Candidate privacy notice

This notice explains what happens to your details when you apply for a role through this site. It's written to be read, so if anything is unclear, email [email protected] and we'll explain.

Who is responsible for your data

OpenFront (UK) Ltd is the data controller for your application. Each role page names the company hiring for it.

What we collect

• Your name and email address, and your phone number if you give it.
• Your CV.
• Your GitHub username and portfolio link, if you give them.
• Your answers to the role's questions.
• Later on, if you progress: interview notes, feedback and scores from the hiring team, and anything you submit for a take-home task.
• Where you heard about the role, if the link you followed says so.

We don't ask for your date of birth, a photo, or details such as your ethnicity, religion, health or sexuality. Please leave those out of your CV and answers.

Why we use it, and on what legal basis

• To consider your application and, if it goes well, make you an offer. This is a step you've asked us to take before possibly entering a contract with you, and is in our legitimate interest in hiring the right people.
• To keep you in our talent pool, only if you tick the separate box for it. This is based on your consent, which you can withdraw at any time.
• To keep the site secure, for example by stopping automated spam. This is in our legitimate interest. The spam check runs in your browser and doesn't use cookies or any outside service.

Who sees it

Only the people at OpenFront involved in hiring for the role, who sign in with their OpenFront accounts. Every time someone views or changes your record, it's logged. We never sell your data or use it for advertising.

We use a small number of suppliers to run the site, who process your data only on our instructions:

• Hosting and file storage: to be confirmed, in the UK or EU.
• Email delivery: Resend (EU region).
• Google Workspace, for interview scheduling if you reach that stage.

How long we keep it

• If you're not successful, or you withdraw, we delete or anonymise your application [period to be confirmed] after the decision.
• If you joined the talent pool, we keep your details for [period to be confirmed], or until you ask us to remove them.
• If you're hired, your application becomes part of your employment records.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or withdraw from the talent pool. Email [email protected] and we'll reply within one month. You can also withdraw your application at any time from the link in your confirmation email.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.