Privacy Policy
This policy describes the intended privacy model of the supplied static project. The included forms are mock interactions and do not transmit submissions to a server.
Candidate data roles
Candidate data belongs to the hiring organization. The organization generally determines the purposes and means of recruiting activity and should document its role, lawful basis, processors, retention period, and security measures before using a production integration.
GDPR deletion requests
Where GDPR applies, the hiring organization must provide an appropriate process for data-subject requests, including deletion requests when the legal conditions are met. The static project has no automatic request endpoint. A production deployment should publish a privacy contact and verify and process requests within applicable legal time limits.
Static-site storage
The demo basket uses browser localStorage to remember selected plans. The consent banner stores a local preference. No server database is included. If the site is connected to analytics, forms, payments, or other services, this policy must be updated to describe those providers and data flows.
Security and retention
Production users should apply least-privilege access, strong authentication, appropriate encryption, retention schedules, and deletion workflows. Candidate records should not be kept indefinitely merely because storage is inexpensive.
Individual rights
Depending on applicable law, individuals may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information. Requests should be sent to the hiring organization responsible for the data. Company contact fields in this demo are intentionally blank until supplied.
Policy administration
This policy is a product template and should be reviewed against the actual production architecture before launch. The site owner should document every service that receives personal information, identify the relevant retention period, and provide a working privacy contact. Privacy notices should be easy to find from candidate-facing pages. Where local law provides stronger rights than this summary, the applicable law and the organization's detailed notice should control.
The organization should also review vendor contracts, cross-border transfers, and incident-response procedures before connecting real candidate records. This static package intentionally leaves those production decisions to the site owner.