Job Applicant Privacy Notice
Updated: March 31, 2022
Note: This Privacy Notice applies to the processing of Personal Information of job applicants of Klaviyo, Inc. and its affiliates and subsidiaries
A. GENERAL PROVISIONS
1. GENERAL INFORMATION – OUR APPROACH TO PRIVACY
1.2 Please ensure that you have read and understood this Job Applicant Notice. If you have any questions about it, please contact hr@klaviyo.com.
1.3 Note that this Job Applicant Notice only applies for as long as you are not engaged by Klaviyo. Once we establish a work-relationship, you will receive a separate Employee Privacy Notice. Information we receive during an application process might also fall within the scope of the Employee Privacy Notice.
2. REGION-SPECIFIC DISCLOSURES
2.1 We may choose or be required by law to provide different or additional disclosures relating to the processing of Personal Information about residents of certain countries, regions or states. Please refer below for disclosures that may be applicable to you:
(a) If you are based in the European Economic Area (“EEA”), the United Kingdom (the “UK”) or Switzerland, please refer to section B, Additional Europe-Specific Privacy Disclosures, for more information.
(b) If you are based in Australia, please refer to section C, Additional Australia-Specific Privacy Disclosures, for more information.
3. DATA CONTROLLER
3.1 Klaviyo is the data controller of your Personal Information, and references to “Klaviyo”, “we” or “us” in this Job Applicant Notice are reference to the Klaviyo entity to which you submit your application. As the controller of your Personal Information, Klaviyo is responsible for determining the purposes and means of data processing as described in this Job Applicant Notice. The table in Annex 1 sets out the Klaviyo entities to which this Job Applicant Notice applies.
4. PERSONAL INFORMATION WE COLLECT ABOUT YOU AND HOW WE USE IT
4.1 The table in Annex 2 sets out in detail the categories of Personal Information we may collect about you when you apply for a role at Klaviyo and how we use that information.
Personal Information we collect
4.2 We collect Personal Information that you provide to us when you submit your application to us or communicate with us in respect of your application. This Personal Information may include, for example, your name, address, phone number, emergency contacts, education and qualification details and previous employment history.
4.3 The types of Personal Information we collect will vary depending on the nature of the position and role you are applying for.
4.4 When we ask you to provide such information, we will inform you whether the information requested is optional/voluntary to our consideration of your application. If you decline to provide information which is not optional/voluntary, you may limit our options in response to your application.
4.5 We may also create and maintain internal records with Personal Information about you, such as interview notes and evaluations. We may also collect personal information about you from other parties, such as recruiters and referees.
4.6 If you visit our premises, we may collect health and safety screening information, such as symptoms and vaccination information. We collect this information to protect the health and safety of our personnel and other visitors to our premises, and to comply with our legal and regulatory obligations, including any reporting obligations we may have under applicable law.
Sensitive Information
4.7 We may process Personal Information about You that is sensitive in nature and is subject to special protection under applicable law (“Sensitive Information”). This information may include certain equal opportunities information. We may anonymize and aggregate this information and store it in such form that does not identify you. Annex 2 also sets out which Sensitive Information we collect. In many cases, we may request your consent before processing such Sensitive Information (please see Section 7 for further information on consent).
How we use it
4.8 We may use the Personal Information we collect about you to manage our relationship with you, such as opening and maintaining your applicant record, communicating with you, conducting identity checks, assessing your suitability or qualification for a role and improving our application process.
4.9 We may also use the information we collect to analyze our hiring habits to improve it and ensure diversity and also in other situations where such use is legally required.
Pre-employment vetting
4.10 If we decide to offer you employment or engage you as a consultant, we may also collect the results of any pre-employment screening checks against public or government databases before we make a formal offer to you.
4. 11 Depending on the nature of your role, such pre-employment screening information may include:
(a) Employment history and professional qualification verification. We may contact your professional and academic referees to confirm the employment, professional and academic information that you have provided to us. You should ensure that you have any referees’ consent to disclose information about you to us when you submit your application.
(b) Directorship searches, such as current and former directorships and any disqualifications from acting as a director;
(c) Adverse media searches, conducted using adverse key words relating to crime, terror, fraud or other illicit activities;
(d) Basic criminal records checks.
4.12 We use the above information to assess your suitability and eligibility for the role for which you have applied.
4.13 We will inform you if we obtain any information through pre-employment screening that could affect our decision to offer you employment or appointment as a consultant. We will give you the opportunity to respond to the information obtained and will take your response into account when deciding whether to proceed with your appointment.
5. HOW LONG WE KEEP YOUR PERSONAL INFORMATION
5.1 We will store your Personal Information for no longer than necessary for the purposes set out in Annex 2 and in accordance with our legal obligations and legitimate business interests.
5.2 If you become an employee, consultant or contractor of Klaviyo, or are engaged as temporary or agency staff by Klaviyo, the Personal Information we collect during the application process may be transferred to your personnel file and stored in accordance with our Employee Privacy Notice (we will give you a copy of this notice at the start of your employment or other engagement with Klaviyo).
