Candidate Privacy Notice

Introduction

This Candidate Privacy Notice (“Privacy Notice”) explains how SupportYourApp collects, uses, shares, and protects your personal data throughout the recruitment and engagement evaluation process.

This Privacy Notice outlines:

• What personal data we collect and why

• How we process and protect your information

• Your rights under applicable data protection laws

• How to contact us with questions or concerns

It applies to all individuals being considered for a professional relationship with SupportYourApp, including through employment, freelance, or independent contractor arrangements. This includes individuals identified or applying via opportunity postings, direct outreach, referrals, or recruitment agencies. This Privacy Notice reflects our commitment to lawful, fair, and transparent processing across all candidate evaluation and engagement-related review activities.

This Privacy Notice is intended to comply with global data protection standards. While the core principles apply across all jurisdictions, certain rights or legal bases referenced may apply only where required by law, such as under the EU General Data Protection Regulation (GDPR) or U.S. state privacy laws. We are committed to respecting and upholding such rights and obligations where they are legally applicable.

Contact Information

The Data Controller is the entity that determines how and why your personal data is processed. It is typically the company that entered into your contractual agreement. Unless otherwise stated in your engagement documents, the Data Controller is:

SupportYourApp Inc.
1007 North Orange Street, 4th Floor, Suite 122,
Wilmington, DE 19801, USA

If you have questions or wish to exercise your data protection rights, please contact our Data Protection Officer at: privacy@supportyourapp.com.

If your application was submitted to or processed by another SupportYourApp entity, that entity may act as the Data Controller for recruitment purposes. Please refer to the opportunity posting, recruitment communication, or offer documentation for clarification.

Personal Data We Collect

We only collect personal data that is relevant, proportionate, and necessary for evaluating your candidacy, managing the recruitment process, and complying with legal obligations. The types of data collected may vary depending on the nature of engagement and stage of the process.

• Contact Information. Your full name, email address, phone number, mailing address (if provided), and any other contact details you choose to share as part of your application (such as messaging handles or LinkedIn profile links, where applicable).

• Professional Experience. Details from your CV, application form, or cover letter, including your professional background, job titles, responsibilities, skills, qualifications, certifications, professional licenses, languages spoken, career achievements, and (if disclosed) reasons for leaving previous roles.

• Portfolio and Sample Work. Examples of your work or contributions submitted to demonstrate relevant skills, expertise, or suitability for the engagement, including test tasks or assignments completed as part of the recruitment process.

• Remuneration Expectations. Information you provide regarding your desired or expected compensation, benefits, or payment terms, where relevant to the opportunity or engagement type.

• Communication Data. Records of communication with our recruitment team, including email exchanges, calendar invitations, phone calls, live or recorded video interviews, and in-person interactions.

• Preferences. Your stated preferences related to communication methods, relocation, engagement modality (e.g., remote, hybrid, on-site), and your availability for interviews or participation in recruitment activities.

• Interview and Assessment Data. Notes taken during interviews, evaluation results, test tasks or practical assignments, language skills assessments, screening outcomes, recorded video interviews or assessments, and any feedback you provide.

• Eligibility to Provide Services Legally and Identity Verification Data. Your nationality, immigration or visa status, and documentation required to verify your identity and eligibility to provide services legally in the relevant jurisdiction, such as a government-issued ID, passport number, or national ID.

• Educational Background. Your academic records, transcripts, qualifications, certifications, and names of institutions attended.

• References and Recommendations. Contact details of referees and any written references, recommendation letters, or verbal feedback received as part of the engagement evaluation process.

• Background Check Data. Where permitted and applicable, results of background screening such as professional background verification, educational history confirmation, criminal record checks, credit checks, and sanctions or watchlist screening, where required or permitted by law or client expectations.

• Offer and Onboarding Data. If successful, additional data collected may include draft or signed offer letters, service agreements, onboarding questionnaires, banking or payment information (if required), and any declarations or acknowledgments required by law or under the terms of engagement.

• Support and Accommodation Requests. Voluntarily provided information related to requests for reasonable accommodations or adjustments during the recruitment process (e.g., related to health, disability, neurodiversity, caregiving responsibilities, or religious considerations), to help ensure a fair and inclusive candidate experience.

