Recruitment privacy

Our approach to Recruitment Privacy

As a potential employee or contractor of the Egress Software Technologies group, you may be applying for a role with any of our group companies in the UK, United States or Canada, whether in response to an open vacancy or on a speculative basis. Whatever the situation, we recognise the importance of your privacy.

Egress Software Technologies Limited (we, us and our) based in the United Kingdom will hold your personal data for and on behalf of itself and its group companies. This policy sets out how the information that you give us and our group companies, or that we obtain from other sources, or learn about you through your relationship as an applicant with our group.

Below you can find details of:

  • the information we collect and how we get it
  • how we use that information
  • who we may share it with and why
  • where we may transfer and process it
  • how to exercise the rights that are provided to you by law

If you have any questions just get in touch with our Data Protection Officer at

This policy was last updated on 27 March 2020. The previous version is archived here.

Download PDF copy

The way we talk about the information we collect


How we obtain or receive it

Examples of the types of information


  • direct, speculative approach
  • existing employee or contractor referral
  • application through our website
  • response to a head-hunter approach
  • Name, address
  • Right to work in the UK
  • Previous employment
  • Email address and contact details
  • Role interested in
  • CV (the content of which is decided by you)

Recruitment agencies

  • speculative approach
  • response to open vacancies on the group’s website
  • response to an approach by an existing employee or contractor
  • Name, address
  • Previous employment
  • Email address and contact details
  • Role interested in
  • CV (the content of which is decided by you)

Third parties

  • references provided by third parties that we approach (e.g. previous employers or individuals)
  • verification of claims made (e.g. qualifications) with third parties (e.g. relevant industry bodies)
  • Previous roles, salary and responsibility
  • Grievances, disciplinary information
  • Opinions

How we use the data that we collect

We use the information we obtain as part of recruitment in each of the following ways:

What we use it for

Our reasons

Our lawful basis

Acknowledging your application (by whatever route or means)

To ensure that we meet are able to let you know that we’ve received your interest in working for our group and are considering it.

Legitimate Interests

Review and consider your application (by whatever route or means)

To enable us to assess your suitability for the role, or a role, within the group.

Where you’ve applied through a Recruitment Agent or third party, this may involve us liaising or discussing the merits of your application with them.

Legitimate Interests

Communicate with you, a Recruitment Agency or other third party involved in your application

We may need to communicate directly with you or these parties for administration reasons connected with your application (e.g. arranging interviews and travel arrangements) or to communicate decisions taken in respect of your application.

Legitimate Interests

Interviewing you

During any interview process we will refer to, and rely on, information that you’ve provided or that we’ve received in relation to your application.

Legitimate Interests

Carrying out pre-employment checks and other administration

Prior to joining the group, we may require you to carry out certain checks with third parties and to pass the results of those checks to us. These will be maintained in accordance with our employment privacy policy. These checks may include those designed to protect our business or that of our customers (e.g. Criminal Records Bureau (CRB) or Disclosure Scotland). Where we ask you to provide such a search we won’t share the results with other potential employers and will abide by the relevant body’s code of practice in respect of handling the information.

Legitimate Interests

Keeping you informed of future roles

If you’ve asked us to do so, we may keep you informed directly of any future roles that become available that we consider relevant to your experience. We may also notify third parties (such as Recruitment Agents) of vacancies and they may then choose to contact you.

Consent, Legitimate Interests

Exercising our rights

We may need to process certain information (including personal data) in order to exercise or enforce our rights under this and any other relevant policies.

Legitimate Interests, Legal obligation

Responding to and actioning any request by you in exercising your legal rights in relation to your personal data

Processing may be required to provide confirmation of information to you (e.g. if you make a data subject access or data portability request) or in order to action a request that you make (e.g. correction, deletion, erasure or restriction).

Legitimate Interests, Legal obligation

Contact you and any relevant regulator in the event of a breach where we are legally required to do so.

Processing may be required to effectively respond to, and mitigate the effects of, any personal data breach that involves your personal data.

Legitimate Interests, Legal obligation

Who we may share the data that we collect with

Who we may share it with

Our reasons

Our lawful basis

Employees and contractors of other companies within our group

We share your personal data with those most relevant to the role that you have applied for, or are seeking, to enable them to be involved in the potential recruitment process.

This may involve the transfer of your personal data to other territories and outside the country you’re resident or located in.

Legitimate Interests

Recruitment agencies

Where you’ve applied through a Recruitment Agency, we may share details of your application, its merits and success or failure with them (together with opinions such as our reasoning for any decisions taken).

Legitimate Interests

Third parties

If you’ve provided us with information about a referee, or have made claims in respect of certain qualifications, we may disclose the existence and nature of your application (and its status) to those third parties in order to obtain a reference or validate your qualification.

Legitimate Interests

Those involved in interviewing

Sometimes we may use third parties in our interview process, where this is the case for the role or application you’ve made, you’ll be made aware of it prior to the interview and we may share details of your application with that third party for the purpose of the interview.

Legitimate Interests

Recruitive software

We store information about applicants on our third party SaaS platform currently provided by Recruitive Limited. More information on them is available on request.

