Last updated 15 Aug 2026
Interview HR is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR), and to protecting the data rights of all individuals whose personal information we process. This page explains our compliance approach and how we uphold your data protection rights.
Interview HR processes personal data in accordance with UK GDPR and EU GDPR requirements. We recognise the importance of protecting personal data and have implemented technical and organisational measures appropriate to the risks of our processing. As a recruitment platform, we process both customer data (recruiters and hiring teams) and candidate data.
We process personal data under the following legal bases:
Under the UK GDPR and EU GDPR, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge in a commonly used electronic format within one month of your request.
You have the right to request correction of inaccurate or incomplete personal data. We will update your information promptly upon verification of the correct data.
You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent. We will comply within one month unless we have a legal obligation to retain the data.
You have the right to request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format (e.g., JSON, CSV). You can also request that we transfer this data to another service provider where technically feasible.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
You have the right to lodge a complaint with a supervisory authority if you believe we have not handled your personal data appropriately. In the UK, this is the Information Commissioner's Office (ICO). If you are in the EU, you can complain to your local data protection authority — for example, the CNPD (Comissão Nacional de Proteção de Dados) in Portugal.
To exercise any of your GDPR rights, please contact us at:
We may need to verify your identity before processing your request to protect your personal data from unauthorised access.
Interview HR operates two legally distinct models, and our role depends on which one applies to a given vacancy:
For vacancies we source from publicly available listings, the hiring company may have no relationship with Interview HR when you apply, so it cannot instruct us to process your data. For candidate applications submitted through these aggregated listings, Interview HR is the data controller: we control the processing needed to receive your application, extract and score it, and make it available to the hiring company. The hiring company becomes an independent data controller once it receives your application data. Interview HR is also the data controller for account holder data (recruiters and hiring teams).
For candidate data managed by our customers through the platform (for example, a recruitment agency running its hiring process on Interview HR), we act as a data processor on behalf of that customer, who is the data controller. We process this data according to their instructions and our Data Processing Agreement (DPA).
A Data Processing Agreement covering the subject matter, duration, nature, and purpose of processing, the types of personal data and categories of data subjects, sub-processor arrangements, security measures, breach procedures, and data subject rights assistance is available to customers on request at privacy@interviewhr.com.
We implement appropriate technical and organisational measures to protect personal data:
In the event of a personal data breach that poses a risk to individuals' rights and freedoms, we will:
Candidate data and application documents are stored and processed in the United Kingdom (AWS London region, eu-west-2). The UK is recognised by the European Commission as providing an adequate level of data protection, so personal data can flow between the EU and the UK without additional safeguards. Some of our sub-processors (such as Clerk, Stripe, and Vercel) are US-based; where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the EU–US Data Privacy Framework and Standard Contractual Clauses (SCCs).
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:
We use carefully selected third-party sub-processors to provide our services, bound by appropriate data processing terms:
Analytics and search run on infrastructure we operate ourselves. We will notify customers of any changes to our sub-processors with reasonable notice.
We apply privacy by design and by default principles throughout our platform: we minimise the data our forms collect, encrypt data automatically, restrict data access to the organisation that owns it, use cookie-free self-hosted analytics, and consider data protection risks when building new features.
We assess the data protection risks of processing activities that could pose higher risks to individuals' rights and freedoms, particularly our AI-assisted features. Our AI-assisted CV extraction and candidate scoring are designed so that outputs are advisory only and cannot by themselves reject a candidate — see section 15.
Our services are not directed at children under 16 years of age. We do not knowingly collect or process personal data from children. If we become aware that we have inadvertently collected data from a child, we will delete it immediately.
Our AI features involve automated processing and profiling: we extract structured information from CVs and generate compatibility scores based on CV and job description analysis. However, Interview HR does not use AI scoring to make solely automated hiring decisions that produce legal or similarly significant effects for candidates (Article 22 UK GDPR), because:
You can object to this profiling at any time — see section 3.6.
If you are unhappy with how we have handled your personal data, you can complain to us directly at privacy@interviewhr.com with the subject line "Data Protection Complaint". In line with UK data protection law:
Using our complaints process does not affect your right to complain to the ICO or, if you are in the EU, to your local data protection authority at any time (see section 18).
For any GDPR-related questions, concerns, or to exercise your data protection rights, please contact:
Our supervisory authority is the UK Information Commissioner's Office (ICO):
We may update this GDPR compliance page to reflect changes in our practices, legal requirements, or regulatory guidance. Significant changes will be communicated via email or through a prominent notice on our platform. The "Last updated" date at the top indicates when this page was last revised.
Interview HR is committed to GDPR compliance and protecting the fundamental rights and freedoms of all individuals whose personal data we process. We continuously review and improve our data protection practices.