What happens to your application data.

A short, honest notice covering the personal data you give us by applying for a role at DATADEFENZ — what we collect, why, how long we keep it, and how to ask us to delete it. This covers job applications specifically, not the rest of the site.

Drafted using the same principles we assess other organisations against. It is a good-faith notice, not legal advice — have it reviewed by counsel or a DPO before relying on it for a live hiring process.

In plain terms

When you apply for a role, we collect what you give us on the application form: your name, email, phone number, LinkedIn URL, a portfolio or other URL if you provide one, your notice period, a short note on why you're interested, and your CV. We use it for one purpose — to assess your application for the role you applied to.

Please keep it relevant

Only include what's actually relevant to the role. Your CV doesn't need your national ID number, passport number, bank details, health information, or details about your family — leave them out unless a specific part of the role genuinely requires disclosing them, which is uncommon. The less we hold that we don't need, the less there is to protect, and the less risk to you if something ever goes wrong on our end.

Why we collect it

Solely to evaluate your suitability for the role you applied to, and — only with your continued consent — to consider you for another role that opens while we still hold your data. We don't use it for anything else: not marketing, not building a database to sell, not training a model.

The legal basis

Your consent, given by ticking the box on the application form. You can withdraw it at any time by emailing us. Withdrawing doesn't undo anything already done before you withdrew, but it stops anything further.

Who sees it

The people directly involved in the hiring decision for that role. Nobody else at DATADEFENZ has a reason to see your application, and it isn't shared outside the company beyond the one processor named below.

How your application reaches us

The form submits through Formspree, a third-party service that transmits the submission to us and is not used to store it afterward. Formspree's own privacy practices govern that brief transmission step. Once it reaches us, your CV and application details are stored on an encrypted drive that DATADEFENZ controls directly — not a shared cloud folder, not a general inbox archive.

How long we keep it

Six months from the date you applied. After that it's deleted, unless:

You're hired — your details move into employee records, handled under a separate policy.
You ask us to keep considering you for other roles, and we agree.
You ask us to delete it sooner.

Deleting your data

Email hello@datadefenz.com and ask. We'll delete your application, your CV, and the record of it within a reasonable time and confirm once it's done. The same address handles requests to see what we hold on you, or to correct anything that's wrong.

If you're applying from outside Sweden

DATADEFENZ operates from Gothenburg (Sweden), Colombo (Sri Lanka) and Melbourne (Australia). If the role you're applying for sits in a different office than the one reviewing applications, your data may be seen by people in another of these countries as part of the hiring process.

Questions or a complaint

Email hello@datadefenz.com first. If you're not satisfied with the answer, you're entitled to raise it with your local data protection authority — in Sweden, that's the Integritetsskyddsmyndigheten (IMY).