Legitimate Interests

Law enforcement

We reserve the right to disclose information in order to comply with national, EU or Member State law to which we’re subject, including to meet national security and law enforcement requirements. You can find out more on our approach here.

Legitimate Interests

Future purchaser of all or part of our Group or assets

We reserve the right to transfer our obligations, rights and permissions in your information to any organisation to which we may transfer our business or assets (including if we, or a relevant part of us or our assets, are proposed to be purchased or acquired by a third party).

Legitimate Interests

If you provide us with information about others

If you provide information and personal details about others (such as a referee), you confirm that they are happy for you to do so and for us to contact them at the appropriate stage of your application.

Who we may share your information with, and sending information outside the country you’re located in

To operate our group effectively we use shared systems, resources and sub-processors and so the information that we collect may be transferred, shared and processed within our group and to and by these third-parties. They are only authorised to use your personal information as necessary to provide the services to us that we request from them and must abide by data privacy and security obligations set out in applicable law.

Record maintenance: We use a third party – Recruitive Limited, to provide a platform through which we are able to easily manage and track applications to work within our group. More information about it can be found at

Group companies: If you apply for a role within a group company located outside of the territory that you’re currently resident in, you acknowledge that it may be necessary for us to share your personal data with those members of our group (and other third parties as set out above in who we can disclose your data to). These individuals may be located outside the country you’re resident in.

Selling your information: We will not, and do not, sell your information for: (i) valuable consideration (as defined in the California Consumer Privacy Act) or for their direct marketing purposes; or (ii) monetary consideration for the person to license or sell it to additional person (as defined in Nevada Senate Bill 220). Your information may be shared with third parties as set out above for our business purposes.

What we need you to do

We need to make sure that the information that we hold about you is accurate, up-to-date and still relevant. As a result, we need you to tell us promptly if there are any changes to the information that you’ve provided by letting us know at

How long we'll keep your and your users information for

We’ll keep information that you provide to us as a result of an application (by whatever route or means) for a period of 12 months (unless you have a current job application in process with us). If you’re successful in your application, when you become an employee or contractor of our group, your personal data will be held in accordance with our Employment Privacy Policy – details of which will be made available to you at the appropriate time.

Your rights as an individual and our Data Protection Officer

As an individual, you may have certain rights by law in respect of the personal data that we hold about you. These rights may not always apply as your location and the basis on which we’re processing your personal data may affect their availability. You can find out more information about them and our Data Protection Officer at

If you ever have a complaint relating to the delivery of our services, or our processing of your personal information, you can find details on how to raise this in our Complaints Policy at You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), or where provided by law, to the regulator for data protection issues in your jurisdiction. We would, however, appreciate the chance to deal with your concerns before you approach a regulator so please contact us in the first instance.

Privacy Shield

Our policy is to respect and protect personal data collected or maintained by or on behalf of Egress Software Technologies. In furtherance of our commitment to this Privacy Policy, Egress Software Technologies, Inc. has certified to adhere to the Privacy Principles set forth in the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework regarding personal data related to employees, contractors and candidates of Egress Software Technologies resident in the European Economic Area (EEA) and Switzerland, respectively, and processed in support of the Egress Software Technologies Group’s human resources operations.  Egress Software Technologies, Inc. adheres to the Privacy Shield principles.  With respect to personal data received or transferred pursuant to Privacy Shield, Egress Software Technologies, Inc. is subject to the regulatory enforcement powers of the U.S. Department of Commerce.  Egress Software Technologies, Inc’s commitment to participate in the Privacy Shield program can be found at the following DOC website located at that officially lists all U.S. entities that have registered for the program.  Egress Software Technologies, Inc. has further committed to cooperate with EU data protection authorities (DPAs) for EEA residents and with the Swiss Federal Data Protection and Information Commissioner for Swiss residents with regard to unresolved Privacy Shield complaints concerning human resources data transferred from the EU or Switzerland, respectively, in the context of the employment or engagement, or potential employment or engagement, relationship.

Changes to this policy

We can change this policy from time to time. You should check this page periodically to make sure that you have read our most recent policy. When we do make changes, we’ll change the date at the top of this document.

EU Representative

If the United Kingdom leaves the European Union and/or the European Economic Area: (i) without a deal; or (ii) with a deal that does not remove any obligation on Us to appoint a representative within the European Union in accordance with Article 27 of the General Data Protection Regular, Egress Software Technologies Limited (a foreign company registered on the Dutch Chamber of Commerce) further identified in the section above is our EU representative.

About us

We're Egress Software Technologies Limited. We're a limited liability company registered in England and Wales (number 06393598). Our registered office is 12th Floor, The White Collar Factory, 1 Old Street Yard, London, EC1Y 8AF, United Kingdom. Our VAT number is 921 4606 46.


This Policy, its subject matter and formation are governed by English law. We both agree that the courts of England and Wales will have exclusive jurisdiction


Legitimate Interest means our interest in conducting and managing our business to enable us to give you the best service and experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

Performance of Contract means processing your personal information where necessary for the performance of a contract that we have with you, or to take steps before entering into such a contract.

Comply with a legal obligation means processing your personal data where it is necessary for compliance with a legal obligation that we are subject to.


View legal hub

Click here