Job Applicant Privacy Notice

Introduction

This notice explains how Hybytes Ltd handles the personal data of job applicants, from the information we collect through to how long we keep it and what rights you have.

1. What we collect

We collect:

The information you provide, such as your CV, application, and interview notes
Information from referees you nominate
Where relevant to the role and lawful, verification of your right to work and your professional qualifications

2. How we use it

We use your data to assess your application, communicate with you, and meet our legal obligations.

Our lawful bases are:

Legitimate interests, for recruiting
Steps prior to a contract, for the application process itself
Legal obligation, for right-to-work checks

We do not use automated decision-making to reject applications.

3. Who sees your data

Your data is seen only by those involved in recruitment. Where a recruitment agency is involved, it acts as a separate controller for the data it holds.

4. How long we keep it

Unsuccessful applicants' data is kept for 6 months after the process ends, then deleted, unless you consent to us keeping it for future roles, in which case we keep it for 12 months
Right-to-work records for successful applicants are kept as required by law

5. Your rights

You have the rights described in our Privacy Policy. To exercise them, contact us.

6. Complaints

You can raise a complaint through our Data Protection Complaints Procedure, or directly with the ICO.