Privacy Policy

Last updated: January 2026

Introduction

Idonara ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our recruitment platform.

This platform is operated by AI Applied Ltd, a company registered in England and Wales. We are committed to ensuring that your privacy is protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

Personal Information

We may collect personally identifiable information that you voluntarily provide when using our platform:

  • Name, email address, and phone number
  • Employment history and professional qualifications
  • CV/resume documents and cover letters
  • Educational background and certifications
  • Skills, competencies, and work preferences
  • Interview recordings and assessment results (with consent)

Automatically Collected Information

When you access our platform, we may automatically collect:

  • Device information and browser type
  • IP address and approximate location
  • Usage data and interaction patterns
  • Cookies and similar tracking technologies

How We Use Your Information

We use the information we collect for the following purposes:

  • To provide and maintain our recruitment platform services
  • To process job applications and match candidates with opportunities
  • To facilitate CV analysis and candidate screening
  • To schedule interviews and manage the recruitment workflow
  • To communicate with you about your applications and account
  • To improve our services through analytics and AI model training
  • To comply with legal obligations and regulatory requirements
  • To detect and prevent fraud or security issues

AI Processing and Automated Decision-Making

Our platform uses artificial intelligence to assist in the recruitment process. This includes:

  • Automated CV parsing and information extraction
  • Skill matching and candidate-role compatibility scoring
  • Interview question generation based on role requirements
  • Bias detection and fairness monitoring

Important: While AI assists in processing applications, all final hiring decisions are made by human recruiters and hiring managers. You have the right to request human review of any automated assessment and to contest decisions made with AI assistance.

Data Sharing and Disclosure

We may share your information with:

  • Recruiting Organisations: Companies using our platform to fill positions you apply for
  • Service Providers: Third-party vendors who assist in operating our platform (e.g., cloud hosting, email services)
  • Legal Requirements: When required by law, court order, or government request
  • Business Transfers: In connection with mergers, acquisitions, or asset sales

We do not sell your personal information to third parties for marketing purposes.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data:

  • Encryption of data in transit and at rest (AES-256)
  • Multi-tenant data isolation ensuring organisational separation
  • Regular security audits and penetration testing
  • Access controls and authentication mechanisms
  • Employee training on data protection practices
  • ISO 27001 aligned security practices

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Typical retention periods:

  • Active candidate profiles: Duration of recruitment process plus 2 years
  • Application records: 3 years from application date
  • Account data: Until account deletion plus 30 days
  • Audit logs: 7 years for compliance purposes

Your Rights (UK GDPR)

Under UK data protection law, you have the following rights:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Rights related to automated decision-making: Request human review of automated decisions

International Data Transfers

Your data is primarily processed within the United Kingdom and European Economic Area. Where we transfer data outside these regions (e.g., to use certain AI services), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office.

Cookies

We use cookies and similar technologies to improve your experience on our platform. Essential cookies are required for the platform to function. Analytics cookies help us understand usage patterns. You can manage your cookie preferences through your browser settings or our cookie consent mechanism.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact our Data Protection Officer:

AI Applied Ltd

Data Protection Officer

Email: privacy@aiapplied.uk

Address: London, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.