Who is responsible
CrewByte is the controller of personal information submitted through this careers portal. The portal is for people considering or applying for work with CrewByte; applicant accounts are separate from CrewByte customer accounts.
Questions or rights requests can be sent to privacy@crewbyte.io.
What we collect
We may collect your name, contact details, location, account credentials, CV, employment and education history, portfolio or professional profile links, application answers, interview or assessment information, correspondence, status history and reasonable-adjustment information you choose to share.
We also process limited security data such as IP address, browser information, login attempts and reset-token events to protect applicant accounts and the hiring platform.
Please do not include unnecessary sensitive information in your CV or application.
Why we use it
We use applicant information to operate the careers service, assess suitability, communicate with you, arrange interviews or assessments, make and administer offers, keep recruitment records, protect the portal and meet legal obligations.
Depending on the activity, our legal basis is taking steps at your request before a possible employment contract, CrewByte’s legitimate interests in recruiting and protecting its services, compliance with legal obligations, or consent where the law requires a genuine choice.
You are not under a legal or contractual obligation to apply. Fields marked as required are needed for us to create your account, consider the application or protect the service; without them, we may not be able to process the application.
We do not use careers information to create a customer workspace, advertise CrewByte products to you or make solely automated hiring decisions.
How long we keep it
Each application receives a retention date. We keep information only for the recruitment process and a limited period afterward based on the role, applicable legal limitation periods and whether a legitimate future-role conversation has been agreed.
When the recorded retention date is reached, application data and CV files are deleted or anonymised unless a legal hold applies. If you join CrewByte, the information needed for employment is moved into the appropriate employee record and handled under the relevant workforce privacy information.
Withdrawing an application stops active consideration, but it does not always require immediate deletion where a short retention period is necessary for legal, security or record-keeping purposes. You can still request erasure.
Your rights
Depending on the circumstances, you may ask for access, correction, erasure, restriction or portability of your information, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.
You can also complain to the UK Information Commissioner’s Office or the data-protection authority that applies where you live.
Security
Passwords are hashed, sessions use protected cookies, CV storage is blocked from direct web access and downloads require authorised hiring access. We validate file type and size, log sensitive staff actions and separate internal hiring notes from updates visible in your applicant account.
No online service can promise absolute security. If we identify a personal-data breach, we will investigate and notify affected people or regulators where required.
Contact us
For privacy questions or rights requests, email privacy@crewbyte.io. For an application or reasonable adjustment, email careers@crewbyte.io.
Include enough detail for us to locate your account or application, but never email your password.