Puck Privacy Notice


Last Updated: August 19, 2026

Past versions of this Privacy Notice are available here.

This Privacy Notice explains how Career Puck Inc (“Puck”) collects, uses, discloses, and otherwise processes personal data in connection with any specific product, service, or application that references or links to this Privacy Notice.

We may also choose or be required by law to provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions, or states. Please refer to the Region-Specific Disclosures section below for additional disclosures that may be applicable to you.

This Privacy Notice does not address our privacy practices relating to Puck job applicants, employees and other employment-related individuals, nor data that is not subject to applicable data protection laws (such as deidentified or publicly available information in certain jurisdictions). This Privacy Notice is also not a contract and does not create any legal rights or obligations not otherwise provided by law.

Our Role in Processing Personal Data

Data protection laws sometimes differentiate between “controllers” and “processors” of personal data. A “controller” determines the purposes and means (the why and how) of processing personal data. A “processor,” which is sometimes referred to as a “service provider,” processes personal data on behalf of a controller subject to the controller’s instructions.

If you applied to a job with one of our customers or were invited by a customer to complete an interview, that customer is the controller of your data and we process it on their instructions, then their privacy notice governs. If instead we obtained your professional information from other sources, such as public records, professional licensing authorities, or other third parties with whom you shared your information, and made it discoverable to employers through our platform, we are the controller of that information as described in this notice. These roles apply separately to each set of information: if we hold both types of information about you, personal data we process on a customer's behalf remains governed by that customer's instructions and privacy notice, and only information we obtained independently from other sources is made available through our sourcing product.

This Privacy Notice describes our privacy practices where we are acting as the controller of personal data. However, this Privacy Notice does not cover or address how our customers may process personal data when they use our services, or how we may process personal data on their behalf in accordance with their instructions where we are acting as their processor. As a result, we recommend referring to the privacy notice of the customer with which you have a relationship for information on how they engage processors, like us, to process personal data on their behalf. In addition, we are generally not permitted to respond to individual requests relating to personal data we process on behalf of our customers, so we recommend directing any requests to the relevant customer.

Our Collection and Use of Personal Data

The categories of personal data we collect depend on how you interact with us and our services. For example, you may provide us your personal data directly when you register for an account or otherwise contact us or interact with us.

We also collect personal data automatically when you interact with our websites and other services and may also collect personal data from other sources and third parties.

Personal Data Provided by Individuals

We collect the following categories of personal data individuals provide us:

  • Contact Information,including first and last name, phone number, email address, mailing address, and communication preferences. We use this information primarily to fulfill your request or transaction, to communicate with you directly, and to send you marketing communications in accordance with your preferences.
  • Professional Information, including job title, company name, professional background, and the nature of your relationship with us. We use this information primarily to fulfill your request or transaction, to determine how we communicate with you, to administer your account, to provide you with our services, and for customer support purposes.
  • Account Information, including first and last name, email address, phone number, account credentials or one-time passcodes, the details you provide when you register for or set up an account with us, such as your registration date and the account type or plan you select, and the products or services you are interested in, purchased, or have otherwise used. We use this information primarily to administer your account, provide you with our products and services, communicate with you regarding your account and your use of our products and services, and for customer support purposes.
  • Customer Content, including any files, documents, audio, videos, images, data, or communications you choose to input, upload, or transmit to our products and services. We use this content primarily to provide you with our products and services, to facilitate your requests, and to improve our products and services.
  • Voice and Interview Information, including audio recordings and transcripts of the responses you provide when completing an AI-facilitated interview or assessment through our services. We obtain your consent before collecting this information. We use this information to provide interview and assessment features to our customers and to conduct fraud detection for certain technical roles, as described further below, and we delete this information in accordance with our Retention of Personal Data practices described below, including our practice of deleting voice recordings within approximately two years of collection. We do not sell this information or use it for targeted advertising purposes.
  • Fraud Detection Information, including your responses to a series of verification questions, together with our analysis of the voice recordings and interview responses described above. We use this information to help us and our customers detect and prevent misrepresented or fraudulent candidate identities in connection with certain technical roles.

