Job Applicant Privacy Notice
Last updated: July 2026 (v23.0)
This notice explains how Hybytes Ltd handles personal data of job applicants. We collect the information you provide (CV, application, interview notes), information from referees you nominate, and, where relevant to the role and lawful, verification of your right to work and professional qualifications. We use it to assess your application, communicate with you, and meet legal obligations (lawful bases: legitimate interests in recruiting, steps prior to a contract, and legal obligation for right-to-work checks). We do not use automated decision-making to reject applications. Your data is seen only by those involved in recruitment; recruitment agencies act as separate controllers of data they hold. Unsuccessful applicants' data is retained for 6 months after the process ends, then deleted, unless you consent to us keeping it for future roles (12 months). Right-to-work records for hires are kept as required by law. You have the rights described in our Privacy Policy; contact [email protected]. Complaints: our Data Protection Complaints Procedure or the ICO.