NextIn · Legal

Privacy Policy

Candidate dashboard · Last updated 19 June 2026 · Version 2026-06-01

1. Scope

This policy explains how NextIn Ltd ("NextIn", "we", "us") handles your personal data when you use the NextIn candidate dashboard — creating an account, uploading a CV, browsing and applying to jobs, and managing your settings. It does not cover our public marketing website, which has its own notice, or the websites of employers and third parties you reach through NextIn.

2. Acceptance and changes

This policy tells you how we handle your data. Using the dashboard does not by itself mean you consent to optional analytics or marketing emails — those rely on the separate choices you make on the consent screen and in Settings, which we record and you can change at any time. We may update this policy; for material changes we will ask you to review and re-confirm the next time you log in. The current version is shown above.

3. Who is responsible for your data

NextIn Ltd is the data controller for the dashboard (company number 12149869, registered in England and Wales). We have not appointed a statutory Data Protection Officer; for any data question, contact [email protected].

When you apply to an employer, or a recruiter contacts you through NextIn and receives your details, that employer or recruiter becomes an independent data controller for that information and is responsible for their own data-protection compliance. We can't control how they use your data, and their own privacy notice then applies.

4. The data we collect and how

We collect and compile your profile from what you provide at sign-up, your onboarding conversation, your LinkedIn profile, and the CV you give us — and you'll be able to review and edit your profile. This includes: name, email address, phone number, location, professional title, LinkedIn profile, sector/industry experience, years of experience, the minimum salary you'd want to be approached about (not your current pay — the level you'd consider before having a conversation about a role), notice period, work preferences (such as remote, hybrid, or open to relocation), a short professional bio, your work history, and skills and tags. As NextIn grows we may add further professional profile fields, and we keep this notice up to date. We only ever collect professional, work-related information — we never ask for sensitive personal data (special-category data under UK GDPR).

Your CV and any documents you upload. Your CV is written by you. We only need professional information, and we ask that you don't include sensitive personal details you'd rather not share. If your CV does contain information we didn't ask for, you provide it voluntarily — we use it only to pass to employers as part of your application, for no other purpose, and you can ask us to remove it.

We collect automatically for security and operation: one-time login codes and session data needed to keep you signed in, and basic technical data such as browser/device type.

Optional analytics (only with your consent): pseudonymous engagement data — such as session length and which sections of the dashboard you use — stored against a non-reversible code, not your email.

Anonymous advertising metrics: aggregate counts of ad views and clicks, not linked to your identity.

From third parties: some job listings shown to you are aggregated from external job-advertising sources (such as JobAdX/Appcast). These are job adverts, not your personal data.

5. Mandatory vs optional

The profile fields and CV needed to provide the service are required — without them we cannot match you to roles or forward applications. Analytics and marketing emails are optional and never a condition of using NextIn.

6. What we use your data for, and our lawful basis

7. Your profile, recruiters, and how you apply

Your searchable profile. A core part of NextIn is helping you get found. We build a profile from the information above and make it searchable to verified employers and recruiters who subscribe to NextIn, so they can consider you for roles.

How recruiters reach you. Subscribing recruiters can search profiles (for example by location, work preference, sector, or salary range) and view your profile. Your direct contact details (email and phone) and your full CV are revealed to a recruiter only when they choose to contact you about a role — they are not browsable in bulk. We also hide your profile from your own current employer (based on your email domain and the company you list), so your search stays discreet. Once a recruiter or employer receives your details, they are responsible for their own data protection — we can't control how they use your information.

Applying to roles. There are three ways to apply:

• Apply directly on NextIn. We forward your profile and CV to the employer so they can consider you. The employer becomes a controller of that data. (Contract.)
• Apply on the company's website. You click through and apply on the company's own site; your application goes from you to them. We pass only referral information so the employer knows it came from NextIn — we do not send your CV. (Providing the listing is part of our service under Contract; passing referral information is our legitimate interest.)
• Advertised jobs (third-party sources). These listings are aggregated into our feed; you apply via one of the methods above. When you click an advertised listing, limited non-identifying click data may be shared with the relevant network for measurement and billing. (Legitimate interests.)

8. No solely-automated decisions

NextIn does not make decisions producing legal or similarly significant effects about you by purely automated means. You choose which roles to apply to, and employers make their own hiring decisions. We do not currently use AI to match or rank candidates. If we introduce AI-based matching or ranking in the future, we'll update this policy to explain how it works and your rights.

9. Advertising vs analytics

We show sponsored content and ads to fund the platform under our legitimate interests; this is not conditional on consent, and the metrics we keep are anonymous. We require your consent for any non-essential tracking we use ourselves — analytics and our own ad-measurement — which you can turn on or off anytime in Settings.

Third-party ad tracking. When you click or view sponsored content or ads, the advertiser or job-advertising network may set their own cookies and tracking on your device, operating independently of NextIn. We don't control that, their own privacy notices apply, and turning off our tracking does not stop theirs.

We send job-alert or marketing emails only if you've opted in, and you can turn them off at any time in Settings. Every message also tells you how.

10. Who we share data with

• Subscribing employers and recruiters — your searchable profile so they can consider you, and your contact details and CV when they contact you about a role.
• Employers you apply to — your profile and CV for direct applications.
• Job-advertising networks (such as JobAdX/Appcast) — non-identifying click data for advertised listings.
• Advertisers — only aggregate, anonymous performance figures; never your identity.
• Service providers who help us run the service (hosting and infrastructure, security, payments, email and website hosting), acting only on our instructions.
• Legal — where required by law, regulation, or court order.

We do not sell your personal data to data brokers or for third parties' own marketing. Recruiters pay to use NextIn's recruitment tools to find and contact candidates — that access is the service, not a sale of your data.

11. International transfers

Some providers may process data outside the UK. Where they do, we rely on an adequacy decision or appropriate safeguards such as the UK International Data Transfer Agreement / Standard Contractual Clauses. You can ask us for details.

12. How long we keep it

• Profile, CV and account data: while your account is active and for up to 12 months after closure, then deleted or anonymised.
• Application records: up to 24 months from the application.
• Consent records: up to 6 years (the England & Wales limitation period), so we can evidence consent and defend any claim.
• Login/session/security logs: short rolling periods, pruned automatically.
• Analytics logs: rotated or anonymised after around 14 months.

13. Your rights

You have the right to: be informed; access your data; rectification; erasure; restrict processing; data portability; object to processing based on legitimate interests (including ads) or to direct marketing; and withdraw consent (e.g. analytics) at any time without affecting prior lawful processing. You can download your data or delete your account from your logged-in Settings, or email [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk — though we'd appreciate the chance to help first.

14. Security

We protect your data with encryption in transit, secure one-time-code sign-in, session controls, and access limited to the staff who need it to run the service. No system is perfectly secure, but we take appropriate technical and organisational measures and review them. If we ever detect a personal data breach, we'll take steps to contain it and, where the law requires, notify you and the Information Commissioner's Office.

15. Cookies and similar technologies

We use only what is strictly necessary to keep you logged in and secure (no consent needed). Optional analytics technologies are used only if you consent. See our Cookie note.

16. Contact

NextIn Ltd, company number 12149869, registered in England and Wales. Contact: [email protected].

NextIn Ltd · Registered in England and Wales, company number 12149869 · [email protected]