Personal Data Automatically Collected

We, and our third-party partners, automatically collect information you provide to us and information about how you access and use our products and services when you engage with us. We typically collect this information through the use of a variety of our own and our third-party partners’ automatic data collection technologies, including (i) cookies or small data files that are stored on an individual’s computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies and logging technologies. Information we collect automatically about you may be combined with other personal data we collect directly from you or receive from other sources.

We, and our third-party partners, use automatic data collection technologies to automatically collect the following data when you use our services or otherwise engage with us:

  • Information About Your Device and Network, including the device type, manufacturer, and model, operating system, IP address, browser type, Internet service provider, and unique identifiers associated with you, your device, or your network (including, for example, a persistent device identifier or advertising ID). We employ third-party technologies designed to allow us to recognize when two or more devices are likely being used by the same individual and may leverage these technologies (where permitted by law) to link information collected from different devices.
  • Information About the Way Individuals Use Our Services and Interact With Us, including the site from which you came, the site to which you are going when you leave our services, how frequently you access our services, whether you open emails or click the links contained in emails, whether you access our services from multiple devices, and other browsing behavior and actions you take on our services (such as the pages you visit, the content you view, videos you watch, the communications you have through our services, and the content, links and ads you interact with). For our marketing site, we employ third-party technologies designed to allow us to collect detailed information about browsing behavior and actions that you take on our services, which may record your mouse movements, scrolling, clicks, and keystroke activity on our services and other browsing, search or purchasing behavior. These third-party technologies may also record information you enter when you interact with our products or services, or engage in chat features or other communication platforms we provide.
  • Information About Your Location, including general geographic location that we or our third-party providers may derive from your IP address.

All of the information collected automatically through these tools allows us to improve your experience. For example, we may use this information to enhance and personalize your user experience, to monitor and improve our products and services, to offer communications features such as live and automated chat, and to improve the effectiveness of our products, services, offers, advertising, communications and customer service. We may also use this information to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the site; (b) provide custom, personalized content and information, including targeted content and advertising; (c) identify you across multiple devices; (d) provide and monitor the effectiveness of our services; (e) monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on our website; (f) diagnose or fix technology problems; and (g) otherwise to plan for and enhance our products and services.

For information about the choices you may have in relation to our use of automatic data collection technologies, please refer to the Your Privacy Choices section below. For additional details about the cookies we use on our websites and to adjust your preferences with regard to those cookies, please visit our “Cookie Preferences” manager linked in the footer of our websites.

Personal Data from Other Sources and Third Parties

We may receive the same categories of personal data as described above from the following sources and other parties:

  • Single Sign-On: We may provide you the ability to log in to our services through certain third-party accounts you maintain. When you use these single sign-on protocols to access our services, we do not receive your login credentials for the relevant third-party service. Instead, we receive tokens from the single sign-on protocol to help identify you in our system (such as by your username) and confirm you successfully authenticated through the single sign-on protocol. This information allows us to more easily provide you access to our products and services.
  • Social Media: When you interact with our services through other social media networks, such as when you follow us or share our content on other social networks, we may receive some information that you permit the social network to share with third parties. The data we receive is dependent upon your privacy settings with the social network, and may include profile information, profile picture, username, and any other information you permit the social network to share with third parties. You should always review and, if necessary, adjust your privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services. We use this information primarily to operate, maintain, and provide to you the features and functionality of our products and services, as well as to communicate directly with you, such as to send you messages about features that may be of interest to you.
  • Other Sources: We may also collect personal data about you from other sources, including publicly available sources, or through transactions such as mergers and acquisitions.
  • Inferences: We may generate inferences or predictions about you and your interests and preferences (such as your interest in particular jobs or opportunities) based on the other personal data we collect and the interactions we have with you.

Additional Uses of Personal Data

In addition to the primary purposes for using personal data described above, we may also use personal data we collect to:

  • Fulfill or meet the reason the information was provided, such as to fulfill our contractual obligations, to facilitate payment for our products and services, or to deliver the services requested;
  • Communicate with you, including via email, text message, chat, social media and/or telephone calls;
  • Create and maintain accounts for our users;
  • Infer additional information about you from your use of our products and services, such as your interests;
  • Test, enhance, update, and monitor the products and services, or diagnose or fix technology problems;
  • Help maintain and enhance the safety, security, and integrity of our property, products, services, technology, assets, and business;
  • Defend, protect, or enforce our rights or applicable contracts and agreements (including our Terms of Service), as well as to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties;
  • Detect, prevent, investigate, or provide notice of security incidents or other malicious, deceptive, fraudulent, or illegal activity and protect the rights and property of Puck and others;
  • Facilitate business transactions and reorganizations impacting the structure of our business;
  • Comply with contractual and legal obligations and requirements;
  • Fulfill any other purpose for which you provide your personal data, or for which you have otherwise consented.

