Applicant Privacy Notice

Career application data

The planned initial career form is limited to a name, email address, telephone number, preferred contact method, desired position, message, and an unchecked privacy-consent checkbox.

The client and legal adviser must confirm whether any additional data is necessary, including work history, education, eligibility, interview notes, assessments, background checks, or data collected outside the website.

Character references

The current public career form does not collect character-reference names or contact details. If references are introduced later, applicants must be told what information is required, why it is needed, whether the applicant has permission to provide it, when a reference may be contacted, and how the reference's information will be handled.

Résumé files

Résumé upload is disabled. The current source documents a planned PDF-only limit of 2 MB, but no file is accepted, transmitted, or stored by the website.

Before activation, the client must approve private Cloudflare R2 storage, generated private object keys, file-content validation, malware scanning or quarantine, restricted access, deletion, backup handling, and a recruitment receiving workflow. Files must never be placed in public website assets.

Recruitment purpose

The intended future purpose is to communicate with applicants and evaluate their suitability for a role they selected. The final notice must identify every approved recruitment purpose and legal basis, including whether information may be considered for other openings or a future talent pool.

Who can access the data

No recruitment receiver or private file store is configured in the current source-controlled environment. Accordingly, the website does not currently deliver an online application to recruiters.

The client must identify the authorized recruitment team, managers, agencies, hosting providers, screening providers, and other processors that may access future applicant data, together with role-based access and confidentiality requirements.

Retention period

No applicant retention period has been approved. A final notice must state how long unsuccessful, withdrawn, hired, duplicate, and talent-pool applications and related files are retained, when they are deleted, and how backups and legal holds are handled.

Applicant rights

The responsible entity and legal adviser must confirm the rights available to applicants, the identity-verification process, request channels, response periods, correction and deletion process, withdrawal consequences, complaint route, and any lawful exceptions.

The website must not describe those rights or response times as operational until the responsible team and documented procedure are in place.

Consent and contact details

The planned form uses an unchecked checkbox linked to this Applicant Privacy Notice and the general Privacy Policy. Consent wording, where consent is the appropriate legal basis, must be reviewed before online recruitment is enabled.

The responsible company, recruitment contact, privacy contact or data-protection officer, mailing address, email address, telephone number, effective date, and notice-change process remain to be supplied and approved.