• Social and Publicly Available Information. Information obtained from publicly available sources, such as professional platforms (e.g., LinkedIn), websites, publications, portfolios, or blogs, where relevant to your application. In some cases, this information may be provided directly by you (e.g., via a portfolio link or social media profile), and we process it only where permitted by law, based on our legitimate interest in evaluating qualifications and professional background. If you voluntarily interact with us through public social media platforms (e.g., Facebook, Instagram), we may process the information you make available to us, limited to what is relevant to your candidacy or communication with us, and always in accordance with applicable laws.

• Technical Information. When you apply through our website or use our digital recruitment tools, we may collect limited technical data, such as your browser type, device identifiers, IP address, cookie preferences, and interaction metadata (e.g., timestamps of access, session logs, clickstream data), where relevant, to ensure our systems function properly, maintain security, and enhance your experience.

• Remote Setup Readiness. For engagements that may be performed remotely, we may request limited, relevant information to help assess whether your setup is technically capable of supporting secure and effective remote delivery. This may include internet connectivity, general device compatibility (where your own device is used), or availability of essential tools, solely to support secure access and functionality.

• Voluntarily Provided Information. Any other data you choose to share with us during the recruitment process, such as participation in optional surveys, personal interests, or voluntary diversity-related disclosures (e.g., gender, ethnicity, disability status) to support our equity, inclusion, and anti-discrimination commitments, where legally permitted.

• Sensitive Personal Data. We do not collect sensitive data by default. However, where required or legally permitted (for example, to comply with equal opportunity regulations, confirm criminal eligibility, or process accommodation requests), we may collect limited special category data (e.g., health status, disability, or criminal background). This data is subject to appropriate safeguards, including access restrictions and purpose limitation.

If you are successfully engaged, relevant personal data collected during recruitment may be transferred to your professional record and processed in accordance with our Workforce & Contractor Privacy Notice or another applicable notice provided at the time of engagement.

Methods of Collection

We collect personal data through various channels throughout the recruitment process, depending on your interactions with us and the tools or services you use:

• Direct Submission. You provide personal data directly when you apply for an opportunity, submit a CV, cover letter, or portfolio, complete application forms, or share other materials during the recruitment and evaluation process.

• Online Applications. If you apply via our website, job boards, or other recruitment platforms, we collect the data you submit through those portals, including contact details, employment history, and qualifications.

• Candidate Sourcing. We may proactively collect personal data from publicly available sources (e.g., professional networking sites, online portfolios) or receive candidate profiles from recruiters, staffing agencies, or referral programs, even before a formal application is submitted. This helps us identify and engage with potential candidates who may be a strong match for available opportunities.

• Recruitment Communications and Interviews. We collect data through communications during the recruitment process, including emails, phone calls, live or pre-recorded interviews, and in-person meetings, as part of the application, screening, or evaluation process. For certain opportunities, the selection process may include recorded, pre-recorded, or asynchronous video/audio interviews or assessments. These formats help us manage a high volume of applications efficiently and provide timely, consistent evaluations. Alternative arrangements may be considered where appropriate, taking into account legal requirements, operational feasibility, and the need to ensure a fair and consistent process for all candidates.

• Assessments and Tests. If you participate in technical, skills-based, or other assessments, we collect data related to your performance, responses, and evaluation outcomes.

• Recruitment Partners and Job Platforms. We may receive your personal data from external recruitment agencies, staffing partners, job boards, or job referral programs that support the selection process.

• Public and Third-Party Sources. We may collect professional or contact information about you from publicly available sources (e.g., LinkedIn) or from third-party data providers that are authorized to share such information. We process this data only to the extent it was lawfully collected and is relevant to the recruitment process.

• Referrals. If you were referred by someone within our organization, we may collect limited personal data from the referring individual to initiate the recruitment process.

• References. If you provide referees, we may contact them to obtain professional feedback about your qualifications, experience, or suitability for the opportunity. We collect and process only what is relevant and necessary to inform the recruitment decision.

• Background Check Providers. Where legally permitted or required, we may receive background screening results from authorized third-party providers, including education or employment verification, sanctions screening, or criminal record checks.

• Automatically Collected Data. When you interact with our digital recruitment tools or application platforms, we may collect limited technical and usage data, such as your device type, browser, IP address, and cookie preferences, in accordance with your device settings and applicable laws. This helps ensure our systems function properly and provide a secure, user-friendly experience.

If you are successfully engaged, relevant personal data collected during recruitment may be transferred to your professional record and processed in accordance with our Workforce & Contractor Privacy Notice or another applicable notice provided at the time of engagement.