Our Disclosure of Personal Data

We disclose or otherwise make available personal data in the following ways:

  • To Other Customers and the General Public: We make available personal data designed for sharing through our services with certain or all other Puck customers, or the general public, based on the applicable privacy settings and intended recipients. Keep in mind that the customers who view customer-generated content can always reshare or redistribute the content both on and off our services or save or copy the content outside of our services. In addition, by publicly posting content on our services, you are directing us to disclose that information as broadly as possible and directing those accessing the content to do the same.
  • To Business Customers Seeking Candidates: For our sourcing product, we provide our business customers with access to search our platform and identify individuals whose professional profiles match the categories or roles the customer is seeking to fill (for example, enabling a customer seeking a dental hygienist to search for and contact individuals in that professional category). We provide this access and contact functionality to our business customers for consideration, which may be considered a “sale” of personal data under certain state privacy laws. We do not otherwise provide our business customers with bulk copies of your personal data outside of this platform access. And we never enable a customers’ candidate data to be accessed by another customer, without explicit consent, outside of anonymized fraud signals.
  • To Ad Networks and Advertising Partners: For our marketing site where customers come to sign up to Puck, we work with third-party ad networks and advertising partners to deliver advertising and personalized content on our services, on other websites and services, and across other devices. These parties may collect information automatically from your browser or device when you visit our websites and other services through the use of cookies and related technologies. This information is used to provide and inform targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research.
  • To Service Providers: We engage other third parties to perform certain services on our behalf in connection with the uses of personal data described in the sections above. Depending on the applicable services, these service providers may process personal data on our behalf or have access to personal data while performing services on our behalf.
  • In Connection with a Business Transaction or Reorganization:We may take part in or be involved with a business transaction or reorganization, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose, transfer, or assign personal data to a third party during negotiation of, in connection with, or as an asset in such a business transaction or reorganization. Also, in the unlikely event of our bankruptcy, receivership, or insolvency, your personal data may be disclosed, transferred, or assigned to third parties in connection with the proceedings or disposition of our assets.
  • To Facilitate Legal Obligations and Rights: We may disclose personal data to third parties, such as legal advisors and law enforcement:
    • in connection with the establishment, exercise, or defense of legal claims;
    • to comply with laws or to respond to lawful requests and legal process;
    • to protect our rights and property and the rights and property of our agents, customers, and others, including to enforce our agreements, policies, and terms of service;
    • to detect, suppress, or prevent fraud;
    • to reduce credit risk and collect debts owed to us;
    • to protect the health and safety of us, our customers, or any person; or
    • as otherwise required by applicable law.
  • With Your Consent or Direction: We may disclose your personal data to certain other third parties or publicly with your consent or direction. For example, with your permission, we may post your testimonial on our websites.

Your Privacy Choices

Communication Preferences

  • Email Communication Preferences: You can stop receiving promotional email communications from us by clicking on the “unsubscribe” link provided in any of our email communications. Please note you cannot opt-out of service-related email communications (such as, account verification, transaction confirmation, or service update emails).

Automatic Data Collection Preferences

Certain of our services may provide you the ability to adjust your preferences regarding our use of automatic data collection technologies. For example, there is a “Cookie Preferences” manager linked in the footer of our websites that allows you to adjust your preferences regarding certain automatic data collection technologies on the specific website you are visiting for the specific device and browser you are using at that time (which means you will need to change your preferences on each device and browser you use to interact with the specific website you are visiting).

