1. Scope
This notice applies to all personal data collected from job applicants ("Candidates") at Untitled Needleworks. This is separate from our main Privacy Policy, which covers website users and customers.
We are based in Bengaluru, India, and we hire in India. This notice is written under the Digital Personal Data Protection Act, 2023.
2. Data We Collect
We collect this when you apply, and when you come back to check your reference or send us your work. What any particular role asks for varies — this is the full set.
- Who you are and how to reach you: your name, a preferred name if you give one, your email address and phone number, and the city, state and country you are in.
- Your background: your CV, your education (institution, qualification, subject, years, and grade if you give it), your work history (employer, job title, dates, whether you are still there, and what you did), certifications, skills, and the languages you speak.
- Links you choose to share: a website, a code repository, a portfolio, or a professional profile.
- Your situation and what you are looking for: when you could start and how many hours a week, the notice period you have to give, whether you would like to work on-site, hybrid or remotely, whether you are authorised to work where the role is based, and your salary expectations.
- Why you applied: your answer to why this role, how you heard about it, whether someone here referred you, and anything else you choose to tell us.
- Your answers to the screening questions set for that role.
- The application itself: the reference we issue, when you applied, your deadline, and where your application has reached.
- Your assessment task, if the role has one — see section 4.
Two of these we ask for a particular reason, and it is worth saying which:
- Whether you are authorised to work where the role is based. We ask because we cannot make an offer we are not permitted to make. A "no" is not automatically the end of the conversation.
- Your salary expectations. We ask so that we can tell early whether we can afford the conversation. It is not used for anything else.
What not to send us
Please do not include your date of birth, a photograph, your marital status, your caste, your religion, or a government identity number — not in your CV, not anywhere else in the application. We do not ask for any of it and we do not want it. If it arrives anyway we do not use it in assessing you, but we cannot remove it from inside a document you sent us, which is why we would rather it were not there.
We never ask for a government ID before hiring, and never through a website. If you join us, identity documents are collected off-web after you accept — for your offer letter, your NDA, and setting up your ID, and for nothing else. Nobody at Untitled Needleworks will ask you for one at any earlier point, and no genuine message from us will ever ask you to upload one to a web page.
3. How We Use Your Data
We use what you send us only to consider you for work at Untitled Needleworks. That means:
- assessing your skills, experience and suitability for the role;
- talking to you about your application and where it has reached;
- keeping the records the law requires us to keep.
We rely on your consent. You give it by ticking the box on the application form, and the three things above are what you are agreeing to. You can withdraw it at any time — see section 8.
No application is decided automatically. Every one is read by a person. We do not score, rank or filter applications by software.
4. Assessment Tasks
For some roles we ask candidates to complete a short practical task as part of the application. If we do, we tell you what the task is and give you a deadline for completing it.
You send us your work as a link to somewhere you have already put it, rather than by sending the work itself. We keep that link, anything you write alongside it, and the date and time it reached us, together with the rest of your application, and we use them only to assess your application.
The work stays yours. Completing a task gives Untitled Needleworks no ownership of it and no right to use it for any purpose other than assessing your application. We do not use candidates' task submissions in our products or publish them.
5. If Someone Refers You
We ask whether anyone already at Untitled Needleworks referred you and, if so, who. If you give us a name, we hold that name — and any employee ID you provide — with your application.
We use it only to confirm the referral and to record it internally. We do not tell the person you name that you have applied, how your application is progressing, or its outcome, unless you ask us to.
Please give a name only where you are content for us to hold it. You do not have to answer, and leaving it blank does not affect your application.
7. Data Retention
If you do not join us, your application is deleted six months after you send it. This happens automatically, on a schedule — not when somebody remembers. We delete the application record, the CV you uploaded, and the link to any assessment task you sent us. The CV is deleted outright, not moved to a recycle bin.
We do not keep applications on file for future openings. If something else opens up that suits you, we would rather you applied again than have us hold your details on the chance that you might.
While you are still being considered, we keep your application for as long as that takes, and delete it once we have made a decision and told you.
If you join us, your application becomes part of your employment record. It is moved out of our candidate records and kept under the terms that apply to staff records, set out in our employee policy. The six-month rule no longer applies to it.
You can ask us to delete your application at any time before then — write to us and we will, including the CV and any assessment link, unless something in it must be kept for a legal reason.
This section covers applications made through our careers site. If you write to us directly instead, our hiring team handles that correspondence and it is not on this schedule — ask us and we will delete it.
8. Your Rights
You can ask us to show you what we hold about you, to correct it, or to delete it. You can also withdraw the consent you gave when you applied.
Withdrawing consent takes one email. Write to and say so. We delete your application — the record, your CV, and any assessment link — and stop considering you for the role.
We reply within 30 days, and usually sooner.
How we check that it is you. Send your request from the email address on your application. That is the only check we make. We will not ask you for a photograph, a government ID, or a document of any kind to prove who you are. If you no longer have access to that address, write to us anyway and we will find another way that still does not involve sending us identity documents.
9. Contact
For anything about this notice, or to exercise any of the rights in section 8, write to .
Complaints. If you are unhappy with how we have handled your data, write to the Grievance Officer at legal@untitledneedleworks.com.