Candidate Privacy Policy

Добавлено

• Добавлено: When you apply to work with any of the Cloudflare Group of companies (Cloudflare, Inc. and its wholly owned subsidiaries as listed in our Privacy Policy (together, “Cloudflare” or “we”), we will collect the personal data contained in your application. In this case, we are a "data controller.” This means that we are responsible for deciding how we hold and use personal data about you.
• Добавлено: This notice provides applicants (whether for an employee, worker, or contractor position) with information about the personal data we collect, how and why your personal data will be used, and how long we will retain it. It also provides you with certain information that we are required to provide you under Applicable Data Protection Laws. Applicable Data Protection Laws means all data protection laws and regulations of the jurisdictions of the aforenamed Cloudflare companies that are applicable to the processing of personal data.
• Добавлено: Your personal data will be processed for the purposes of managing our recruitment and hiring-related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, conducting reference and/or background checks, and as is otherwise needed in the recruitment and hiring processes. We process your information as necessary for our legitimate interests (that is, the solicitation, evaluation, and selection of applicants for employment) or where we have your consent to do so.
• Добавлено: In connection with your application for work with us, we will collect your personal data from you, from recruitment agencies (who may provide us with information such as CVs), and your named references. We gather, store, and use the following categories of personal data about you:

• Добавлено: Information about you from publicly available sources.
• Добавлено: Information about how you’re connecting to our systems, such as device and connection information, including IP address.
• Добавлено: We may use third-party tools to generate inferred data about your professional qualifications generated through artificial intelligence and machine learning analysis of your application materials.
• Добавлено: Information generated during technical assessments, including test results, work samples, and technical metadata (such as session activity, duration, and technical identifiers) captured by our proprietary assessment platforms.
• Добавлено: In the event we receive any personal data from a third party that the third party identifies and treats as sensitive, we will treat such information we receive as sensitive information.
• Добавлено: Ensuring the security and integrity of our recruitment processes and systems, including detecting, investigating, and preventing cybersecurity threats, fraud, impersonation, or unauthorized access as part of our insider risk and threat elimination programs.
• Добавлено: It is in our legitimate interest to decide whether to appoint you to a role as it would be beneficial to our business to appoint someone to that role. We also need to process your personal data to decide whether to enter into a contract of employment or contract for services with you. We may use your information to re-engage with you for future employment opportunities.
• Добавлено: If you fail to provide information when requested, and that information is necessary for us to consider your application (such as evidence of qualifications or work history), we will not be able to process your application successfully. For example, if we require a credit check or references for this role and you fail to provide us with relevant details, we will not be able to take your application further.
• Добавлено: We may collect the following "special categories" of more sensitive personal data: information about your race or ethnicity, religious beliefs, sexual orientation, and political opinions, if you choose to give us that information (“Sensitive Personal Information”). We will hold this information for the purposes of legal compliance, diversity and equal opportunities. We will use Sensitive Personal Information in the following ways:
• Добавлено: In addition, we will collect, store, and use information about your criminal convictions history if we perform a background check. Typically, we perform background and/or credit checks if we would like to offer you the role. Such an offer is usually conditional on checks and any other conditions, such as references, being satisfactory. We are entitled to ask you to apply for a basic criminal record check in order to satisfy ourselves that there is nothing in your criminal convictions history which makes you unsuitable for the role. Every role at Cloudflare requires a high degree of trust and integrity and therefore requires a criminal background check. Such background checks are conducted in accordance with applicable law.
• Добавлено: We utilize AI-powered tools, such as Eightfold, to help analyze and rank candidates based on their likelihood of success in a role. While these tools help us prioritize applications, we do not use solely automated decision-making for candidate selection. Our recruiters and hiring managers exercise human oversight by reviewing these recommendations and making the final determination on whether to advance or reject a candidate.
• Добавлено: We also use automated technical solutions to monitor and screen for security threats. This includes the use of technical identifiers, such as IP addresses, to identify applications from confirmed threat actors to protect our systems and data.
• Добавлено: Automated processes are limited to security-based screening and are not used as the sole basis for evaluating your professional qualifications or suitability for a role. In instances where a confirmed security threat is identified via technical identifiers, applications may be rejected to maintain the safety and security of our recruiting process. Cloudflare does not utilize solely automated processing to make employment decisions.
• Добавлено: Eightfold, a talent intelligence provider used to help us assess, score, and rank candidates, and to re-engage with previous applicants. Eightfold utilizes proprietary AI models to predict a candidate's fit for a role based on their skills and experience.
• Добавлено: Strider, a specialized threat intelligence provider used to identify and assess risks associated with state-sponsored actors, high-risk email domains, and other technical identifiers during the application process.
• Добавлено: Nisos, a human risk intelligence firm used to detect and investigate potential candidate fraud, misrepresentation, or other human-driven security threats to ensure the integrity of the recruitment process.
• Добавлено: We also may use our own infrastructure to power our recruiting operations. For more information, please see our sub-processors page here: https://www.cloudflare.com/gdpr/subprocessors/cloudflare-services/.
• Добавлено: Cloudflare has put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need-to-know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality. Details of these measures may be obtained from privacyquestions@cloudflare.com.
• Добавлено: We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
• Добавлено: California residents also have the right to designate an authorized agent to make a request on their behalf. If you would like an authorized agent to submit a request on your behalf, we require that either (a) you must directly confirm with us that you provided the authorized agent permission to submit the request, (b) you must provide the authorized agent with your power of attorney in accordance with the law of the jurisdiction in which you are located, or (c) the request must otherwise be submitted in accordance with Applicable Laws.
• Добавлено: You also have the right to object to our processing of your data where we are processing such data in our legitimate interests or to withdraw your consent for processing where our processing is based on having received your consent. To object or withdraw your consent, please contact us at sar@cloudflare.com.
• Добавлено: We have appointed a Data Protection Officer (“DPO”) to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal data, please contact the DPO at dpo@cloudflare.com.