Purposes for Processing Personal Data

We process your personal data to manage and assess your application in accordance with applicable data protection laws and our legitimate interests in building a qualified and diverse team. The main purposes include:

• Sourcing Potential Candidates
  We may proactively identify and contact individuals who appear to match opportunity requirements based on publicly available professional information or through third-party talent platforms and recruitment partners. This helps us build a strong candidate pipeline and fill engagements efficiently.

  Legal basis: Legitimate interests in identifying qualified candidates for professional opportunities.

• Assessing Your Application
  We use your personal data, such as your CV, cover letter, qualifications, experience, and portfolio, to evaluate your suitability for the opportunity, assess skills, and determine potential fit within the organization.

  Legal basis: Legitimate interests in evaluating candidates for professional engagements.

• Communicating with You
  We process your contact details and communication data to manage correspondence throughout the recruitment process, including scheduling interviews, confirming details, and providing updates.

  Legal basis: Legitimate interests in ensuring effective recruitment communication.

• Conducting Interviews and Assessments
  We may collect interview notes, technical assessment results, and recorded sessions (including video or audio interviews, where applicable) to evaluate your competencies and performance.

  Legal basis: Legitimate interests in evaluating qualifications and making informed recruitment decisions.

• Verifying Information and Conducting Background Checks
  To confirm your identity, eligibility to provide services legally, and accuracy of qualifications and experience, we may review documents and contact references or verification providers.

  Legal basis: Compliance with legal obligations; legitimate interests in maintaining a reliable recruitment process.

• Managing Offer and Onboarding
  If you are selected for an opportunity, we collect the necessary data to support your onboarding, including identity verification, signed agreements, and administrative setup. This may involve preparing payment or invoicing details, or other documentation required to comply with local laws or contract terms.

  Legal basis: Contractual necessity; compliance with legal obligations.

• Supporting Equity, Inclusion, and Accommodation
  Where applicable and legally permitted, we may process diversity data or accommodation requests to foster inclusivity and provide necessary adjustments during the recruitment process.

  Legal basis: Compliance with equality and anti-discrimination laws; explicit consent where required.

• Improving Recruitment Processes
  We may use anonymized or aggregated feedback and performance data to analyze and improve recruitment tools, candidate experience, and engagement evaluation practices.

  Legal basis: Legitimate interests in improving the efficiency and quality of recruitment.

• Meeting Legal and Regulatory Requirements
  We may process your data to comply with different legal obligations including tax, immigration, anti-discrimination, or other requirements related.

  Legal basis: Compliance with applicable laws.

• Handling Complaints and Legal Claims
  We may retain relevant personal data to address inquiries, support audits, or defend against legal claims arising from the recruitment process.

  Legal basis: Compliance with legal obligations; legitimate interests in protecting legal rights.

• Other purposes
  In some cases, we may process your personal data for additional purposes that are compatible with the original purposes stated in this Privacy Notice. We will only do so where permitted by law and where such processing is necessary for internal governance, strategic planning, or other legitimate interests, unless we are required to obtain your consent or provide separate notice under applicable law.

If You Do Not Provide Personal Data

Providing personal data during recruitment is generally voluntary. However, if you choose not to provide certain information that is necessary for us to evaluate your application, such as your qualifications, eligibility to provide services legally, or references, we may not be able to progress with your recruitment.

For example, if you do not provide evidence of your professional experience or complete required assessments, we may be unable to determine your suitability for the opportunity.

In some cases, we may also be legally required to collect specific information (such as your identity documents for eligibility to provide services legally). If such data is not provided, we will inform you of the implications.

Legal Bases for Processing

Where the processing of personal data is subject to specific legal basis requirements, such as under the laws of the European Economic Area (EEA), the United Kingdom (UK), or other jurisdictions with comparable data protection frameworks, we only process personal data where a valid legal basis applies.These may include:

• Contractual Necessity. When processing is required to take steps at your request prior to entering into a potential engagement, such as reviewing your application, arranging interviews, or preparing an offer.

• Legal Obligation. Where processing is necessary to comply with applicable legal or regulatory requirements, such as anti-discrimination, immigration, checks for eligibility to provide services legally, or health and safety obligations.

• Legitimate Interests. When processing is necessary to support our legitimate business interests, including identifying and assessing candidates, improving recruitment practices, maintaining records, or ensuring information security, provided such interests do not override your fundamental rights and freedoms.

• Consent. In limited cases, we may request your explicit consent to process certain types of personal data, such as for optional surveys, voluntary diversity and inclusion disclosures. Where we rely on consent, you may withdraw your consent at any time by contacting us at privacy@supportyourapp.com. Withdrawal will not affect the lawfulness of processing that occurred before the withdrawal.

