Privacy Policy

Slate is committed to protecting personal data and respecting privacy.

This Privacy Policy explains how we collect, use, store, and share personal data in connection with this Site, our Platform at https://app.slate.cv, and the Services we provide.

We act as:

• Controller in respect of personal data relating to our Platform Users, Site visitors, and business contacts.

• Processor in respect of Candidate Data uploaded by Platform Users to the Platform. In that case, the Platform User remains the Controller and is responsible for ensuring a lawful basis for processing Candidate Data in accordance with the Terms of Use.

Our contact details for privacy matters are: dpo@slate.cv

By accessing or using the Site, Platform, or Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you must not use the Site, Platform, or Services.

Personal Data We Collect

We may collect the following categories of personal data:

From Platform Users:

• registration details such as name, email address, company name, role, and password

• billing and payment details (processed securely by Stripe – we do not store card details)

• usage data including log-in history, device information, and interactions with the Platform

• support communications and correspondence

From Candidates (uploaded by Platform Users):

• resume content including employment history, education, skills, and qualifications

• identifiers such as name or other personal information included in resumes (note: contact details are stripped during reformatting and not retained by Slate)

From Site visitors:

• basic usage data such as IP address, browser type, device, and pages visited

• cookies and analytics data (see Cookies section)

How We Use Personal Data

We use personal data only as permitted by Applicable Data Protection Law.

For Platform Users (as Controller):

• to provide, operate, and improve the Platform and Services

• to administer billing, payments, and account management

• to authenticate and authorise access to the Platform

• to provide customer support and communications

• to send service updates, legal notices, and information relevant to use of the Services

• for security, monitoring, fraud prevention, and compliance with law

For Candidate Data (as Processor):

• to process, format, and deliver resumes and related outputs on behalf of Customers

• to provide support to Platform Users in relation to Candidate Data

• to comply with security and retention obligations in the Data Processing Agreement

For Site visitors:

• to maintain and improve the Site and Services

• to analyse usage for performance and security

• to deliver marketing communications where consent or legitimate interest applies

Legal Bases for Processing

When acting as Controller, we rely on the following legal bases:

• performance of a contract (providing Services to Platform Users)

• compliance with legal obligations

• legitimate interests (e.g. improving Services, ensuring security, marketing to business contacts)

• consent, where expressly required by law

When acting as Processor, we process Candidate Data only on documented instructions from the Platform User (Controller). The Platform User is solely responsible for determining and establishing the lawful basis for processing Candidate Data.

Disclosure of Personal Data

We may share personal data with:

• our subprocessors, each providing encrypted and secure services

• professional advisers, insurers, and auditors where necessary

• regulators, law enforcement, or courts where required by law or legal process

• acquirers or successors in the event of a corporate transaction

We do not sell personal data.

International Transfers

Where personal data is transferred outside the UK or EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent measures.

Data Retention

We retain Platform User account data for as long as an account remains active and for up to six years thereafter for legal and record-keeping purposes.

We do not store original candidate resumes. Reformatted resumes (with contact details removed) are stored and retained during the period that accounts are active. Following termination, Customer Data is deleted, unless a longer retention period is required by law.

Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, logical separation of data, access controls, monitoring, and regular patching.

However, no system is completely secure. We do not guarantee that unauthorised access or loss will never occur. Customers remain responsible for ensuring appropriate security measures in their own environments.

Cookies

The Site uses cookies and similar technologies for functionality, analytics, and marketing. Site visitors can manage cookie preferences via browser settings. For more information, see our Cookie Policy below.

Data Subject Rights

Under Applicable Data Protection Law, individuals have rights to access, rectify, erase, restrict, port, and object to the processing of their personal data.

• If you are a Platform User, please contact us directly.

• If you are a Candidate, please direct requests to the relevant Platform User (Controller).

• Slate will assist Platform Users in fulfilling requests in a reasonable time where technically feasible.

Responsibility for Candidate Data

Slate is not responsible for verifying whether Candidate Data has been lawfully collected or whether consents and notices have been properly obtained. That responsibility rests solely with the Platform User.
The Services are not designed for processing special categories of data or other sensitive data. Slate has no liability arising from any Platform User’s decision to upload such data in violation of this Policy or the DPA.

Marketing Communications

We may send business-to-business marketing communications to Platform Users and prospective customers based on legitimate interest. Recipients may opt out at any time using the unsubscribe link or by contacting us at dpo@slate.cv

Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be notified to Platform Users by email or through the Platform. Continued use of the Services constitutes acceptance of the updated Policy.

Contact

For questions about this Privacy Policy or to exercise your rights, please contact us at:

Email: dpo@slate.cv

If you are located in the UK or EEA and believe that we have not addressed your concern, you have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO).