Candidate Privacy Notice

Last updated: 27 September 2026

Who we are

Novalify OÜ (Registry Code 17594328), Sepapaja tn 6, 15551 Tallinn, Estonia, is responsible for the personal data you submit through Novalify Careers.

Identity and contact details: name, email, phone, country and city.
Professional details: current title, experience, LinkedIn and portfolio links, expected salary, notice period and joining date.
Your CV, portfolio and any cover letter or screening answers.
Records created during recruitment: stage changes, interview schedules, evaluation notes and emails sent to you.
Technical data used to protect the service, such as IP address, to prevent spam and abuse.

To assess your suitability for the role you applied for, or for future roles if you join the Talent Pool.
To contact you about your application and arrange interviews.
To meet legal obligations and to defend legal claims.
Legal bases: steps taken at your request before entering a contract, our legitimate interest in recruiting, and your consent where requested.

Only authorised Novalify recruitment staff: HR administrators and recruiters; hiring managers for roles they are responsible for; and interviewers for interviews assigned to them, with limited information.
Trusted service providers who host our systems and send emails, under data-processing terms. We do not sell your data.

CVs and portfolios are stored in private storage under randomised file names. They are never publicly listed or linked.
Staff access files through short-lived, signed links. We will never ask you to send passwords or sensitive identity documents by email.

Applications are kept for up to 12 months after the recruitment process closes, then deleted or anonymised, unless you are hired or a longer period is required by law.
Talent Pool profiles are kept for up to 24 months unless you ask us to remove them sooner.

You can ask to access, correct, delete or restrict your data, object to processing, receive a copy, or withdraw consent at any time.
Contact novalify@gmail.com with your reference ID. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).