Note: We apply these legal bases only where required under the data protection laws applicable to you, and ensure that each basis is documented and used appropriately for the specific processing activity.

Data Protection Measures

We take reasonable steps to protect your personal data throughout its lifecycle by applying a combination of technical, organizational, and administrative safeguards, appropriate to the nature of the data and the risks associated with its processing.

Access to personal data is limited to authorized individuals who require it for their tasks, and is governed by internal procedures designed to support accountability and data minimization.

Relevant personnel receive training and awareness on data protection responsibilities, and personal data is processed in line with internal policies, applicable legal obligations, and contractual requirements.

Where we engage external service providers, we require them to adhere to appropriate data protection and confidentiality standards under applicable agreements.

Our data protection approach is reviewed periodically and updated as needed. While no system can guarantee complete security, we aim to maintain safeguards that are proportionate, legally compliant, and aligned with recognized practices.

Data Sharing

To support our recruitment operations and evaluate your candidacy, we may share your personal data internally with authorized personnel who require access for coordination, assessment, compliance, or administrative purposes. Internal access is role-based and subject to confidentiality, data minimization, and security safeguards.

In addition, there may be situations where your personal data is shared with external parties. These disclosures are limited, purpose-driven, and governed by legal, contractual, and technical safeguards. The scope and recipients of data sharing may vary depending on the stage of your application, the services you engage with, and your location.

Third-Party Service Providers. We cooperate with external service providers to help manage and support our recruitment and operational activities. They may support functions such as:

• Application and interview platforms – to receive, track, and manage applications.

• Skills testing or video/audio interview tools – to conduct assessments or evaluate specific competencies.

• Cloud and infrastructure hosting – to securely store data and ensure access across teams.

• Background verification services – to confirm qualifications, references, or legal eligibility.

• Cybersecurity and IT administration – to maintain system integrity and protect candidate information.

• Legal, audit, or compliance consulting – to support lawful processing, risk management, or regulatory obligations.

All third-party providers act under our instructions and are contractually required to apply appropriate safeguards and process personal data only for authorized purposes. Access to your data is strictly limited to what is necessary for the performance of their services, and we assess and oversee these providers in line with applicable legal standards.

Recruitment Platforms and Referrals. If you apply via a job platform, recruiter, or referral program, we may share limited updates (e.g., application status) with the referring platform or contact, as needed to support process transparency or functionality. Such platforms may act as independent controllers, and their use of your data is governed by their own privacy notices.

Legal and Regulatory Disclosures. We may disclose your personal data when required to comply with applicable law or to respond to lawful requests from courts, regulators, or public authorities. These disclosures are limited to what is legally necessary and are conducted in accordance with our legal obligations.

Clients as Independent Controllers. If your recruitment is linked to a client-facing engagement or project, we may share limited personal data with that client to facilitate project evaluation or onboarding. This may include your name, professional background or CV summary, engagement details, reference or background check results (where applicable).
Clients may also process limited data about you for their own internal business purposes (e.g., security access, compliance, or team coordination). In such cases, they act as independent data controllers and are responsible for their own data processing activities. We ensure that any such sharing is proportionate, contractually governed, and consistent with applicable law.

Corporate Events. In the event of a business transition, such as a merger, acquisition, restructuring, or similar corporate change, your personal data may be shared with relevant parties involved in the process. Such disclosures are subject to confidentiality protections and are limited to what is necessary for evaluating or executing the transaction.

With Your Consent. Where required by law, or if we intend to share your personal data for purposes not described in this Privacy Notice, we will ask for your explicit consent before doing so. You may withdraw your consent at any time, without affecting the lawfulness of any sharing that occurred before withdrawal.

Use of Technology and Automation. To ensure efficient and fair recruitment at scale, we use technology-enabled tools, including systems supported by artificial intelligence (AI) or machine learning, to assist with certain steps of the recruitment process. This may include structured interviews, skills assessments, application screening, and scheduling. Given the high volume of applicants for many of our engagement opportunities and the importance of providing timely, consistent decisions, AI-assisted tools help us support a fair and objective evaluation process.

• No Automated Decision-Making. We do not rely on fully automated decisions that produce legal or similarly significant effects. All final decisions about your application are made with meaningful human involvement.

• Sensitive Data. We do not use AI to analyze sensitive personal data (e.g., health, ethnicity, religious beliefs). Any such information, where collected (e.g., to support legal compliance or accommodation requests), is handled separately with strict access controls and is not subject to automated processing.

