Yes, provided it complies with UK GDPR. The employer must have a lawful basis, inform the candidate, use only publicly available information, and focus strictly on factors relevant to the role not age, race, religion or other protected characteristics.