VERTX Legal

Applicant Privacy Notice

Version 1.9. Effective 13 September 2026. Governed by the laws of England and Wales.

VERTX APPLICANT PRIVACY NOTICE

Version: 1.9 Effective date: 13 September 2026 Applies to: Engineers who apply to join the VERTX network

This notice explains what we do with your personal data when you apply to VERTX and go through our assessment process. It is written for applicants. If you go on to work through VERTX, the agreement you sign and our general privacy policy will also apply.

1. WHO WE ARE

VERTX Talent Ltd is the data controller for the personal data described in this notice.

Registered in England and Wales, company number 16902446
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Registered with the Information Commissioner's Office, registration number ZC111335
Privacy contact: privacy@vertxtalent.io

2. WHAT WE COLLECT

2.1 When you apply

your name, email address and the country or city you are based in;
your date of birth, your nationality, your home address and your country of tax residence;
how you contract with us, and your company details if you contract through one;
your phone number;
the role you are applying for, your experience level and years of experience;
your skills and primary technology stack;
links you choose to give us, such as GitHub, LinkedIn or a portfolio;
your CV, and the information we read from it to fill in your application.

We also record how far you get through the application form itself, so that we can see where it is going wrong for people and offer help to anyone who could not finish. If you leave partway through, we keep the name and email you had already entered, together with the step you reached, for 30 days, and then delete them. We do not keep them at all if you leave on the first screen, before you accept this notice.

2.2 During assessment

your written English exercise and your answers;
the code you write in our online assessment environment, and the results of running it;
audio and video recordings of your interviews, together with transcripts and written summaries;
the assessment notes and scores our reviewers produce about your work;
technical information about the connection and device you use for the application and the assessments: your IP address, the type of connection it belongs to, and basic characteristics of your browser such as screen size, time zone and platform;
information about how you completed the written assessment, such as typing and editing patterns, whether text was pasted in, and whether other windows or screens were in use. This is part of the assessment itself and is described to you when you take it.
a recording of your entire screen throughout the coding assessment, which you are asked to share before it begins. Recording pauses while you are on your break and resumes when you return. This is part of the assessment itself and is described to you before you start it.

2.3 If you reach the final stage

identity documents and the result of an identity check, carried out through our identity verification provider;
if you are engaged, your payment and tax details, which are covered by the agreement you sign.

We ask for your date of birth, and only for one purpose: it is what lets us rule out a false match when we screen your name against sanctions lists. Names are shared by many people, and without a date of birth a match cannot be cleared, only raised again at every check. We do not ask for your marital status, your health, or any other special category data. Please do not include information of that kind in your CV or application.

3. WHY WE USE IT, AND OUR LAWFUL BASIS

What we do	Why	Lawful basis
Assess your application and run the vetting process	To decide whether we can place you with a client	Legitimate interests: we cannot operate a vetted network without assessing applicants
Record interviews, with your camera on	Assessment is remote. A recording is the only way a decision about you can be reviewed afterwards, checked for consistency between reviewers, or defended if you challenge it. It is also how we confirm that the person assessed is the person who applied.	Legitimate interests
Verify your identity	To confirm the person assessed is the person engaged, and to protect clients and other engineers	Legitimate interests, and legal obligation where financial crime rules apply
Sanctions and financial crime screening	To meet our legal obligations. We screen when you apply and again before anyone is paid, and we use your date of birth to rule out a false match on a shared name	Legal obligation
Contact you about your application	To tell you what is happening and what happens next	Legitimate interests
Record how far you got through the application form	To find and fix the parts of the form that stop people applying, and to offer help to somebody who could not finish it	Legitimate interests
Keep records of assessments	To answer questions about a decision, and to defend a complaint or claim	Legitimate interests
Check for identity substitution and repeat applications	To confirm that the person we assess is the person we place, and to detect an application that has already been refused returning under a different name. We compare connection, device and assessment-behaviour signals across applications.	Legitimate interests

Recording is not optional, and we would rather say so plainly than pretend otherwise. We cannot assess someone remotely without a camera and a recording: it is how a second person can check a decision, how we keep the bar the same between reviewers, and how we know the person on the call is the person who applied. Because it is a condition of being assessed rather than a free choice, we do not ask you to consent to it. Asking for consent we could not act on if you refused would be misleading. You accept it when you create your account, and you are told again before you book.

Where we rely on legitimate interests, we have considered your rights and have concluded that assessment is what you expect when you apply, and that we do no more than is needed for it. You can object to any of it — see section 8.

4. AUTOMATED PROCESSING AND ARTIFICIAL INTELLIGENCE

We use automated tools, including artificial intelligence, at several points in the assessment. They help us sort applications as they arrive, check and summarise the work you produce, and prepare for your interview. We do not set out the individual tools or checks we use, because how our assessment works is confidential to us.