You may be able to utilize third-party tools and features to restrict our use of automatic data collection technologies. For example, (i) most browsers allow you to change browser settings to limit automatic data collection technologies on websites, (ii) most email providers allow you to prevent the automatic downloading of images in emails that may contain automatic data collection technologies, and (iii) many devices allow you to change your device settings to limit automatic data collection technologies for device applications. Please note that blocking automatic data collection technologies through third-party tools and features may negatively impact your experience using our services, as some features and offerings may not work properly or at all. Depending on the third-party tool or feature you use, you may not be able to block all automatic data collection technologies or you may need to update your preferences on multiple devices or browsers. We do not have any control over these third-party tools and features and are not responsible if they do not function as intended.

Targeted Advertising Preferences

For our marketing site only, we engage third parties to help us facilitate targeted advertising designed to show prospective employer customers personalized ads based on predictions of your preferences and interests developed using personal data we maintain and personal data our third-party partners obtain from your activity over time and across nonaffiliated websites and other services. The data we and our third-party partners use for purposes of facilitating targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research, are primarily collected through the use of a variety of automatic data collection technologies, including cookies, web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies and logging technologies. We may share a common account identifier (such as a hashed email address or user ID) with our third-party advertising partners to help link the personal data we and our third-party partners collect to the same person, or otherwise target advertising to an individual on a third-party website or platform.

In addition to taking the steps set forth in the Automatic Data Collection Preferences section above, you may be able to further exercise control over the advertisements that you see by leveraging one or more targeted advertising opt-out programs. For example:

  • Device-Specific Opt-Out Programs: Certain devices provide individuals the option to turn off targeted advertising for the entire device (such as Apple devices through their App Tracking Transparency framework or Android devices through their opt out of ads personalization feature). Please refer to your device manufacturer’s user guides for additional information about implementing any available device-specific targeted advertising opt-outs.
  • Digital Advertising Alliance: The Digital Advertising Alliance allows individuals to opt out of receiving online interest-based targeted advertisements from companies that participate in their program. Please follow the instructions at https://optout.aboutads.info/?c=2&lang=EN for browser-based advertising and https://www.youradchoices.com/appchoices for app-based advertising to opt out of targeted advertising carried out by our third-party partners and other third parties that participate in the Digital Advertising Alliance’s self-regulatory program.
  • Network Advertising Initiative: The Network Advertising Initiative also provides individuals instructions for further controlling how information is used for online advertising. Please follow the instructions at https://thenai.org/how-to-opt-out/ to exercise these controls.
  • Platform-Specific Opt-Out Programs: Certain third-party platforms provide individuals the option to turn off targeted advertising for the entire platform (such as certain social media platforms). Please refer to your platform provider’s user guides for additional information about implementing any available platform-specific targeted advertising opt-outs.

Please note that when you opt out of receiving interest-based advertisements through one of these programs, this does not mean you will no longer see advertisements from us or on our services. Instead, it means that the online ads you do see from relevant program participants should not be based on your interests. We are not responsible for the effectiveness of, or compliance with, any third parties’ opt-out options or programs or the accuracy of their statements regarding their programs. In addition, program participants may still use automatic data collection technologies to collect information about your use of our services, including for analytics and fraud prevention as well as any other purpose permitted under the applicable advertising industry program.

Partner-Specific Preferences

Certain of our third-party providers and partners offer additional ways that you may exercise control over your personal data, or automatically impose limitations on the way we can use personal data in connection with the services they provide:

  • Device-Specific / Platform-Specific Preferences: The device and/or platform you use to interact with us (such as your mobile device or social media provider), may provide you additional choices with regard to the data you choose to share with us. For example, many mobile devices allow you to change your device permissions to prevent our products and services from accessing certain types of information from your device (such as your contact lists or precise geolocation data), and many social media platforms allow you to change your platform permissions to prevent integrated products and services from accessing certain types of information connected with your profile. Please refer to your device or platform provider’s user guides for additional information about implementing any available platform-specific targeted advertising opt-outs.
  • Google Analytics: Google Analytics allows us to better understand how our customers interact with our services. For information on how Google Analytics collects and processes data, as well as how you can control information sent to Google, review Google's website here: www.google.com/policies/privacy/partners/. You can learn about Google Analytics’ currently available opt-outs, including the Google Analytics Browser Add-On here: https://tools.google.com/dlpage/gaoptout/.We may also utilize certain forms of display advertising and other advanced features through Google Analytics. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to our services. You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://myadcenter.google.com/?ref=help-center.

