Oner Active Candidate Privacy Policy
Last updated: 1st November 2025
At Oner Active, we’re committed to building a team that shares our purpose and values. As part of that, we take your privacy seriously.
This privacy policy explains how we handle your personal data when you visit our careers site, connect with us, apply for a role, or are referred to us through our employer branding and recruitment process. Whether you're checking out job opportunities or actively applying, it’s important that you know how your information is used and what rights you have.
Who this policy applies to
This policy covers personal data processing for:
- Visitors – browsing our Careers Site
- Connecting Candidates – creating a profile or signing up for job updates
- Applying Candidates – applying for a job via our site or a third party
- Sourced Candidates – profiles we discover through public channels (e.g. LinkedIn)
- Referred Candidates – those referred to us by someone in our network
- References – individuals listed as a reference by a candidate
For simplicity, we’ll refer to all Connecting, Applying, Sourced, and Referred Candidates as “Candidates”, unless otherwise stated.
Who’s responsible for your data?
Oner Active UK Ltd is the data controller, which means we decide how and why your personal data is processed as part of our recruitment and employer branding efforts.
We may work with data processors, partners who process data on our behalf under strict instructions, but never for their own use.
What personal data do we collect?
From everyone - If you visit our Careers Site or communicate with us, we may collect:
- Device data – IP address, browser, location, device type, OS
- Technical data – page views, navigation paths, and session details
- Contact info – name, email, phone number, address
- Communication history – emails, messages, call notes, survey responses
From Candidates - Depending on how you engage with us, we may also collect:
- Application details – CVs, cover letters, education, references
- Assessment data – interview notes, test results, salary expectations
- Public profile data – e.g., from LinkedIn or employer websites
- Reference input – feedback and comments shared by listed references or internal referrers
Where do we get your personal data from?
We collect data from:
- You directly – when you apply, sign up, or communicate with us
- Our Careers Site – through cookies, forms, and usage analytics
- Public sources – professional networks, public websites
- Our employees or partners – who refer or recommend you
- References – if someone lists you as a reference, we may contact you directly
Why we process your personal data
We process your data to:
- Manage our recruitment process and assess candidates fairly
- Contact you about job opportunities that match your profile
- Communicate during each stage of the recruitment process
- Record interviews (only with consent)
- Invite you to participate in surveys or research
- Keep you updated about future opportunities if you’ve opted in
- Maintain and improve the performance and security of our Careers Site
- Comply with legal obligations and resolve legal disputes
Who do we share your personal data with?
We may share your data with:
- Recruitment platforms and service providers – helping us manage applications and candidate experience
- Group companies – when supporting our recruitment process
- Cookie providers – if you accept cookies on our Careers Site
- Authorities – if we are legally required to do so
- Legal representatives – in case of disputes or legal claims
- Potential buyers/investors – during a merger, sale, or similar transaction
We never sell your data.
Our legal basis for processing
Most of our data processing is based on legitimate interest, specifically, our interest in identifying and hiring the right people to grow our team and business.
In some cases (e.g., recording interviews or sending newsletters), we’ll ask for your explicit consent, which you can withdraw at any time.
International data transfers
At Oner Active, we’re based in the United Kingdom, and wherever possible, we aim to process your personal data within the UK or European Economic Area (EEA).
However, some of our service providers or their parent companies, may be located outside the UK and EEA, such as in the United States or other countries. When your data is transferred internationally, we make sure it’s protected. We rely on appropriate legal safeguards, which may include:
- Adequacy regulations issued by the UK government or the European Commission (e.g. for the EU, EEA, or the US under the UK Extension to the EU-US Data Privacy Framework); and/or
- Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office (ICO) or the European Commission.
Where needed, we also apply additional technical and organisational measures to keep your personal data secure during and after the transfer.
How long we keep your data
- Visitors – up to 12 months for security purposes
- Cookies – see our Cookie Policy for specific durations
- Candidates –
- If hired: data is retained as part of your employment file
- If not hired: data is kept for 12 months for future opportunities
- Connecting Candidates: 12 months
Your rights
You’re in control of your data. Depending on your circumstances and legal basis, you have the right to:
- Access – see what data we hold about you
- Correct – update or fix inaccurate details
- Delete – request we remove your data (“right to be forgotten”)
- Restrict processing – limit how we use your data
- Object – stop us from processing your data based on legitimate interest
- Data portability – transfer your data to another provider
- Withdraw consent – stop any processing based on prior consent
- Lodge a complaint – with your local data protection authority
How to contact us
Have questions or want to exercise your rights?
📧 Email: info@oneractive.com.
Policy updates
We’ll update this policy whenever necessary, for example, if we change how we process your data or to stay compliant with new regulations.
We encourage you to check this page regularly. The “Last updated” date at the top will always reflect the most recent version.