Privacy Policy

Last Updated: 25 March 2026

Platform: Sonder.Careers
Version 1.0

This Privacy Policy explains how Sonder Careers collects, uses, stores, shares, and protects your personal data. It applies to all users of the platform at Sonder.Careers including visitors, registered Candidates, Employers, and recruiters. Please read it carefully. By using the platform, you acknowledge that you have read and understood this policy.

1. Introduction and Data Controller

1.1 Who We Are

Sonder Careers ("we", "us", "our") operates the professional careers and recruitment platform at Sonder.Careers and all associated subdomains (the "Platform"). We are committed to protecting your personal data and respecting your privacy. Our platform is built on the Sonder philosophy: All lives living one story.

1.2 Data Controller

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

Sonder Careers
Platform: Sonder.Careers
Email: privacy(at)Sonder.Careers
General enquiries: admin(at)Sonder.Careers

1.3 Scope of This Policy

This Privacy Policy applies to all personal data collected through the Platform, including data provided by Candidates, Employers, recruiters, and visitors. It covers all features of the Platform including profile creation, job listings, application management, AI-generated summaries, professional networking, and messaging.

1.4 Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Where changes are material, we will use reasonable efforts to notify you by email or through the Platform at least 14 days before they take effect.

2. Information We Collect

2.1 Information You Provide Directly

When you register, create a profile, apply for a role, or otherwise use the Platform, we may collect the following categories of personal data:

Identity Data: Full name, profile photograph, professional title, and headline.
Contact Data: Email address, telephone number, and postal address.
Professional Data: Employment history, educational background, professional qualifications, skills, competencies, career objectives, CV and supporting documents, and responses to profile questions.
Employer Data: Company name, registered address, company registration number, sector, company description, culture statement, and job listing content.
AI Summary Data: Where you use the AI profile summary feature, we process your Professional Data to generate a career summary, competency assessment, and role recommendations.
Financial Data: Payment details processed through our third party payment provider. We do not store full payment card numbers.
Communication Data: Messages sent through the Platform messaging system, contact forms, and correspondence with our team.
Consent Records: Records of the consents you have given, including the date, time, and scope of each consent.

2.2 Information Collected Automatically

When you access the Platform, we automatically collect:

Technical Data: IP address, browser type and version, operating system, device type, and screen resolution.
Usage Data: Pages visited, time spent on pages, navigation paths, referring URLs, search queries, job listings viewed, profiles visited, and interaction patterns.
Location Data: Approximate location derived from your IP address. We do not display your exact address publicly.
Session Data: Login timestamps, session duration, and feature usage patterns.

2.3 Information from Third Parties

We may receive information about you from third party services you connect to your account, such as LinkedIn or other professional networks. We only use such information in accordance with the permissions you grant.

3. Lawful Bases for Processing

3.1 UK GDPR Lawful Bases

We rely on the following bases:

Contractual Necessity (Article 6(1)(b)): Processing necessary to create and maintain your account, display your profile, provide the job matching service, and deliver the Platform as agreed.
Consent (Article 6(1)(a)): Where we use your Professional Data for AI-generated summaries, marketing communications, and non-essential cookies.
Legitimate Interests (Article 6(1)(f)): To maintain Platform security, detect fraud, analyse usage patterns, and improve the product.
Legal Obligation (Article 6(1)(c)): To comply with a legal obligation, such as responding to a court order or tax obligation.

3.2 Special Category Data

Sonder Careers does not require you to provide special category data. If you voluntarily include such data in your profile, you provide your explicit consent under Article 9(2)(a) of UK GDPR to its processing.

4. How We Use Your Information

4.1 Core Platform Purposes

We use your personal data for the following purposes:

Account and Profile Management: to create, maintain, and display your profile on the Platform.
Recruitment Matching: to match Candidate profiles against relevant job opportunities.
Job Applications: to transmit application materials to the relevant Employer.
AI Profile Summaries: to process your Professional Data through automated tools to generate career summaries and role recommendations.
Professional Networking: to enable Candidates and Employers to connect and build professional relationships.
Service Improvement: to analyse usage patterns and improve the Platform.
Security and Fraud Prevention: to protect the Platform and its users.
Legal Compliance: to comply with applicable laws and regulations.
Marketing Communications: with your explicit consent, to send you information about new features and relevant opportunities.

5. Your Consent to Use of Professional Data for Recruitment

5.1 Nature of Consent

By creating a Candidate profile and providing Professional Data, you provide your informed, specific, and freely given consent to the uses described in this section.

5.2 What You Are Consenting To

Your Professional Data will be used to create and display your Candidate profile, visible to registered Employers and recruiters.
Your Professional Data will be shared with Employers for candidate identification, evaluation, and contact.
When you submit a job application, your Professional Data will be transmitted to the relevant Employer.
Your Professional Data will be processed by AI tools to generate career summaries and role recommendations.
Your Professional Data may be used in anonymised and aggregated form for platform analytics and market research.

5.3 What You Are Not Consenting To

This consent does not constitute consent to the sale of your personal data to any third party. Sonder Careers does not and will not sell your personal data.