Children’s Personal Data

Our services are not directed to, and we do not intend to, or knowingly, collect or solicit personal data from children under the age of 13. If an individual is under the age of 13, they should not use our services or otherwise provide us with any personal data either directly or by other means. If a child under the age of 13 has provided personal data to us, we encourage the child’s parent or guardian to contact us to request that we remove the personal data from our systems. If we learn that any personal data we collect has been provided by a child under the age of 13, we will promptly delete that personal data.

Retention of Personal Data

We will usually retain the personal data we collect about you for no longer than reasonably necessary to fulfil the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. For example, we retain voice recordings and other information collected in connection with AI-facilitated interviews and assessments for approximately two years following collection. However, if necessary, we may retain personal data for longer periods of time as required under applicable law or as needed to resolve disputes or protect our legal rights.

To determine the appropriate duration of the retention of personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.

Once retention of the personal data is no longer reasonably necessary for the purposes outlined above, we will either delete or deidentify the personal data or, if that is not possible (for example, because personal data has been stored in backup archives), we will securely store the personal data and isolate it from further active processing until deletion or deidentification is possible.

Where we deidentify personal data, we maintain and use that data only in deidentified form, we will not attempt to reidentify it, and we contractually require any recipients of deidentified data to commit to the same.

Third-Party Websites and Services

Our websites and other services may include links to or redirect you to third-party websites, plug-ins, applications, or other services, including social media services where you may connect with us. Third-party websites and other services may also reference or link to our websites and services. This Privacy Notice does not apply to any personal data practices of these third-party websites, plug-ins, applications, or other services. To learn about these third parties’ personal data practices, please visit their respective privacy notices.

Region-Specific Disclosures

We may choose or be required by law to provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions, or states. Please refer below for disclosures that may be applicable to you:

  • European Economic Area, United Kingdom, or Switzerland: If you are located in the European Economic Area, the United Kingdom, or Switzerland, please see our Additional European Economic Area, United Kingdom, and Switzerland Privacy Disclosures below for additional information, including a description of the personal data rights made available to individuals located in those jurisdictions under applicable law.
  • United States: If you are a resident of the United States, please see our Additional United States Privacy Disclosures below for additional U.S.-specific privacy disclosures, including a description of the personal data rights made available to residents of certain states under applicable law.

Updates to This Privacy Notice

We may update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify individuals by email to their registered email address, by prominent posting on this website or our other platforms, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.

Contact Us

If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please contact us at: admin@careerpuck.com..

Additional United States Privacy Disclosures

These disclosures supplement the information contained in our Privacy Notice above by providing additional information about the privacy rights available to individual residents of certain states in the United States and our personal data processing practices relating to those individuals. For a detailed description of how we collect, use, disclose, and otherwise process personal data, please read our Privacy Notice above.

Nevada Residents

If you are a resident of the State of Nevada, you have the right to opt out of the sale of your personal data. You may submit a request to opt out of the sale of your personal data by contacting us at admin@careerpuck.com.

Additional United States Privacy Disclosures

These Additional United States Privacy Disclosures (for residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia) apply solely to and provide additional information about how we collect, use, disclose and otherwise process personal data, either online or offline, of individual residents of certain states in the United States as required under applicable law.

Personal Data Disclosures, Sales, and Targeted Advertising

We disclose all of the categories of personal data we collect to the categories of recipients set forth in the Our Disclosure of Personal Data section of our Privacy Notice above. Our disclosure of personal data to the following categories of third parties qualifies as the sale of personal data or the sharing or processing of personal data for the purpose of displaying advertisements that are selected based on personal data obtained or inferred over time from an individual's activities across businesses or distinctly-branded websites, applications, or other services (otherwise known as "targeted advertising" or "cross-context behavioral advertising") under certain privacy laws:

  • Business Customers Seeking Candidates: We provide business customers with access to search our platform and identify individuals whose professional profiles match the categories or roles the customer is seeking to fill, for consideration.
  • Ad Networks and Advertising Partners: For our marketing site, we share personal data collected through cookies and related technologies with third-party ad networks and advertising partners to provide and inform targeted advertising.

Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to limit or opt out of the sale or sharing of your personal data or the processing of your personal data for targeted advertising purposes (as described in the Your Additional U.S. Privacy Choices section below).