• Fairness and Legal Basis. We apply safeguards to ensure that automated tools support fairness, transparency, and compliance with data protection laws. Our use of these technologies is based on our legitimate interest in ensuring an efficient, consistent, and non-discriminatory recruitment process, particularly where high volumes of applications are received.

• Candidate Options. We understand that candidates may have individual preferences regarding the use of AI-assisted tools during recruitment. Where legally required or operationally feasible, we may consider human-led alternatives. Choosing not to participate in certain technology-assisted steps will not, in itself, adversely affect your candidacy. However, alternative processes may be limited based on operational capacity.

International Data Transfers

In the course of providing services and managing business operations, your personal data may be accessed from or transferred to countries outside of your home jurisdiction. These transfers may occur, for example, when our teams, service providers, or infrastructure partners are located in other countries, or when you interact with clients or colleagues across borders.

Where personal data is transferred from jurisdictions that impose cross-border data transfer restrictions, such as the European Union, United Kingdom, or other locations with similar laws, we implement appropriate safeguards to ensure that such transfers are lawful and that your personal data remains protected. These safeguards include:

• Adequacy Decisions. Where available, we rely on decisions by competent authorities (such as the European Commission) recognizing that the destination country provides an adequate level of data protection.

• Standard Contractual Clauses (SCCs). We may include approved SCCs in our agreements with service providers or partners to ensure equivalent protection for data transferred outside the EEA or comparable jurisdictions.

• Data Privacy Framework Participation. Where relevant, we may rely on frameworks such as the EU-U.S. Data Privacy Framework, provided the recipient organization is certified and subject to its principles.

• Other Lawful Bases. In limited cases, and only where permitted by law, we may rely on other grounds, such as where the transfer is necessary for contract performance, legal proceedings, or based on your explicit consent.

Where appropriate, we implement supplementary measures to ensure your personal data is protected in accordance with applicable standards.

If your personal data is subject to international transfer safeguards under applicable law, you may request further information about the relevant transfer mechanism used. All cross-border transfers are subject to due diligence, contractual commitments, and rigorous security measures to ensure compliance with data protection obligations and the continued safeguarding of your personal data.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Notice or to comply with applicable legal, regulatory, or contractual obligations. Retention periods vary depending on the type of data, its intended use, and any legal requirements.

• Recruitment Data. Personal data collected during the recruitment process is retained for the duration of the evaluation process and for a reasonable period afterwards. This helps us support internal recordkeeping, respond to queries or legal claims, or consider you for other suitable engagements.

• Legal Basis: Legitimate interest in managing recruitment activities and maintaining contact with qualified individuals, in accordance with applicable laws.

• Talent Pool. If you are not selected for the opportunity you applied for, we may retain your application materials and related data for a longer period within our internal talent pool, to proactively consider you for future opportunities. Where required by law, we will rely on your explicit consent for this purpose. You may object to this processing or request deletion at any time by contacting us. Exercising this right will not negatively impact your eligibility for any opportunities or engagements you apply for in the future.

  Legal Basis: Legitimate interest in maintaining a pool of qualified individuals for future opportunities; consent where required by law.

• Engagement-Related Data. If your recruitment results in an engagement, certain recruitment data (such as your application materials, assessments, or interview notes) may be transferred to your professional record and processed in accordance with our Workforce & Contractor Privacy Notice or another applicable notice provided at the onboarding stage. Retention of this data aligns with the nature of your engagement, applicable legal obligations, and our operational requirements.

• Extended Retention. We may retain data for a longer period where necessary to:

  • Comply with statutory or regulatory requirements (e.g., tax, labor, immigration, or equal opportunity laws);

  • Establish, exercise, or defend legal claims;

  • Respond to audits, regulatory investigations, or requests;

  • Fulfill contractual or operational obligations.

Disposal and Safeguards. Once personal data is no longer needed, we apply appropriate measures to ensure it is securely deleted, anonymized, or access-restricted. Retained data is only available to authorized personnel with a legitimate and clearly defined purpose. These processes are governed by our internal data lifecycle and compliance procedures, aligned with relevant data protection laws.

Your Privacy Rights

The rights described in this section may vary depending on your country or region, and the legal framework that applies to your relationship with us as a candidate. We will respect and facilitate your rights in accordance with the data protection laws applicable to your location and the nature of your engagement. Where applicable, you may have rights such as:

• Right of Access. You have the right to request confirmation as to whether we process your personal data, and, where we do, to receive a copy of that data along with relevant information about the processing activities.

