GDPR Privacy Notice

This notice supplements our Privacy Policy for applicants, recruiters, and visitors located in the European Economic Area, Switzerland, and the United Kingdom, where the General Data Protection Regulation (GDPR) and UK GDPR apply.

Kestrion, Inc. is the data controller for personal data collected through the platform. You can reach our data protection contact at privacy@kestrion.com.

• Contract — processing your profile, messages, and interview data to provide the service you signed up for
• Legitimate interests — fraud screening, platform security, and product improvement, balanced against your rights
• Consent — non-essential cookies and optional marketing communications, which you can withdraw at any time
• Legal obligation — responding to lawful requests from authorities and complying with applicable law

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request erasure of your data ("right to be forgotten")
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact privacy@kestrion.com. We respond to verified requests within one month, as required by law.

Kestrion is a global platform, so your data may be processed in countries outside the EEA/UK, including the United States. Where it is, we rely on Standard Contractual Clauses or another approved transfer mechanism to protect your data to the standard required by the GDPR.

If you believe we have not handled your personal data in accordance with the GDPR, you have the right to lodge a complaint with the data protection authority in your country of residence, in addition to contacting us directly.