Effective as of April 16th 2025.
Introduction
This privacy policy (“Policy”) provides information about how the Flo Health group of companies (collectively, “Flo,” “we,” or “us”) collect and process your personal data in the context of recruitment. Read this Policy carefully, as it contains important information about the data we process, the purposes and legal basis for processing, recipients of your data, personal data protection rights, and other useful information.
What personal data we collect from you
The personal data that we collect from job applicants can include (and will apply to the extent such data collection is reasonably necessary):
- full name;
- contact information (e.g., email, phone number, address);
- education, skills, and training;
- current workplace and employment history;
- recommendations and references;
- CV, cover letter and any attachments you choose to share;
- location;
- publicly available information (e.g., information from professional social networks);
- recruitment tasks data (such as the presentations and tests performed by you, interview notes about you, etc.);
- compensation information and expectations;
- visa and citizenship status;
- verification data, which includes the outcomes of background verification checks performed in relation to you, such as outcomes of previous employment, and identity checks (please note that the level of checks required will depend on factors such as your location and the role you have applied for);
- information required to prepare your employment contract; and
- any other information submitted by you.
If you choose to disclose it, we may also collect information relating to your:
- gender;
- veteran status;
- ethnic origin; and/or
- disabilities.
The collection of such data is entirely voluntary, and you are under no obligation to disclose this information. Your decision to provide or withhold such information will not affect your job application for candidacy. When applying, please avoid including any information that is unnecessary for the recruitment process.
Why we collect your personal data
We are constantly looking for new talent to help us build a better future for female health. When you apply or are contacted by us regarding open positions at Flo (either directly or through a recruitment agency), we collect and process your personal data for recruitment purposes which may include to:
- communicate with you;
- verify your information;
- assess your application and suitability for entering into an employment agreement with Flo;
- comply with applicable laws, legal processes, or enforceable government requests;
- notify you of future job opportunities where we have your consent;
- monitor diversity, equal opportunities, and your candidate experience;
- carry out background and reference checks as appropriate and in accordance with applicable law; and
- any other activities necessary to administer and manage your application process.
We may instruct our background verification provider to contact you to start your verification process. After you have agreed to proceed, the provider will reach out to you. They will ask for your permission to contact other third parties, for example, your past employers, and verify employment dates. Once this verification is completed, this information will then be shared with us.
How we process your personal data
We will not collect or process your personal data without letting you know. We will process your personal data based on one or more of the following legal bases:
- Your consent: For example, you are required to give us permission to process your personal data when applying for a job position and to retain your CV for future opportunities within Flo.
- Legal obligation: We may be obligated to process some of your personal data to comply with applicable laws and regulations, for example, to make reasonable adjustments for applicants with disabilities or to conduct checks for eligibility to work in a particular territory, as required by immigration laws.
- Legitimate interest: We may process your personal data to evaluate and improve our recruitment process. This includes conducting analytics, forecasting recruitment trends or streamlining recruitment processes.
- Contract: We may also process your data when we assess your suitability for the role and when we have the intention to enter into a contract with you.
Where we get your data
Generally, we collect your information directly from you. We may also obtain information from:
- other Flo entities within Flo’s corporate group (for example, if you have been referred to another job position at Flo);
- job portals and recruitment agencies;
- recruitment tools (e.g., Greenhouse Inc., Glassdoor Inc., Indeed Inc.);
- professional social media networks (e.g., LinkedIn);
- Flo employees (e.g., referrals); and
- background-checking service provider (e.g., Veremark Ltd.)
Who we share your data with
Your personal data may be shared with companies within Flo’s corporate group to carry out recruitment activities as provided in this Policy or if we see that your profile is more suitable for other positions at Flo.
We may also share your data with our contracted service providers (“Processors”) that help us with the recruitment process, such as:
- Crosschq Inc. (TalentWall) - United States; hiring management platform
- Greenhouse Software Inc. - United States; recruitment software provider
- HiBob Inc. - Israel; people management platform
- Remote Technology Services Inc. - United States; hiring management platform and employer of record
- Veremark Ltd - United Kingdom; background verification platform
- BrightHire Inc. - United States; AI powered recruitment platform
We use Processors who provide us with services such as emailing platforms, IT infrastructure service, and analytics. When using service providers, we ensure that they protect our candidates’ personal data in accordance with applicable legal requirements.
