Candidate privacy notice

The details you give us in the application form: your name, email address, phone number, city and country, your CV and any cover letter, your answers to the role's questions, and anything optional you choose to add (current role, links, notice period, salary expectation).

We also record when you agreed to this notice and which version you saw, where you heard about the role (for example a LinkedIn share link), and a one-way, keyed hash of your IP address that we use only to spot abuse. We don't store the address itself.

To consider you for the role you applied for and, if you're successful, to take the steps needed to offer you a contract. Our lawful basis is taking steps at your request before entering into a contract, and our legitimate interest in recruiting the right people.

If you tick “Keep my details”, we may also contact you about other suitable roles. That is based on your consent, which you can withdraw at any time.

Some roles include optional equal-opportunities questions. Answering them is voluntary and has no effect on your application. This can include special category data (such as ethnicity or disability), which we process only with your explicit consent, given by choosing to answer.

These answers are stored separately from your application, with no link back to you, are never shown to the people reviewing applications, and are only ever reported as anonymous totals.

Only the people involved in hiring for the role, through our internal admin tools. Every time someone views your application or downloads your CV, it is logged.

We use service providers to run the system, who process your data only on our instructions: Amazon Web Services (file storage, in the EU, region eu-north-1) and our email delivery provider. We don't sell your data or share it with anyone else for their own purposes.

Your CV and cover letter are stored encrypted in a private storage bucket, are checked for viruses before anyone can open them, and can only be downloaded through short-lived links by signed-in staff.

We automatically delete your application, CV and cover letter 6 months after you apply, or 12 months if you asked us to keep your details for future roles. If you join us, the relevant information moves to your employee record.

You can ask us for a copy of your data, to correct it, or to delete it (including withdrawing an application) at any time, and you can withdraw your consent for future-roles contact or equal-opportunities answers. Email careers@tantilium.cloud and quote your application reference if you have it.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority.