Build UP
Privacy Policy — Employer Branding & Recruitment
Effective Date: April 21, 2026
At Build UP, we manage our employer branding and recruitment process through our career site (the “Career Site”), and by using a related applicant tracking system.This Privacy Policy explains how we collect, use, and protect your personal information in connection with our hiring activities, and describes your rights under applicable U.S. privacy laws. We honor applicable federal privacy protections and, where relevant, state-level privacy rights. This Privacy Policy is governed by the laws of the State of Alabama, without regard to its conflict of law provisions. Any disputes arising under this Policy shall be resolved in the state or federal courts located in Alabama. Nothing in this Privacy Policy, nor any communications made during our recruitment process, constitutes an offer of employment or alters the at-will nature of employment in Alabama.
This Policy applies to you if:
- • You visit our Career Site ("Visitor")
- • You connect with us via our Career Site to create a profile or receive information about vacancies ("Connecting Candidate")
- • You apply for a position with us, via our Career Site or a third-party service ("Applying Candidate")
- • We collect information about you from other sources because we believe your profile is of interest for our vacancies ("Sourced Candidate")
- • We receive information about you from our employees or partners who refer you to us ("Referred Candidate")
- • You are listed as a reference by a Candidate ("Reference")
When we refer to "Candidate" in this Policy, we mean Connecting Candidates, Applying Candidates, Sourced Candidates, and Referred Candidates collectively, unless stated otherwise.
1. Personal Information We Collect
"Personal information" means any information that identifies, relates to, describes, or could reasonably be linked to a specific individual. We collect the following categories:
From All Individuals
- • Device & Technical Information: IP address, browser type and version, session behavior, traffic source, screen resolution, preferred language, geographic location, operating system, and device settings.
- • Usage Data: Information about your activity on the Career Site, including URLs visited and pages viewed.
- • Communications Data: Content of emails, messages, survey responses, video recordings, and information you add to your account with us.
- • Contact Details: Name, email address, telephone number, and physical address.
From Candidates
- • Application Materials: CV/resume, cover letter, work samples, references, and letters of recommendation.
- • Recruitment Process Data: Interview notes, assessments, test results, and salary requirements.
- • Public Profile Information: Publicly available professional information from sources such as LinkedIn or your current employer's website.
- • Reference Information: Information provided by individuals you or we identify as references, or by employees or partners who refer you to us.
2. How We Collect Personal Information
- • Directly from you, when you apply, connect with us, or communicate with us.
- • Automatically through our Career Site, using cookies and similar tracking technologies (see our Cookie Policy).
- • From public sources, such as LinkedIn, professional directories, and employer websites.
- • From third parties, including recruitment service providers, staffing agencies, or your references.
- • From our employees or partners who refer candidates to us.
You may choose not to provide certain information, but this may limit our ability to consider you for positions or fulfill your requests. We may collect certain demographic information solely for the purpose of complying with federal and state equal employment opportunity reporting obligations. This information is kept separate from your application and is not used in hiring decisions.
3. How We Use Your Personal Information
We use the personal information we collect for the following business purposes:
- • To review, evaluate, and communicate with you about your application or professional profile.
- • To source and identify qualified candidates for current or future vacancies.
- • To contact you regarding specific job openings, now or in the future.
- • To record interviews (with your consent).
- • To conduct reference checks.
- • To send surveys related to our recruitment process.
- • To maintain, develop, and secure our Career Site.
- • To analyze Career Site performance and improve our services.
- • To comply with legal obligations and defend our legal rights.
- • To share your information with recipients described in Section 4 below.
4. How We Share Your Personal Information
We may share your personal information with the following parties:
Service Providers
We share your information with vendors who support our recruitment process, including the provider of our Career Site, applicant tracking system, and recruitment service providers. These vendors are contractually required to use your data only as directed by us.
Group Companies
We share your information with affiliated entities within our corporate group when they provide services or systems used in our recruitment operations.
Cookie and Analytics Providers
With your consent, third-party companies may set cookies on the Career Site and use collected data in accordance with their own privacy policies. See our Cookie Policy for details.
Legal and Regulatory Authorities
We will disclose your information to government authorities, law enforcement, or other parties when required by law, subpoena, or other legal process.
Legal Proceedings
We may share your information with parties involved in potential or existing legal claims, such as in cases involving discrimination or employment disputes.
Business Transfers
In the event of a merger, acquisition, asset sale, financing, or restructuring of all or part of our business, your personal information may be disclosed to the parties involved in that transaction.
We do not sell your personal information for monetary consideration. We do not share your personal information with third parties for their own direct marketing purposes without your consent.
5. Legal Basis for Processing / Our Legitimate Interests
We process your personal information based on one or more of the following grounds:
- • Legitimate Business Interest: We have a legitimate interest in identifying and recruiting qualified talent. We have determined that our interest in processing your information for recruitment purposes is not overridden by your privacy interests, taking into account the context in which we collect and use your information.
- • Your Consent: For specific activities, such as recording an interview or setting non-essential cookies, we will request your consent. You may withdraw your consent at any time (see Section 7 below).
- • Legal Obligation: We may process your information to comply with applicable federal, state, or local laws and regulations.
- • Contract: If you are hired, we process your information to fulfill obligations related to your employment.
6. Data Retention
All Individuals
If we process your information in connection with a legal matter, we retain it until that matter is fully resolved.
Visitors
We retain device and usage data for up to one (1) year for security and performance analysis purposes. Cookie retention periods are described in our Cookie Policy.
Candidates
If you are a Connecting Candidate only, we retain your information for as long as you remain connected with us.
For all other Candidates, we retain your information for as long as needed to evaluate your candidacy for current or future roles. If you are not selected, we may retain your information for a reasonable period to consider you for future openings. If you are hired, your information will be retained and used in connection with your employment, as described in separate employment-related notices.
References
We retain your information for the same period as the Candidate for whom you served as a reference.
7. Your Privacy Rights
In this section, you will find information about the rights you have when we process your personal data. As described below, some of the rights only come into play when we process your personal data under a particular legal basis.
If you have complaints about our processing of your personal data, you can raise a complaint with the data protection authority in United States. You can find their contact details here.
Depending on your state of residence, you may have the following rights regarding your personal information. We will not discriminate against you for exercising any of these rights.
Right to Know / Access
You may request to know what personal information we have collected about you, including the categories of information, the sources from which it was collected, the purposes for which it is used, and the categories of third parties with whom it is shared. You may also request a copy of the specific personal information we hold about you.
Right to Delete
You may request that we delete personal information we have collected about you, subject to certain exceptions (e.g., information needed to complete a transaction, comply with a legal obligation, or defend a legal claim).
Right to Correct
You may request that we correct inaccurate personal information we hold about you.
Right to Opt Out of Sale or Sharing
We do not sell your personal information. If this changes, we will update this Policy and provide you with an opportunity to opt out.
Right to Limit Use of Sensitive Personal Information
To the extent we collect sensitive personal information (as defined by applicable law), you may have the right to limit our use of that information to certain permitted purposes.
Right to Withdraw Consent
Where our processing is based on your consent, you may withdraw it at any time by contacting us (see Section 9 below). Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.
How to Exercise Your Rights
We will verify your identity before fulfilling your request. We aim to respond within 45 days, as required by applicable law, and will notify you if we need additional time.
If you want to exercise any of the rights listed here, we suggest that you:
- Visit the Data & Privacy page on our Career Site, where we offer features to let you exercise your rights;
- Log in to your account with us, where you can use the settings in the account to exercise your rights; or
- Contact us directly at careers@buildup.work.
8. Cookies and Tracking Technologies
We use cookies and similar technologies on our Career Site to support site functionality, analyze usage, and (with your consent) serve relevant content. For details on the cookies we use, how long they last, and how to manage your preferences, please see our Cookie Policy.
Collect information about your use of the Career Site, using cookies and other tracking technologies, as described in our Cookie Policy.
Companies providing cookies on the Career Site. If you consent to it, cookies are set by other companies than us, who will use the data collected by these cookies in accordance with their own privacy policy. You can find information about which cookies this applies to in our Cookie Policy.
Visitors
We keep your personal data for one (1) year for security purposes. The retention periods for cookies are set out in our Cookie Policy. We keep your personal data to analyse the performance of the Career Site for as long as we keep personal data about you for other purposes.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the internet or electronic storage is completely secure. We encourage you to use caution when submitting personal information online.
In the event of a security breach involving your personal information, we will notify affected Alabama residents in accordance with the Alabama Data Breach Notification Act. Notification will be provided in the most expedient time possible and without unreasonable delay, where it is reasonably likely that the breach has caused or will cause substantial harm.
10. Children's Privacy
Our Career Site and recruitment activities are directed at individuals who are at least 18 years of age. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.
11. Contact Us
If you have any questions, comments, or concerns about this Privacy Policy or our data practices, or if you would like to exercise your privacy rights, please contact us:
Build UP
Privacy Contact: Suzanne Baker
Email: careers@buildup.work
12. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make updates, we will revise the Effective Date at the top of this document. We encourage you to review this Policy periodically. If we make material changes, we will provide notice through our Career Site or by other appropriate means.
Appendix: Additional Notice for California Residents
This section supplements the information above and applies specifically to residents of California, pursuant to the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).
Categories of Personal Information Collected
In the past 12 months, we have collected personal information in the following CCPA categories: Identifiers; Professional or employment-related information; Education information; Internet or other electronic network activity; Geolocation data; Audio, electronic, visual, or similar information (e.g., video interviews); and Inferences drawn from the above.
Sensitive Personal Information
We may collect sensitive personal information where necessary for recruitment purposes, such as information about race or ethnicity collected for equal opportunity monitoring. We use and disclose such information only as permitted by the CPRA.
California Privacy Rights
California residents have the right to know, delete, correct, and opt out of sale/sharing of personal information, and the right to non-discrimination. To submit a request, use the contact information in Section 11 above. We will verify your identity before processing your request and respond within 45 days (with possible extension).
Shine the Light
California Civil Code Section 1798.83 permits California residents to request information about disclosures of personal information to third parties for their direct marketing purposes. As noted above, we do not share your personal information with third parties for direct marketing purposes without your consent.