• Right to Rectification. You may request that we correct inaccurate or incomplete personal data relating to you.

• Right to Erasure (Right to Be Forgotten). In certain circumstances, such as when data is no longer necessary for the purposes for which it was collected or where you withdraw your consent, you may request the deletion of your personal data.

• Right to Restrict Processing. You may ask us to limit the processing of your data while we assess a concern, for example, if you contest the accuracy of the data or object to the processing.

• Right to Object. You have the right to object to our processing of your personal data where it is based on our legitimate interests or involves direct marketing.

• Right to Data Portability. Where legally applicable, you may request to receive your personal data in a structured, commonly used, machine-readable format and to have that data transmitted directly to another data controller.

• Right to Withdraw Consent. Where we rely on your consent for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

• Right Not to Be Subject to Automated Decision-Making. You have the right not to be subject to a decision based solely on automated processing, including profiling, where the decision produces legal effects or similarly significant consequences for you. Please note that we do not make decisions based solely on automated processing that have such effects without meaningful human involvement, unless required or permitted by applicable law.

• Right to Lodge a Complaint. If you have any concerns about how we handle your personal data or believe that your data protection rights have been infringed, you have the right to lodge a complaint with the relevant data protection authority.

  • For individuals in the European Economic Area (EEA), you can find contact details of supervisory authorities here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm

  • For individuals in the United Kingdom, you can contact the Information Commissioner's Office (ICO): https://ico.org.uk

  • For individuals in other countries, you can usually find contact details for your local data protection authority through official government websites or privacy agency portals.

• Right to Know. You may request detailed information about the categories of personal data we collect, the purposes for which we use it, and the categories of third parties with whom we share it.

• Right to Delete. You may request that we delete personal data collected about you, subject to certain exceptions.

• Right to Correct. You may request the correction of inaccurate personal data maintained about you.

• Right to Opt Out of Sale or Sharing. Where applicable, you may direct not to sell or share your personal data, including for targeted advertising. Please note we do not sell your personal data.

• Right to Limit Use of Sensitive Personal Data. In certain cases, you may request that we restrict the use and disclosure of sensitive personal data to those uses strictly necessary to provide requested services.

• Right to Appeal. To appeal any decision we make regarding your privacy rights request, where applicable under state law.

How to Exercise Your Rights

If you wish to exercise any of your privacy rights, please contact us at privacy@supportyourapp.com.

To help us process your request efficiently, please include:

• Your full name and preferred contact details

• A clear description of the right(s) you wish to exercise

• Any relevant information that may assist us in locating your personal data (e.g., engagement period, terms, details)

We aim to respond to all valid requests within 30 calendar days, or within the legally required timeframe if different. For complex or multiple requests, this period may be extended, and we'll notify you of the extension.

Non-Discrimination. You will never be penalized, disadvantaged, or treated differently for exercising your privacy rights, such as accessing, correcting, deleting, or objecting to the processing of your data. Exercising these rights will not negatively impact your current engagement, professional standing, or future opportunities with us.

Authorized Agents. If you prefer to exercise your rights through an authorized representative (such as a legal advisor or guardian), we may request:

• Your full name and preferred contact details

• A clear description of the right(s) you wish to exercise

• Any relevant information that may assist us in locating your personal data (e.g., engagement period, terms, details)

These safeguards help us protect your personal data and ensure your rights are respected and secure.

Legal and Contractual Limitations. Certain privacy rights, such as the rights to erasure or restriction of processing, may be subject to limitations in specific circumstances. For example, we may be required to retain some personal data to comply with applicable legal, tax, or regulatory obligations, or to maintain records for internal governance, audit, or dispute resolution purposes.

If we are unable to fully comply with your request due to such obligations, we will inform you of the reason. In rare cases, exercising certain rights (such as requesting deletion of data necessary to assess your candidacy) may affect our ability to continue evaluating your application. We will always seek to handle your requests fairly, transparently, and in accordance with applicable data protection laws.

Updates to This Privacy Notice

We may revise this Privacy Notice from time to time in response to changes in legal requirements, our data processing activities, or internal business practices. Updates may reflect adjustments in how we manage personal data or deliver services.

If material changes are made, such as updates that significantly affect your rights or the purposes of data use, we will notify you via email or through internal communication channels.

We encourage you to review this Privacy Notice periodically and to inform us if any of your personal information (such as contact details) changes, so we can maintain accurate records, support communication and comply with applicable obligations.