Privacy Policy – Oner Active Employer Branding & Recruitment
Last updated: 21st October 2026
At Oner Active, we’re committed to building a team that shares our purpose and values. As part of that, we take your privacy seriously.
This privacy policy explains how we handle your personal data when you visit our careers site, connect with us, apply for a role, or are referred to us through our employer branding and recruitment process. Whether you're checking out job opportunities or actively applying, it’s important that you know how your information is used and what rights you have.
Who this policy applies to
This policy covers personal data processing for:
Visitors – browsing our Careers Site
Connecting Candidates – creating a profile or signing up for job updates
Applying Candidates – applying for a job via our site or a third party
Sourced Candidates – profiles we discover through public channels (e.g. LinkedIn)
Referred Candidates – those referred to us by someone in our network
References – individuals listed as a reference by a candidate
For simplicity, we’ll refer to all Connecting, Applying, Sourced, and Referred Candidates as “Candidates”, unless otherwise stated.
Who’s responsible for your data?
Oner Active UK Ltd is the data controller, which means we decide how and why your personal data is processed as part of our recruitment and employer branding efforts.
We may work with data processors, partners who process data on our behalf under strict instructions, but never for their own use.
What personal data do we collect?
From everyone - If you visit our Careers Site or communicate with us, we may collect:
Device data – IP address, browser, location, device type, OS
Technical data – page views, navigation paths, and session details
Contact info – name, email, phone number, address
Communication history – emails, messages, call notes, survey responses
From Candidates - Depending on how you engage with us, we may also collect:
Application details – CVs, cover letters, education, references
Assessment data – interview notes, test results, salary expectations
Public profile data – e.g., from LinkedIn or employer websites
Reference input – feedback and comments shared by listed references or internal referrers
Where do we get your personal data from?
We collect data from:
You directly – when you apply, sign up, or communicate with us
Our Careers Site – through cookies, forms, and usage analytics
Public sources – professional networks, public websites
Our employees or partners – who refer or recommend you
References – if someone lists you as a reference, we may contact you directly
Why we process your personal data
We process your data to:
Manage our recruitment process and assess candidates fairly
Contact you about job opportunities that match your profile
Communicate during each stage of the recruitment process
Record interviews (only with consent)
Invite you to participate in surveys or research
Keep you updated about future opportunities if you’ve opted in
Maintain and improve the performance and security of our Careers Site
Comply with legal obligations and resolve legal disputes
We also use automated tools to support our recruitment process. This includes technology that analyses the information in your CV and provides us with a summary and assessment score. The purpose of this is to help us review applications efficiently and consistently. These tools do not make hiring decisions on their own. Every decision is made by a member of our team, who reviews your application and does not rely on the score alone. You have the right to ask for a person to review any decision, to express your point of view, to contest a decision, or to object to this form of processing. To do any of these, just email us at info@oneractive.com.
Who do we share your personal data with?
We may share your data with:
Recruitment platforms and service providers – helping us manage applications and candidate experience
Group companies – when supporting our recruitment process
Cookie providers – if you accept cookies on our Careers Site
Authorities – if we are legally required to do so
Legal representatives – in case of disputes or legal claims
Potential buyers/investors – during a merger, sale, or similar transaction
We never sell your data.
Our legal basis for processing
Most of our data processing is based on legitimate interest, specifically, our interest in identifying and hiring the right people to grow our team and business.
In some cases (e.g., recording interviews or sending newsletters), we’ll ask for your explicit consent, which you can withdraw at any time.
International data transfers
At Oner Active, we’re based in the United Kingdom, and wherever possible, we aim to process your personal data within the UK or European Economic Area (EEA).
However, some of our service providers or their parent companies, may be located outside the UK and EEA, such as in the United States or other countries. When your data is transferred internationally, we make sure it’s protected. We rely on appropriate legal safeguards, which may include:
Adequacy regulations issued by the UK government or the European Commission (e.g. for the EU, EEA, or the US under the UK Extension to the EU-US Data Privacy Framework); and/or
The UK International Data Transfer Agreement (IDTA) or the UK Addendum to the European Commission’s Standard Contractual Clauses (SCCs), both issued by the Information Commission’s Office (ICO).
Where needed, we also apply additional technical and organisational measures to keep your personal data secure during and after the transfer.
How long we keep your data
o If hired: data is retained as part of your employment file
o If not hired: data is kept for 12 months for future opportunities
o Connecting Candidates: 12 months
Your rights
You’re in control of your data. Depending on your circumstances and legal basis, you have the right to:
Access – see what data we hold about you
Correct – update or fix inaccurate details
Delete – request we remove your data (“right to be forgotten”)
Restrict processing – limit how we use your data
Object – stop us from processing your data based on legitimate interest
Data portability – transfer your data to another provider
Withdraw consent – stop any processing based on prior consent
Make a complaint – to us directly at info@oneractive.com (we’ll acknowledge your complaint within 30 days), or to the ICO, the UK’s data protection regulator
How to contact us
Have questions, want to exercise your rights, or make a complaint?
📧 Email: info@oneractive.com.
Policy updates
We’ll update this policy whenever necessary, for example, if we change how we process your data or to stay compliant with new regulations.
We encourage you to check this page regularly. The “Last updated” date at the top will always reflect the most recent version.
