PRIVACY NOTICE

This page was last changed on February 27, 2025

This privacy notice for CandiScreen Pty Ltd (“Company,” “we,” “us,” or “our”) describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:

• Visit our website at https://candiscreen.com or any website of ours that links to this privacy notice
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@candiscreen.com.

TABLE OF CONTENTS

1. PRIVACY NOTICE
2. SUMMARY OF KEY POINTS
3. WHAT INFORMATION DO WE COLLECT?
4. HOW DO WE PROCESS YOUR INFORMATION?
5. WHAT LEGAL BASES DO WE RELY ON?
6. INTERNATIONAL DATA TRANSFERS
7. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
8. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
9. HOW LONG DO WE KEEP YOUR INFORMATION?
10. HOW DO WE KEEP YOUR INFORMATION SAFE?
11. DO WE COLLECT INFORMATION FROM MINORS?
12. WHAT ARE YOUR PRIVACY RIGHTS?
13. ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION
14. CONTROLS FOR DO-NOT-TRACK FEATURES
15. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
16. DO WE MAKE UPDATES TO THIS NOTICE?
17. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
18. PRIVACY COMPLAINTS
19. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice, but you can find out more details by clicking each link in the table of contents or scrolling to the corresponding section.

• What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with CandiScreen Pty Ltd and the Services, the choices you make, and the products and features you use.
• Do we process any sensitive personal information? We do not process sensitive personal information.
• Do we receive any information from third parties? We do not receive any information from third parties.
• How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
• In what situations and with which types of parties do we share personal information? We may share information in specific situations and with specific categories of third parties.
• How do we keep your information safe? We have organisational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.
• What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.
• How do you exercise your rights? The easiest way to exercise your rights is by contacting us at support@candiscreen.com. We will consider and act upon any request in accordance with applicable data protection laws.

WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise when you contact us.

• Name (e.g., first and last name)
• Email address (e.g., the email you use to apply for a job or sign up as a recruiter)
• Company name (for recruiters creating a profile)
• Job titles or role information
• Marketing preferences (e.g., whether you opt in to receive promotional communications)
• Passwords and usernames (for account creation and authentication)
• Typed screening responses (e.g., your written answers to pre-screening questions, or other text responses you voluntarily provide)
• Usage and interaction data (e.g., certain engagement or usage metrics regarding how you interact with our forms, for analytics and security purposes)
• Any other personal information you choose to provide (e.g., additional details you submit in correspondence or through our contact/support features)

Sensitive Information. We do not collect or process sensitive personal information, such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric information, unless explicitly required and with your prior consent.

Social Media Login Data. We may provide you with the option to register with us using your existing social media account details. If you choose to register in this way, we will collect the information described in the section called “HOW DO WE HANDLE YOUR SOCIAL LOGINS?” below.

Application Data. If you use our application(s), we also may collect certain device information or request permission to access specific features on your mobile device. You can revoke these permissions at any time in your device’s settings.

We may automatically collect certain information when you visit, use, or navigate our Services (e.g., IP address, device and usage data, etc.). This information is needed to maintain security and for our internal analytics.

HOW DO WE PROCESS YOUR INFORMATION?

We process your information to provide and improve our Services, communicate with you, etc.

• To facilitate account creation and authentication
• To deliver and facilitate services to the user
• To respond to user inquiries or offer support
• To send administrative information to you
• To enable user-to-user communications
• To request feedback
• To send marketing and promotional communications
• To protect our Services
• To identify usage trends
• To save or protect an individual’s vital interest

WHAT LEGAL BASES DO WE RELY ON?

If you are located in the EU or UK, we may rely on consent, performance of a contract, legitimate interests, legal obligations, or vital interests to process your personal information.

If you are located in Canada, we may rely on express or implied consent.

If you are located in Australia, we collect, use, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This means we will only process your personal information where:

• It is reasonably necessary for our business functions and activities, including providing our services to you;
• You have given your consent (where required);
• It is required or authorised by law;
• We need to protect your, or another person's, health or safety;
• We have a legitimate interest in using the data, and it is within reasonable expectations of the individual.
• If you do not provide certain personal information, we may not be able to provide our Services to you or respond to your requests.

If we need to process your personal information for a purpose not covered above, we will seek your consent before doing so.

INTERNATIONAL DATA TRANSFERS

Some of our service providers and third-party vendors are located outside Australia. As a result, your personal information may be transferred to, stored, or processed in a country outside Australia, including but not limited to The United States and European Union.

While these jurisdictions may not have the same data protection laws as Australia, we take reasonable steps to ensure that any overseas recipient complies with Australian privacy laws or is subject to similar data protection obligations.

If you have any concerns about international data transfers, please contact us at support@candiscreen.com.

WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may share your data with third-party vendors who perform services on our behalf or in connection with a business transaction (e.g., merger, sale of company assets).

HOW DO WE HANDLE YOUR SOCIAL LOGINS?

If you choose to register or log in via a social media account, we may have access to certain info about you (e.g., name, email). We do not control how third parties use your personal information.

HOW LONG DO WE KEEP YOUR INFORMATION?

We only retain your personal information for as long as necessary for the purposes outlined in this Privacy Notice, unless a longer retention period is required by law.

Once personal information is no longer required, we will take reasonable steps to delete or de-identify it in accordance with our data retention policies and applicable laws.

HOW DO WE KEEP YOUR INFORMATION SAFE?

We implement reasonable technical and organisational security measures. However, no system is 100% secure, and we cannot guarantee absolute security.

DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect data from or market to children under 18 years of age. If we learn we have collected such data, we will take steps to delete it.

WHAT ARE YOUR PRIVACY RIGHTS?

In some regions, you have certain rights under data protection laws (e.g., the EEA, UK, Canada). You can withdraw your consent or opt out of marketing by contacting us at support@candiscreen.com.

ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION

You have the right to request access to the personal information we hold about you and to request corrections if it is inaccurate, outdated, or incomplete.

To request access or a correction, please contact us at support@candiscreen.com. We may require you to verify your identity before processing your request.

In some cases, we may refuse a request where we are legally permitted to do so. If this happens, we will provide you with a written explanation of our decision.

CONTROLS FOR DO-NOT-TRACK FEATURES

We do not currently respond to DNT browser signals, as no uniform standard has been adopted for DNT.

DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

This section applies only to users residing in California, USA.

Yes, California residents are granted specific rights. You may request and obtain information about personal data disclosed to third parties for direct marketing once a year free of charge.

DO WE MAKE UPDATES TO THIS NOTICE?

We may update this notice from time to time. The updated version will be indicated by an updated date and will be effective as soon as it is accessible.

HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments, email us at support@candiscreen.com or write to:

PRIVACY COMPLAINTS

If you have concerns about how we handle your personal information, you can contact us at support@candiscreen.com. We take privacy complaints seriously and will respond within a reasonable time.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au

HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on applicable laws, you may have the right to request access to your personal information, change it, or delete it. Please contact us at support@candiscreen.com.