Your Privacy Rights
Effective Date: June 8, 2026 · Last Updated: June 8, 2026
Version: 2026-06-08
1. Introduction
HeadHonta gives data subjects practical ways to exercise their rights under the EU General Data Protection Regulation (GDPR), the UK GDPR, the Nigeria Data Protection Act (NDPA), and the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA). This page explains how to put each right into action.
How you exercise a right depends on whether you are a recruiter-account holder or a candidate. Use the section that applies to you below. For the underlying detail on what we collect and why, see our Privacy Policy.
2. Rights at a Glance
Depending on your location and relationship with us, you may have the following rights:
- Access — obtain a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — have your personal data deleted.
- Portability / export — receive your data in a machine-readable format.
- Restriction — limit how we process your data.
- Objection — object to certain processing.
- Withdraw consent — withdraw any consent you previously gave.
- Non-discrimination (CCPA) — we will not discriminate against you for exercising your rights.
- Lodge a complaint — raise a concern with a supervisory authority.
We do not sell personal data.
3. If You Are a Candidate
- Export your data — sign in to the candidate portal and use the data-export option to download a machine-readable copy of your personal data.
- Request erasure — submit an erasure request from the candidate portal; the relevant hiring organisations are notified.
- Correct your data — update your details in the portal.
- Unsubscribe — use the unsubscribe link in any non-essential email.
For candidates sourced by a recruiter, the recruiter is the controller of your data; HeadHonta will route or assist with your request. For more detail on how your data is handled, see our Candidate Privacy Notice.
4. If You Are a Recruiter / Account Holder
- Delete your account — delete your account from account settings. Note: deletion is blocked if you are the sole owner of an organisation with other members — transfer ownership first.
- Export / manage organisation data — manage and export your organisation's data via settings and CSV exports.
- Cookie & analytics choices — manage your cookie and analytics preferences via the cookie consent banner. See our Cookie Policy for details.
5. Submitting a Request to Our Privacy Team
For any right not available as a self-service action above, email privacy@headhonta.com. We respond within 30 days (extendable by a further 60 days where permitted). We may need to verify your identity before processing a request.
6. Complaints
You may lodge a complaint with your local supervisory authority if you are in the EEA or the UK, or with the Nigeria Data Protection Commission (NDPC) if you are in Nigeria. You can also learn more about your GDPR rights on our GDPR page.