Please note we do not sell the personal data of individuals we know to be less than 18 years of age or share such information for targeted advertising purposes.

Sensitive Personal Data

The following personal data elements we collect may be classified as “sensitive” under certain privacy laws:

  • Biometric or biological data

We use sensitive personal data for the purposes set forth in the Our Collection and Use of Personal Data section of our Privacy Notice.

We do not sell sensitive personal data, and we do not process or otherwise share sensitive personal data for the purpose of targeted advertising. However, depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to limit, or withdraw your consent for, our processing of sensitive personal data (as described in the Your Additional U.S. Privacy Choices section below).

Automated Decision-Making and Profiling

Our services use artificial intelligence to assist our business customers in their hiring processes, including by conducting interviews and assessments, analyzing and summarizing candidate responses, and identifying potential indicators of misrepresented or fraudulent candidate identities. Our services are designed to inform and support human decision-making, not to replace it: our services do not reject, hire, or make any employment decision about any candidate, and all hiring and employment decisions are made solely by our business customers and their personnel. For these reasons, we do not believe our processing constitutes automated decision-making that produces legal or similarly significant effects concerning an individual, under the CCPA or similar state privacy laws.

Nonetheless, because laws governing the use of artificial intelligence in employment are evolving, and without conceding that any such law applies to our services, we voluntarily take the following steps: (i) we provide our business customers with documentation regarding our services' intended uses, capabilities, limitations, the categories of data used to develop them, and instructions for human oversight; and (ii) if you believe an outcome relating to your candidacy was affected by our services, you may contact us at admin@careerpuck.com and we will route your request to the relevant customer and, where we are able, support the customer's review of that outcome by qualified human personnel. To the extent any applicable law is determined to grant you rights in connection with automated decision-making or profiling by our services — such as rights to notice, to opt out, to human review of a decision, or to an explanation — we will honor those rights as required by that law.

Your Additional U.S. Privacy Choices

Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to exercise some or all of the following rights:

  • Right to Know: The right to confirm whether we are processing personal data about you and, for residents of California and Oregon only, to obtain certain personalized details about the personal data we have collected about you, including:
  • The categories of personal data collected;
  • The categories of sources of the personal data;
  • The purposes for which the personal data were collected;
  • The categories of personal data disclosed to third parties (if any), and the categories of recipients to whom this personal data were disclosed;
  • The categories of personal data shared for targeted advertising purposes (if any), and the categories of recipients to whom the personal data were disclosed for these purposes;
  • The categories of personal data sold (if any) and the categories of third parties to whom the personal data were sold; and
  • For Oregon residents only, a list of specific third parties to whom personal data have been disclosed.
  • Right to Access & Portability: The right to obtain access to the personal data we have collected about you and, where required by law, the right to obtain a copy of the personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.
  • Right to Correction: The right to correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of the processing of the personal data.
  • Right to Control Over Sensitive Personal Data: The right to limit or withdraw your consent to our collection and processing of certain sensitive personal data, including voice and biometric information.
  • Right to Opt-Out of Targeted Advertising: The right to direct us not to use or share your personal data for certain targeted advertising purposes.
  • Right to Opt-Out of Sales: The right to direct us not to sell your personal data to third parties, including the right to opt out of our provision of platform access to business customers described above.
  • Right to Deletion: The right to have us delete personal data we maintain about you.

Depending on your state of residency, you may also have the right not to receive retaliatory or discriminatory treatment for exercising the rights described above. However, exercising these rights may result in a different price, rate, or quality level of product or service where that difference is reasonably related to the impact the right has on our relationship or is otherwise permitted by law.

Submitting Privacy Rights Requests

You may submit a request specifying the right you wish to exercise by contacting us at admin@careerpuck.com.

To exercise your right to opt-out as it relates to the use of cookies and related technologies that involve the sale of personal data or the use of personal data for targeted advertising purposes, please click the “Cookie Settings” link in the footer of the website and adjust your preferences accordingly. If you are visiting our site with the Global Privacy Control enabled, any cookies that constitute sales or are used for targeted advertising should already be turned off automatically in our cookie preference manager. Please note this opt-out tool is website, device, and browser specific, so you will need to change your preferences on each device and browser you use to interact with the specific website you are visiting. You may also follow the other steps set forth in the Automatic Data Collection Preferences and Targeted Advertising Preferences sections of the Your Privacy Choices section of our Privacy Statement to further exercise control over automatic data collection technologies.