Изменено

• Изменено: Было Last Updated: June 26 , 2025 Стало Last Updated: September 24 , 2026
• Изменено: Было Used lawfully, fairly and in a transparent way. Стало Used lawfully, fairly , and in a transparent way.
• Изменено: Было The information you have provided to us in your resume, curriculum vitae, and/or cover letter. Стало The information you have provided to us in your resume, curriculum vitae, and/or cover letter , and any other files you may provide us as part of your application .
• Изменено: Было In some cases, we may perform a background, identity verification, and/or credit check . When we do that, we may collect the following categories of information from a background check provider: name, title, address, telephone number, personal email address, date of birth, photograph, employment history, national ID, references, education. The section below titled “Sensitive personal information we may collect, and how we use it” provides more information about the "special categories" of Sensitive Personal Information we may collect, store, and use. Стало In some cases, we may perform enhanced background, identity verification, and/or credit checks . When we do that, we may collect the following categories of information from a background check provider: name, title, address, telephone number, personal email address, date of birth, photograph, employment history, national ID, references, education. The section below titled “Sensitive personal information we may collect, and how we use it” provides more information about the "special categories" of Sensitive Personal Information we may collect, store, and use.

• Изменено: Было We have in place an appropriate policy document and safeguards which we are required Стало We have in place an appropriate policy document and safeguards which we are required by law to maintain when processing such data.
• Изменено: Было We share the above-described personal data with third-party service providers, including other entities in the Cloudflare Group for business purposes. These service providers help us manage our recruiting and hiring processes, communicate with applicants, schedule interviews, and, when appropriate, conduct background checks. The service providers we use include: Стало We share the above-described personal data with third-party service providers, including other entities in the Cloudflare Group , for business purposes. These service providers help us manage our recruiting and hiring processes, communicate with applicants, schedule interviews, and, when appropriate, conduct background checks. The service providers we use include:
• Изменено: Было Cloudflare is a U.S . based, global company. When you submit your personal data to any Cloudflare entity outside the United States, we transfer your personal data and special categories of personal data to countries where the Cloudflare Group Стало Cloudflare , Inc. is a U.S .- based, global company. When you submit your personal data to any Cloudflare entity outside the United States, we transfer your personal data and special categories of personal data to countries where the Cloudflare Group has offices in the legitimate interests of the Company and/or with your consent. The Cloudflare Group offices are listed here: https://www.cloudflare.com/about-overview/.
• Изменено: Было We recognise that the EU has established strict positions regarding the handling of personal data (including special categories of personal data, as appropriate) including requirements to provide adequate protection for personal data collected within the EEA and transferred outside the EEA. We will ensure that we only transfer personal data (including special categories of personal data, as appropriate) to a country or territory outside the EEA if that country or territory ensures an adequate level of protection for the rights and freedoms of individuals in relation to the processing of personal data (including sensitive personal data, as appropriate) or where adequate contractual or other safeguards to protect that data are in place. Стало We recognize that the EU has established strict positions regarding the handling of personal data (including special categories of personal data, as appropriate) including requirements to provide adequate protection for personal data collected within the EEA and transferred outside the EEA. We will ensure that we only transfer personal data (including special categories of personal data, as appropriate) to a country or territory outside the EEA if that country or territory ensures an adequate level of protection for the rights and freedoms of individuals in relation to the processing of personal data (including sensitive personal data, as appropriate) or where adequate contractual or other safeguards to protect that data are in place.
