Thousands of CVs, each one personal data
Job portals, WhatsApp groups and client submissions move candidate data in many directions. Candidates now have rights over all of it.
Scan your website
Read-only and free. Nothing on your site is changed.
The personal data you hold
- CVs, phone numbers and email addresses
- ID, address and education proofs
- Salary history and expectations
- Background check results
- Payroll and attendance for deployed staff
Where businesses like yours slip
Forms give notice and ask for consent
Apply forms with no notice about sharing CVs with client companies.
Privacy notice covers the required items
A notice that does not explain how long CVs are kept or who receives them.
A way for people to exercise their rights
No way for a candidate to ask for their CV to be deleted.
Grievance officer contact published
No named privacy contact for candidates or deployed staff.
Common questions
Can we share a CV with a client?
Tell candidates up front that you share CVs with prospective employers, and share only for roles they are being considered for.
How long can we keep CVs?
Only while the purpose lasts. Set a period, tell candidates, and erase CVs after it unless they ask you to keep them.
Does payroll data for deployed staff count?
Yes. Employment is a legitimate use, but you still need safeguards, limited access and a plan if that data leaks.
This page is general information, not legal advice.
Find out where your website stands
A free, read-only scan with plain-language findings you can act on.