Before processing your request, we will need to verify your identity and confirm you are a resident of a state that offers the requested right. We may decline or limit your request if we are unable to verify your identity, locate your information in our systems, or confirm you are a resident of an eligible state.

Submitting Authorized Agent Requests

In certain circumstances, you are permitted to use an authorized agent to submit a request on your behalf where we can verify the agent’s authority to act for you. To verify this authority, we generally require evidence of a valid power of attorney or a signed letter authorizing the agent to act on your behalf. Depending on the evidence provided and your state of residency, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to verify your identity in connection with the request.

Appealing Privacy Rights Decisions

Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request by replying to the communication resolving your original request.

Additional California-Specific Disclosures

The following disclosures only apply to residents of the State of California.

California Categories of Personal Data

California law requires we provide disclosures to you about what personal data we collect by reference to the enumerated categories of personal data set forth within California law. To address this obligation, we have identified the relevant enumerated California personal data category for the personal data described in the Our Collection and Use of Personal Data section of our Privacy Notice below:

  • Identifiers, such as such as first and last name, email address, phone number, mailing address, account credentials or one-time passcodes, and online identifiers (such as a persistent device identifier or advertising ID).
  • Customer records, such as job title, company name, and account or registration information.
  • Protected classification characteristics
  • Commercial information, such as records of the products or services you have purchased, considered or used through our service
  • Biometric information, such as voice recordings and other information derived from your responses during an AI-facilitated interview or assessment
  • Internet / network information, such as device type, manufacturer, and model, operating system, IP address, browser type, or browsing and interaction activity on our services
  • Geolocation data, such as general geographic location derived from your IP address
  • Sensory information
  • Professional / employment information, such as job title and professional background
  • Education information
  • Sensitive personal data, such as voice recordings collected in connection with AI-facilitated interviews and assessments
  • Other Personal Data, such as customer content (including files, documents, audios, data or communications you input, upload or transmit)
  • Inferences, such as predictions or assumptions about your interests or preferences

California’s “Shine the Light” Law

California’s “Shine the Light” law (Civil Code Section §1798.83) provides California residents with an established business relationship with us certain rights regarding the disclosure of personal information to third parties for their direct marketing purposes. It is our policy not to disclose personal information to third parties for their own direct marketing purposes if you have exercised your right to opt out. To opt out, please follow the instructions for opting out of targeted advertising and personal data sales described above.

Additional European Economic Area, United Kingdom, and Switzerland Privacy Disclosures

We do not currently maintain offices or personnel in the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland. To the extent applicable data protection law nonetheless applies to our processing of your personal data because you access our services or otherwise interact with us from the EEA, UK, or Switzerland, these disclosures supplement the information contained in our Privacy Notice above.

Controller Details and Privacy Contacts

Where Career Puck Inc is the “controller” responsible for the processing of personal data described in this Privacy Notice, you may contact us at admin@careerpuck.com.. Given our limited presence in the EEA, UK, and Switzerland, we have not appointed a dedicated Data Protection Officer or an EEA, UK, or Swiss representative.

Purposes and Legal Bases of Processing

When we process your personal data, we will do so in reliance on the following lawful bases:

  • Contract: Where the processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract with you. This applies to any processing where you sign a contract with us, for example when you become our customer or deliver services to us as a vendor or contractor. This may also include processing necessary for the performance of our Terms of Service.
  • Legitimate Interest: Where the processing is necessary for the purposes of a legitimate interest that are not overridden by your interests or fundamental rights and freedoms (e.g., to provide, maintain, and improve our products and services, conduct data analytics, and communicate with you regarding our services).
  • Vital Interest: Where the processing is necessary to protect the vital interests of you or another person (e.g., to protect your physical safety).
  • Public Interest: Where the processing is necessary to perform tasks carried out in the public interest or in the exercise of official authority vested in us (e.g., to cooperate in an ongoing law enforcement investigation).
  • Legal Obligation: Where the processing is necessary to comply with our legal obligations (e.g., to maintain a record of your personal data to comply with laws and regulations related to bookkeeping, accounting, taxation, and employment).
  • Consent: Where we have your consent for the processing (e.g., when you opt in to receive marketing communications from us). When consent is the legal basis for our processing of your personal data, you may withdraw your consent at any time.

