of important rights. In summary, those include rights to:

Know the categories of personal information we collect, use and disclose;

Access the specific pieces of personal information we hold about you;

require us to correct any inaccurate personal information;

require the deletion of personal information;

receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations;

object at any time to processing of personal data concerning you for direct marketing;

object in certain other situations to our continued processing of your personal data;

limit the use and disclosure of sensitive personal information, where provided, by applicable law

otherwise restrict our processing of your personal data in certain circumstances;

not be discriminated against for exercising your privacy rights;

claim compensation for damages caused by our breach of any Data Protection Legislation.

Contact

Please contact us if you have any questions about this Policy, your personal data, our privacy practices or you would like to exercise any of your data protection rights or if you wish to make a complaint about how we have handled your personal information.

All questions, comments and requests regarding this Privacy Notice should be addressed to recruitment@cadillacf1team.com

Complaints

If you have made a complaint about how we use your personal information via the contact details above and are dissatisfied with how we have handled your complaint then you have the right to complain to the following authorities depending on where you are located:

If you are in the US:

In the US, privacy and data protection matters are overseen by several federal and state regulators You may contact the Federal Trade Commission (FTC), which enforces federal consumer protection and privacy laws Federal Trade Commission (FTC) Website: https://reportfraud.ftc.gov Phone: 1‑877‑382‑4357

You may also contact your State Attorney General, who may have authority to investigate privacy, data misuse, and consumer protection matters under state law. Contact details for State Attorneys General are available at: https://www.naag.org/find-my-ag/

If you are in the UK:

Information Commissioner’s Office (ICO). The ICO can be contacted at:

The Information Commissioner, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Telephone: 0303 123 1113 (local rate)

Alternatively, email casework@ico.org.uk or visit https://ico.org.uk/

If you are outside of the UK and the US:

You may be able to contact your national Data Protection Authority in your country of residence depending on applicable law. You can find contact details via the IAPP Global Privacy Directory or the Global Privacy Enforcement Network.

Changes to this Policy

We will regularly review our policies and procedures and expect this Policy to evolve. We reserve the right to amend this Policy from time to time, for any reason, and will post the revised Policy on our website, so please check our website periodically to ensure you are aware of the most recent version of this Policy. Any material changes made to this Policy will be communicated to those affected by the update

Last updated: November 2026