• Изменено: Было Cloudflare complies with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF as set forth by the U.S. Department of Commerce. Cloudflare has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Cloudflare has also certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/. Стало Cloudflare , Inc. complies with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF as set forth by the U.S. Department of Commerce. Cloudflare , Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Cloudflare , Inc. has also certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
• Изменено: Было In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF (together, the “DPFs”), Cloudflare commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the DPFs should first contact us by emailing sar@cloudflare.com or via mail to: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, Attn: Data Protection Officer. We will respond to your inquiry within 30 days of receipt and verification of your identity. Стало In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF (together, the “DPFs”), Cloudflare , Inc. commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the DPFs should first contact us by emailing sar@cloudflare.com or via mail to: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, Attn: Data Protection Officer. We will respond to your inquiry within 30 days of receipt and verification of your identity.
• Изменено: Было In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Cloudflare Inc. commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner’s Office (ICO), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF in the context of the employer-applicant relationship. If your complaint remains unresolved then as a last resort and under the conditions set forth in Annex I of the EU-U.S. DPF you may engage in binding arbitration through the DPF. Стало In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Cloudflare , Inc. commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner’s Office (ICO), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF in the context of the employer-applicant relationship. If your complaint remains unresolved then as a last resort and under the conditions set forth in Annex I of the EU-U.S. DPF you may engage in binding arbitration through the DPF.
• Изменено: Было Cloudflare is liable for the processing of personal information it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on its behalf. Cloudflare shall remain liable under the DPF Principles if its agent processes such personal information in a manner inconsistent with the DPF Principles, unless Cloudflare proves that it is not responsible for the event giving rise to the damage. Стало Cloudflare , Inc. is liable for the processing of personal information it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on its behalf. Cloudflare , Inc. shall remain liable under the DPF Principles if its agent processes such personal information in a manner inconsistent with the DPF Principles, unless Cloudflare , Inc. proves that it is not responsible for the event giving rise to the damage.
• Изменено: Было How long we retain your personal information depends on which Cloudflare entity you interact with and the country that entity is located in, because each country has different legal obligations. For most countries, this means we will retain your application for a period of 3 to 5 years after your last activity. We retain your personal data for that period so that we can show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way. When the retention period applicable to your personal data ends, we will securely destroy your personal data in accordance with internal policies and procedures. Regardless of the retention period that may apply, every candidate has the right to request deletion of their information pursuant to this privacy notice. Стало How long we retain your personal information depends on which Cloudflare entity you interact with and the country that entity is located in, because each country has different legal obligations. For most countries, this means we will retain your application for a period of up to 3 years after your last activity. We retain your personal data for that period so that we can show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way. When the retention period applicable to your personal data ends, we will securely destroy your personal data in accordance with internal policies and procedures. Regardless of the retention period that may apply, every candidate has the right to request deletion of their information pursuant to this privacy notice.

Удалено

• Удалено: When you apply to work with any of the Cloudflare Group of companies (Cloudflare, Inc.
• Удалено: and its wholly owned subsidiaries as listed in our Privacy Policy (together, “Cloudflare” or
• Удалено: “we”), we will collect the personal data contained in your application. In this case, we are
• Удалено: a "data controller.” This means that we are responsible for deciding how we hold and use

