Legal

Privacy Policy

Last Updated: August 2026

This page explains how Candaply Limited handles personal information when agencies, employers, candidates and authorised users use the platform.

Information we process

  • Account details such as name, email address, company information and login activity.
  • Candidate profile information, CVs, employment history, registrations and compliance documents.
  • Operational data such as audit logs, support messages and document status updates.
  • Public website analytics such as pages viewed, buttons or links clicked, approximate country and town/city, device viewport size and hourly activity. Candaply does not retain raw IP addresses for these analytics.

How information is used

  • To provide CV formatting, compliance tracking and document management services.
  • To manage accounts, security, support and platform administration.
  • To understand aggregate public website usage and improve website content, navigation and accessibility.
  • To comply with applicable legal, regulatory and contractual obligations.

Public website analytics

Candaply records aggregate activity on public marketing pages, including page views and clicks on named buttons or links. Text entered into forms, candidate information and activity inside authenticated portals are not included.

Approximate country and town/city may be derived from an IP address, but the raw IP address is not retained. Daily rotating anonymous identifiers are used for aggregate visitor counts. Granular public website analytics are retained for 90 days.

Controller and processor roles

In most circumstances, the subscribing organisation acts as Data Controller and Candaply acts as Data Processor. Candaply provides Data Processing Agreements to subscribing organisations.

Contact

Privacy questions can be sent to privacy@candaply.com.