5.4 Granular Consent Controls

You can manage the scope of your consent through your account privacy settings, including controlling profile visibility, CV access, AI summary display, and marketing communications.

5.5 Withdrawal of Consent

You may withdraw your consent at any time by deactivating your profile, adjusting your privacy settings, or contacting us at privacy(at)Sonder.Careers.

6. Public Visibility of Your Data

6.1 Default Visibility

Your name, professional headline, profile photograph, employment history summary, skills, qualifications, and general location indicator are visible to registered Employers by default.

6.2 Restricted Information

Your direct telephone number and exact postal address are not displayed publicly on the Platform.

6.3 CV Visibility

If you upload a CV, its visibility is controlled through your account settings.

6.4 Your Responsibility

You are responsible for the personal data you include in your public profile. We are not responsible for how Employers or third parties use information that is visible on your public profile.

7. AI-Generated Content and Automated Processing

7.1 How AI Features Work

Sonder Careers uses AI tools to generate profile summaries, role recommendations, and competency assessments based on your Professional Data.

7.2 Labelling

All AI-generated content on the Platform is clearly labelled as AI-generated. Sonder Careers includes a disclaimer alongside all AI outputs.

7.3 Human Oversight

No legally significant or similarly significant decisions about you are made solely on the basis of automated processing without human review.

7.4 Your Rights Regarding Automated Processing

You have the right to request human review of any AI-generated output that you believe materially misrepresents you.

8. Who We Share Your Data With

Employers and Recruiters: Your Professional Data is shared in accordance with your privacy settings and consent.
Service Providers: Third party providers performing services on our behalf (hosting, payment processing, email delivery, analytics, AI processing).
Professional Advisers: Lawyers, accountants, and auditors where necessary.
Law Enforcement and Regulators: Where required by law or to protect rights, property, or safety.
Business Transfers: In connection with a merger, acquisition, or sale of assets.

Sonder Careers does not sell your personal data to third parties under any circumstances.

9. Your Rights Under UK GDPR

9.1 Your Rights

Right of Access (Article 15): Request a copy of the personal data we hold about you.
Right to Rectification (Article 16): Request correction of inaccurate or incomplete data.
Right to Erasure (Article 17): Request deletion of your personal data in certain circumstances.
Right to Restrict Processing (Article 18): Request that we limit how we use your data.
Right to Data Portability (Article 20): Request your data in a structured, machine-readable format.
Right to Object (Article 21): Object to processing based on legitimate interests.
Right to Withdraw Consent: Withdraw consent at any time through your account settings.
Rights Related to Automated Decision-Making (Article 22): Request human review of AI-generated outputs.

9.2 How to Exercise Your Rights

9.3 Right to Complain

You have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk

10. International Data Transfers

Your personal data is primarily stored within the United Kingdom. Where we transfer data outside the UK, we ensure appropriate safeguards are in place including UK adequacy regulations and standard contractual clauses.

11. Data Retention

11.1 Retention Periods

Account and Profile Data: Retained while active. Permanently deleted within 90 days of account closure.
Professional Data and CV Data: Deleted within 90 days of account closure.
AI-Generated Content: Deleted within 90 days of account closure.
Communication Data: Retained for 24 months from the date of communication.
Technical and Usage Data: Retained in anonymised form indefinitely. Identifiable data retained for no longer than 24 months.
Financial Data: Transaction records retained for seven years as required by HMRC.
Consent Records: Retained for five years following account closure.

12. Cookies and Tracking Technologies

12.1 What We Use

The Platform uses cookies and similar tracking technologies to operate, remember your preferences, and understand how the Platform is used.

12.2 Categories of Cookies

Strictly Necessary Cookies: Essential for authentication, session management, and security. Do not require consent.
Analytics Cookies: Collect information about how visitors use the Platform. Require consent.
Functionality Cookies: Remember your preferences and settings. Require consent.
Third Party Cookies: Set by third party services embedded in the Platform. Require consent.

12.3 Managing Cookies

You may accept or reject non-essential cookies via the cookie consent notice and change your preferences at any time through your browser settings or account settings.

13. Data Security

We implement appropriate technical and organisational measures including:

Encryption of data in transit using TLS/SSL.
Encryption of sensitive data at rest.
Access controls restricting data access to authorised personnel.
Regular security assessments and vulnerability monitoring.
Secure hosting with reputable, UK-compliant service providers.
Staff training on data protection and information security.

14. Data Breach Notification

In the event of a personal data breach, we will notify the ICO within 72 hours and notify you directly without undue delay where the breach is likely to result in a high risk to your rights and freedoms.

15. Third Party Services

The Platform may contain links to third party websites and services. We are not responsible for their data practices.

16. Children's Privacy

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at admin(at)Sonder.Careers.

17. Contact and Data Protection Enquiries

Sonder Careers
Privacy enquiries: privacy(at)Sonder.Careers
General enquiries: admin(at)Sonder.Careers
Platform: Sonder.Careers

Sonder.Careers
All lives living one story.

Terms & Conditions Privacy Policy