When we process special categories of personal data (including biometric information) we do so only where (i) the processing relates to personal data which are manifestly made public by you, (ii) the processing is necessary for the establishment, exercise, or defense of legal claims, (iii) the processing is necessary for reasons of substantial public interest, or (iv) you have given us explicit consent.

You are not required to provide personal data to us, but we do rely on your personal data to provide certain of our products and services. For example, we need your personal data to facilitate and deliver an order that you request. If you choose not to provide us with your personal data, we may not be able to provide you with a service or product you request. We will inform you at the point that we collect personal data from you if the provision of certain personal data is mandatory or optional for receipt of our products and services.

Automated Decision-Making and Profiling

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR. Where our services are used by our business customers to assist their hiring processes, those customers act as the controller of that processing and are responsible for compliance with Article 22, including any required safeguards; we support our customers in meeting those obligations. If any of our own processing were deemed to fall within Article 22, you would have the right to obtain human intervention, to express your point of view, and to contest the decision, and we would honor those rights.

Retention and International Transfers of Personal Data

We retain personal data for no longer than reasonably necessary for the purposes described in this Privacy Notice, as further described in the Our Collection and Use of Personal Data section above. Because we operate in the United States, personal data we collect from individuals in the EEA, UK, or Switzerland will be transferred to, and processed in, the United States. Where required, we rely on appropriate safeguards recognized under applicable law, such as the standard contractual clauses, for these transfers.

Your Additional EEA, UK, and Swiss Privacy Choices

Subject to certain limitations at law, you may be able to exercise the following rights:

  • Right to Access: The right to obtain confirmation of whether we are processing personal data about you, access to and a copy of the personal data we are processing about you, and information relating to its processing, including:
  • The categories of personal data being processed;
  • The purposes of the processing;
  • The categories of the sources of the personal data;
  • The categories of recipients to whom the personal data have been or will be disclosed;
  • The envisaged period for which the personal data will be stored, or the criteria used to determine that period;
  • Any automated decision-making or profiling performed in connection with your personal data; and
  • The safeguards relied upon for the transfer of personal data to any third country.
  • Right of Portability: The right to obtain a copy of the personal data we have collected about you in a structured, commonly used, and machine-readable format, and the right to transmit that personal data to another controller without hindrance.
  • Right to Rectification: The right to correct or update any personal data about you that is inaccurate or incomplete.
  • Right to Restriction of Processing: The right to require us to limit the purposes for which we process your personal data if the continued processing of the personal data in this way is not justified, such as where the accuracy of the personal data is contested by you.
  • Right to Object to Processing: The right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal data, and we will assess and inform you if that is the case. You can object to marketing activities for any reason.
  • Right to Withdraw Consent: The right to withdraw your previously provided consent to our processing of your personal data. Please note withdrawing your consent will not affect the lawfulness of our use of your personal data before your consent was withdrawn, nor our processing of personal data pursuant to a different lawful basis for processing.
  • Right to Erasure: The right to have us erase your personal data if the continued processing of that personal data is not otherwise justified.

In certain circumstances, we may need to apply a “legal hold” that retains information beyond our typical retention period where we face threat of legal claim. In that case, we will retain the information until the hold is removed, which typically means the claim or threat of claim has been resolved. In all cases, in addition to the purposes and legal bases identified above, we consider the amount, nature and sensitivity of personal data, as well as the potential risk of harm from unauthorized use or disclosure of personal data, in determining the relevant retention period.

Once retention of the personal data is no longer reasonably necessary for the purposes outlined above, we will delete the personal data or, if that is not possible (for example, because personal data has been stored in backup archives), we will securely store the personal data and isolate it from further active processing until deletion or deidentification is possible.

Submitting Privacy Rights Requests

Please submit a request specifying the right you wish to exercise by emailing us at admin@careerpuck.com.

Please note that if the exercise of these rights limits our ability to process personal data, we may not be able to provide our services to you or otherwise engage with you in the same manner.

If you have a concern about our processing of personal data, you also have the right to lodge a complaint with the data protection authority where you reside, where you work, or where the alleged violation occurred.

‍