In some cases, your personal data is processed within the territory of the European Union and the European Economic Area (“EEA”). However, the data may be transferred and processed beyond those territories when necessary. If we share your personal data with recipients based outside of the EEA (e.g., in the United States), we make sure that they process personal data with an adequate level of protection, and we rely on our certifications under the EU–US Data Privacy Framework (“EU–US DPF”), the Swiss–US Data Privacy Framework, and the UK Extension to the EU–US DPF. Flo Health also relies on the standard contractual clauses, including supplementary measures as necessary for transfers to the United States.
Data Privacy Framework Participation
Flo is certified under the EU–US Data Privacy Framework and Swiss–US Data Privacy Framework (together, the “DPF”) for personal data transfers from the EU to the US and from Switzerland to the US. You may view our certification here.
How long we store your personal data
In general, your personal data is stored until the end of the recruitment process but may be retained longer if necessary to comply with our legal obligations or resolve any disputes within the hiring process.
- When you give Flo consent to contact you about future job positions, Flo will keep your data for three years in addition to the initial recruitment retention term.
- If you become an employee at Flo, we will save your information within the employee file in accordance with our internal data retention terms for employee data.
- Information from background checks is retained for six months after the verification takes place, unless Flo has a legal requirement to keep the data longer.
Automated decision-making / AI Tooling
As part of our recruitment process, we may utilize systems whereby candidates may be automatically rejected if they do not meet specific criteria, such as location or qualification requirements. However, our decisions about your candidacy are not solely determined by automated processes. We consider various factors beyond automated criteria to ensure fair and comprehensive evaluation of all applicants.
We may use our vendor BrightHire, which is an AI-powered note-taking tool that helps us document information from interviews. This tool may process personal data discussed during your interview to enhance efficiency and improve our recruitment process. This processing is subject to human review and does not involve automated decision-making. You can choose to opt-out of this note-taking tool and you will not in any way be treated unfavourably if you choose to do so. You can request the deletion of your personal data at any time, however, while we make every effort to delete your data whenever possible, certain information may need to be retained if required or permitted by applicable law.
For more information regarding the use of BrightHire, please refer to the: Supplementary Privacy Notice (BrightHire Inc.).
What happens if you don’t provide us with your personal data
You are not obliged to provide your personal data to Flo; however, as this is required for us to consider you for a job or otherwise engage with you, we will not be able to offer employment without certain personal data.
Your rights
Privacy laws, including the General Data Protection Regulation, provide certain rights to individuals in relation to their personal data. Except as limited under applicable laws, the rights afforded to you are as follows:
- Right of Access: You have the right to request access to your personal data that Flo processes about you and to request information about what personal data we hold about you, the purposes of the processing, and other related information.
- Right to Rectification: If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information.
- Right to Erasure: You also have the right to request the erasure of your personal data or to restrict processing in accordance with the data protection laws.
- Right of Data Portability: You have the right to request a copy of your personal data in electronic format and to transmit that personal data to another data controller.
- Right to Withdraw consent: You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
- Right to Object to processing: If your personal data is processed based on our legitimate interests (as outlined above), you have the right to object. We will carefully consider your request and cease processing for the specified purposes unless we can demonstrate a legitimate ground to override your objection, such as the defense of a legal claim.
Contact us
If you apply or get referred for a job at any of our company locations in the UK or Lithuania, the respective company overseeing that location is responsible for supporting the hiring process. Contact details of the relevant entities are below.
- Flo Health UK Limited (United Kingdom)
Address: 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom - Flo Health LTU UAB (Lithuania)
Address: Saltoniškių st. 2-1, 08126 Vilnius, The Republic of Lithuania
We only process your personal information in compliance with this Policy and in accordance with the relevant data protection laws. If, however, you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information, please email our data protection officer at dpo@flo.health.
You can also complain to your local data protection authority or other local regulatory body responsible for ensuring protection of your rights relating to the handling of personal data. Without prejudicing your rights, we kindly request that you contact us first so we can work together to resolve the issue.
If you have any questions regarding this Policy or your privacy, please email us at hr@flo.health, or you can email Flo’s data protection officer at dpo@flo.health.