Candidate Privacy Policy
Candidate Privacy Policy
This Candidate Privacy Policy explains how Nefxi Technologies ("Nefxi", "we", "us", or "our") collects, uses, and protects personal data submitted by individuals ("Candidates") applying for employment, internship, or contractor roles at Nefxi.
1. Information We Collect
When you apply for a position at Nefxi, we may collect: • Full name, contact details (email, phone, address) • CV/résumé, cover letter, and portfolio materials • Employment history and educational background • Skills, certifications, and references • Information gathered during interviews and assessments • Government-issued ID details required for background checks (where applicable) • Social media profiles or links you voluntarily provide
2. How We Use Candidate Data
We use your personal data to: • Evaluate your application and qualifications • Communicate with you throughout the recruitment process • Conduct background checks and verify references where required • Comply with legal and regulatory obligations • Improve our recruitment processes • Consider you for future roles if you consent to our talent pool
3. Legal Basis for Processing
We process candidate personal data on the following legal bases: • Contractual necessity — to take steps prior to entering a contract of employment • Legitimate interests — to manage our recruitment activities effectively • Legal compliance — to meet our obligations under Kenyan labour and data protection laws • Consent — where we retain your data for our talent pool
4. Data Sharing
Your candidate data may be shared with: • Hiring managers and relevant internal teams at Nefxi • Trusted third-party assessment or background-check providers under confidentiality agreements • Regulatory authorities when required by law We do not sell candidate data to any third party.
5. Data Retention
If your application is unsuccessful, we will retain your data for up to 12 months to consider you for future suitable openings, after which it will be securely deleted unless you have provided explicit consent for longer retention. If you are hired, your data will be transferred to your employee record and governed by our Employee Privacy Policy.
6. Your Rights
Under the Kenya Data Protection Act 2019, you have the right to: • Access the personal data we hold about you • Request correction of inaccurate data • Request erasure of your data (subject to legal retention obligations) • Object to or restrict processing • Withdraw consent at any time (where processing is consent-based) • Lodge a complaint with the Office of the Data Protection Commissioner
7. Data Security
We implement appropriate technical and organisational measures to protect candidate data against unauthorised access, disclosure, alteration, or destruction. Access to candidate data is restricted to authorised personnel involved in the recruitment process.
8. Contact
For questions or to exercise your rights, contact our Data Protection Officer: Email: [email protected] Address: Nefxi Technologies, Nairobi, Kenya