No decision about your application is made solely by automated means. Every outcome that affects you, including a rejection, is made by a person who reviews the underlying work. The automated outputs inform that person; they do not replace them, and a reviewer can and does disagree with them.

We do not give feedback on assessment outcomes, and we do not enter into correspondence about them. This applies to every applicant equally.

5. WHO SEES YOUR DATA

Our team. VERTX staff who run the assessment process.

Our technical reviewers. Experienced engineers, engaged as independent contractors, who conduct technical interviews and write assessments. They are under written confidentiality and data protection obligations, may use your data only for your assessment, must not keep it afterwards, and must not contact you outside the process. Before your session they see a reference code rather than your name.

Our service providers, who process data on our behalf under contract, including:

hosting, database and application infrastructure;
malware scanning of your CV, which happens before the file is stored;
scheduling, so that you can choose a time for your interviews and we can hold them;
video interview, recording and transcription;
code execution for the technical assessment;
artificial intelligence providers used for scoring and summarising;
identity verification and sanctions screening;
email delivery;
error monitoring and product analytics.

Clients. If you pass vetting and we propose you for an engagement, we share a professional profile with the client. We never share your CV contact details, your identity documents, or your assessment recordings with a client.

We do not sell your personal data, and we do not use it to train publicly available artificial intelligence models.

6. TRANSFERS OUTSIDE THE UNITED KINGDOM

We work with engineers and reviewers in a number of countries, so your data may be accessed from outside the United Kingdom, including from the United Arab Emirates, Pakistan, Ukraine and the European Economic Area, and from the United States where a service provider is based there.

Where we transfer personal data to a country that the United Kingdom has not found to provide an adequate level of protection, we put in place an approved safeguard, which is normally the United Kingdom International Data Transfer Agreement, or the United Kingdom Addendum to the European Commission's standard contractual clauses, together with an assessment of the transfer.

You can ask us for a copy of the safeguard we use by writing to privacy@vertxtalent.io.

7. HOW LONG WE KEEP IT

If you start an application and do not finish it: we keep the name and email you entered, and the step you reached, for 30 days, and then delete them. Nothing identifying you is kept if you leave on the first screen.
If your application does not succeed: we keep your application and assessment records for six months from the decision, and then delete them completely. This includes your CV, your assessment answers and any recording of your interview. Six months reflects the period in which a decision about your application can still be questioned or challenged, which is the only reason we need the record once it has been made. You may ask us to delete sooner.
After that, we hold nothing about you beyond a one-way record that an application was received and closed. That record is a set of scrambled values, which cannot be turned back into your CV, your address, your device or anything else about you, and which exists only so that we can recognise the same application arriving again. It includes scrambled forms of the connection and device information in section 2.2, together with the type of connection you used.
If you join the network: we keep your records for the duration of your engagement and then for six years, which is the period we need for contractual, tax and legal purposes.
Interview recordings: if you join the network, we keep these for 12 months from the session. If your application does not succeed they are deleted with the rest of your record, six months after the decision.
Identity and screening records: we keep these for as long as financial crime rules require.
Assessment integrity records: where we need to keep a record in order to protect the integrity of our assessment process, or to establish, exercise or defend a legal claim, we keep it for up to 24 months from the decision instead of deleting it at six months. It is limited to what is necessary for that purpose, is held separately from our ordinary records, is accessible only to the company owner, is used for nothing else, and is deleted at the end of that period.

8. YOUR RIGHTS

You have the right to:

ask for a copy of the personal data we hold about you;
have inaccurate data corrected;
ask us to delete your data, in the circumstances where that right applies;
ask us to restrict how we use your data, or object to our use of it where we rely on legitimate interests;
receive certain data in a portable, machine readable form;
object to our use of your data where we rely on legitimate interests, including the recording of interviews and the identity-substitution checks described above.

To exercise any of these, write to privacy@vertxtalent.io. We will respond within one month.

If you object to being recorded, tell us before you book and we will explain what it means. We cannot assess you without it, so in practice it means we cannot take your application further — that is a limitation of a remote process, not a penalty, and we would rather you knew before spending your time than after. Nothing is held against you and you are welcome to apply again in future.

9. IF YOU ARE UNHAPPY

Please tell us first at privacy@vertxtalent.io so we can put it right.

You also have the right to complain to the Information Commissioner's Office, the United Kingdom's data protection regulator, at ico.org.uk, by telephone on 0303 123 1113, or at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

10. CHANGES

If we change this notice we will publish the new version here and update the version and date at the top. If a change materially affects you, we will tell you directly.

VERTX Talent Ltd, vertxtalent.io Applicant Privacy Notice, version 1.9, 13 September 2026.