5.3 Even if you are not hired or engaged as a result of your initial application, and with your consent as may be required by applicable law, we may keep your Personal Information for purposes of considering you for employment with other Klaviyo companies or for other positions with Klaviyo. Otherwise, if you do not wish to be considered for other roles at Klaviyo, we will keep your Personal Information subject to and in accordance with our records retention policy.
5.4 In all cases, we will only use data in a manner consistent with applicable law.
6. RECIPIENTS OF PERSONAL INFORMATION
6.1 We may share your Personal Information with the following (as required in accordance with the uses set out in the Annex 2):
(a) Other Klaviyo group companies: If You apply for a position with a Klaviyo subsidiary or affiliate, we may share your Personal Information with our parent company, Klaviyo, Inc. (Klaviyo U.S.) or another Klaviyo subsidiary or affiliate for:
• group-level compliance and associated risk management, including, for example, providing legal advice and in connection with potential or actual litigation or regulatory action;
• the decision to hire, and
• the provision of health and safety screenings.
(b) Service providers and advisors: we may share your Personal Information with third party service providers that provide services to us or on our behalf, which may include without limitation providing mailing, email, recruitment and pre-employment vetting services.
(c) Law enforcement, regulators, government bodies and other third parties for legal reasons: we may share your Personal Information with third parties as required by law or if we reasonably believe that such action is necessary to (i) comply with the law and the reasonable requests of law enforcement; (ii) detect investigate and respond to potential civil or criminal violations, such as breaches of agreements or laws, respectively; and/or (iii) otherwise exercise or protect the rights, property, or personal safety of Klaviyo, our team members or others.
7. CONSENT
7.1 We are not required to obtain your consent for most of the processing activities that we undertake in respect of your Personal Information:
7. 2 We may, however, need your consent for some uses of certain Personal Information. For instance, in certain circumstances, we may need your consent to use certain “sensitive” information, such as information about your health or ethnicity, in particular ways.
7.3 If we need your explicit consent, we will notify you of the Personal Information we intend to use and how we intend to use it before or at the time we ask for such consent.
7.4 You will never be obliged to consent. Where you have consented to our collection, disclosure or other use of your Personal Information, you may withdraw your consent at any time. If you wish to withdraw any consent that you have given us, please contact us at hr@klaviyo.com.
8. STORING AND TRANSFERRING YOUR PERSONAL INFORMATION
8.1 Security. We implement appropriate technical and organizational measures designed to protect your Personal Information against accidental or unlawful destruction, loss, change or damage. All Personal Information we collect will be stored securely.
8.2 International transfers of your Personal Information. Klaviyo is committed to protecting the privacy and confidentiality of your Personal Information when it is accessed by or transmitted to other Klaviyo entities or any other third party. However, you should be aware that not all of the countries to which Personal Information will be transferred provide the same level of data protection as the country where you are located.
9. YOUR RIGHTS IN RESPECT OF YOUR PERSONAL INFORMATION
9.1 In accordance with applicable privacy law, you may have the following rights in respect of your Personal Information that we hold:
(a) Right of access. You have the right to obtain certain information regarding the Personal Information we collect and process.
(b) Right to rectification. You have the right to obtain rectification of any inaccurate or incomplete Personal Information we hold about You without undue delay.
(c) Right to erasure. You have the right, in some circumstances, to require us to erase your Personal Information if the continued processing of that Personal Information is not justified.
(d) Right to restriction. You have the right, in some circumstances, to require us to limit the purposes for which we process your Personal Information if the continued processing of the Personal Information in this way is not justified.
(e) Right to object. You have the right, in some circumstances, to object to the processing of your Personal Information.
9.2 If You wish to exercise one of these rights, please contact us using the details below.
10. CHANGES TO THIS NOTICE
WE MAY UPDATE THIS JOB APPLICANT NOTICE FROM TIME TO TIME AND SO YOU SHOULD REVIEW THIS PAGE PERIODICALLY. IF AND WHEN WE MAKE MATERIAL CHANGES THIS JOB APPLICANT NOTICE, WE WILL UPDATE THE “LAST MODIFIED” DATE DISPLAYED AT THE END OF THE DOCUMENT. CHANGES TO THIS JOB APPLICANT NOTICE ARE EFFECTIVE WHEN THEY ARE PUBLISHED ON THIS PAGE.
11. CONTACTING US
11.1 Please contact hr@klaviyo.com if you have any questions, comments, concerns and requests regarding this Job Applicant Notice.
B. ADDITIONAL EUROPE-SPECIFIC PRIVACY DISCLOSURES
12. The following information may apply to you if you are located in the EEA, the UK or Switzerland.
12. 1 Additional Information on Controllership. If you apply for a position with a Klaviyo subsidiary or affiliate located in the EU, UK or Switzerland, We, together with Klaviyo, Inc., act as a joint controller (i.e., we jointly decide on the “why” (purpose) and “how” (means) of the processing) with respect to the Personal Information that is collected and shared with Klaviyo, Inc. as set out above under Section 6.1(a)(i) of this Job Applicant Notice. Note, however, that Klaviyo, Inc., will act as a data processor for us in connection with providing IT infrastructure.
12.2 Legal Basis. The table in Annex 2