• Удалено: personal data about you.
• Удалено: This notice provides applicants (whether for an employee, worker or contractor position)
• Удалено: with information about the personal data we collect, how and why your personal data will
• Удалено: be used, and how long we will retain it. It also provides you with certain information that
• Удалено: we are required to provide you under Applicable Data Protection Laws. Applicable Data
• Удалено: Protection Laws means all data protection laws and regulations of the jurisdictions of the
• Удалено: aforenamed Cloudflare companies that are applicable to the processing of personal data.
• Удалено: Your personal data will be processed for the purposes of managing our recruitment and
• Удалено: hiring-related activities, which include setting up and conducting interviews and tests for
• Удалено: applicants, evaluating and assessing the results thereto, conducting reference and/or
• Удалено: background checks, and as is otherwise needed in the recruitment and hiring processes.
• Удалено: We process your information as necessary for our legitimate interests (that is, the
• Удалено: solicitation, evaluation, and selection of applicants for employment) or where we have
• Удалено: your consent to do so.
• Удалено: In connection with your application for work with us, we will collect your personal data
• Удалено: from you, from recruitment agencies (who may provide us with information such as CVs),
• Удалено: and your named references. We gather, store, and use the following categories of
• Удалено: personal data about you:
• Удалено: It is in our legitimate interest to decide whether to appoint you to a role as it would be
• Удалено: beneficial to our business to appoint someone to that role. We also need to process your
• Удалено: personal data to decide whether to enter into a contract of employment or contract for
• Удалено: services with you. We may use your information to re-engage with you for future
• Удалено: employment opportunities.
• Удалено: If you fail to provide information when requested, and that information is necessary for
• Удалено: us to consider your application (such as evidence of qualifications or work history), we
• Удалено: will not be able to process your application successfully. For example, if we require a
• Удалено: credit check or references for this role and you fail to provide us with relevant details, we
• Удалено: will not be able to take your application further
• Удалено: We may collect the following "special categories" of more sensitive personal data:
• Удалено: information about your race or ethnicity, religious beliefs, sexual orientation and political
• Удалено: opinions, if you choose to give us that information (“Sensitive Personal Information”). We
• Удалено: will hold this information for the purposes of legal compliance, diversity and equal
• Удалено: opportunities. We will use Sensitive Personal Information in the following ways:
• Удалено: In addition, we will collect, store, and use information about your criminal convictions
• Удалено: history if we perform a background check. Typically, we perform background and/or
• Удалено: credit checks if we would like to offer you the role. Such an offer is usually conditional on
• Удалено: checks and any other conditions, such as references, being satisfactory. We are entitled
• Удалено: to ask you to apply for a basic criminal record check in order to satisfy ourselves that
• Удалено: there is nothing in your criminal convictions history which makes you unsuitable for the
• Удалено: role. Every role at Cloudflare requires a high degree of trust and integrity and therefore
• Удалено: requires a criminal background check. Such background checks are conducted in
• Удалено: accordance with applicable law.
• Удалено: by law to maintain when processing such data.
• Удалено: You will not be subject to decisions that will have a significant impact on you based
• Удалено: solely on automated decision-making.
• Удалено: Eightfold, a cloud services provider located in the United States of America and engaged by Cloudflare to help manage and re-engage with previous applicants on Cloudflare’s behalf.
• Удалено: has offices in the legitimate interests of the Company and/or with your consent. The Cloudflare Group offices are listed here: https://www.cloudflare.com/about-overview/.
• Удалено: Cloudflare has put in place appropriate security measures to prevent your personal data from
• Удалено: being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In
• Удалено: addition, we limit access to your personal data to those employees, agents, contractors,
• Удалено: and other third parties who have a business need-to-know. They will only process your
• Удалено: personal data on our instructions, and they are subject to a duty of confidentiality.
• Удалено: Details of these measures may be obtained from privacyquestions@cloudflare.com.
• Удалено: We have put in place procedures to deal with any suspected data security breach and
• Удалено: will notify you and any applicable regulator of a suspected breach where we are legally
• Удалено: required to do so.
• Удалено: California residents also have the right to designate an authorized agent to make a
• Удалено: request on their behalf. If you would like an authorized agent to submit a request on your
• Удалено: behalf, we require that either (a) you must directly confirm with us that you provided the
• Удалено: authorized agent permission to submit the request, (b) you must provide the authorized
• Удалено: agent with your power of attorney in accordance with the law of the jurisdiction in which
• Удалено: you are located, or (c) the request must otherwise be submitted in accordance with
• Удалено: Applicable Laws.
• Удалено: You also have the right to object to our processing of your data where we are processing
• Удалено: such data in our legitimate interests or to withdraw your consent for processing where
• Удалено: our processing is based on having received your consent. To object or withdraw your
• Удалено: consent, please contact us at sar@cloudflare.com.
• Удалено: We have appointed a Data Protection Officer (“DPO”) to oversee compliance with this
• Удалено: privacy notice. If you have any questions about this privacy notice or how we handle
• Удалено: your personal data, please contact the DPO at dpo@cloudflare.com.