Get a demo

Elliptic Recruitment Privacy Notice 

Last Update: 1 April 2026

Elliptic collects, uses and shares personal information about you when you apply to work with us. In legal terms, Elliptic Enterprises Limited is the data controller for your personal information. 

What information we hold about you

In connection with your application for work with us, we will collect, store, and use the following categories of personal information:

  • Information you provide us when you apply, including:
    • Name, address, telephone number, personal email address
    • Employment and education history, qualifications, salary expectations, languages
    • Identity documents, visa, nationality and citizenship status
    • LinkedIn profile.
  • Information gathered during the interview and hiring process, including answers to tasks and tests.
  • Information obtained from background checks, criminal checks, or credit references, which may include information about criminal convictions and offences. (For recruits in the US, learn more about your rights under the Fair Credit Reporting Act.)

How we lawfully use your personal information

We will only use your personal information when the law allows us to. Most commonly, we will use your personal information to decide whether to enter into a contract of employment with you, to comply with a legal obligation, or where it is necessary for our legitimate interests and your interests and rights do not override those interests. Our legitimate interests include using the personal information we collect about you to:

  • Assess your skills, qualifications, and suitability for the role.
  • Carry out background, reference and credit checks, where applicable.
  • Communicate with you about the recruitment process.
  • Keep records related to our hiring processes.

How we use personal information in protected categories 

Some categories of data are subject to additional protections:

  • We use information about disability to provide appropriate adjustments during the recruitment process.
  • We use information about racial or ethnic origin, religious or philosophical beliefs, disability or sexual orientation to ensure meaningful equal opportunity monitoring and reporting.
  • We use criminal conviction data to meet commitments to keep our company and customers safe from bad actors. 

We have in place safeguards required by law when processing such data.

Automated decision-making

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.

What personal information is shared with third parties?

We share your personal information with other entities in the Elliptic Group and with service providers under contract. These companies are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow service providers to use your personal information for their own purposes. 

How do we protect personal information? 

We have appropriate security measures in place designed to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal information to staff or service providers with a legitimate need to know and under a duty of confidentiality. 

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

How long do we keep personal information?

By default, we keep your personal information for one year after we have communicated an employment decision to you. If you agree, we may keep your information for longer. After this period, we will securely destroy your personal information.

Your rights in connection with personal information

By law, you may have the right to:

  • Request access to your personal information. This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
  • Request rectification of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
  • Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing.
  • Object to processing of your personal information where we are relying on a legitimate interest.
  • Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
  • Request the transfer of your personal information to another party. 

If you want to exercise one of these rights, please contact [email protected].

Questions or complaints

If you have any questions or concerns about this privacy notice or how we handle your personal information, please contact [email protected]. Elliptic Enterprises Limited is headquartered in the United Kingdom and we are registered with the UK Information Commissioner’s Office (ICO) under ZA161189.

You may also have the right to make a complaint to a supervisory authority. In the UK, a complaint can be filed with the ICO at ico.org.uk/make-a-complaint/.