Casper ATS

Privacy Policy

Casper ATS — operated by Skill Engine Ltd · Last updated: July 12, 2026

This Privacy Policy explains how Skill Engine Ltd("Skill Engine", "Casper ATS", "we", "us", "our") collects, uses, discloses, and protects personal data in connection with the Casper ATS platform (the "Service"), and describes your rights in relation to that data.

Skill Engine Ltd is registered in England and Wales (Company No. 16395887), with its registered office at 1043A Old Leeds Road, Bradford, West Yorkshire, BD3 7DB. We are the data controller for the personal data described in this Policy, except where we act as a data processor on behalf of our Customers in relation to Candidate Data (see Section 3).

1. Scope of This Policy

This Policy applies to:

  • Visitors to casperats.com;
  • Customers and Users who register for and use the Service ("Account Data");
  • Job candidates whose personal data is uploaded to the Service by our Customers ("Candidate Data").

2. Information We Collect

a) Information you provide directly

  • Account information: name, work email, company name, job title, password.
  • Billing information: billing address and payment details (processed by Stripe; we do not store full card numbers).
  • Content you submit to the Service: job postings, candidate records, notes, messages, and other recruitment data.
  • Communications: information you provide when contacting support or providing feedback.

b) Information collected automatically

  • Usage data: pages visited, features used, timestamps, and interaction data within the Service.
  • Device and log data: IP address, browser type, operating system, device identifiers.
  • Cookies and similar technologies, as described in Section 7.

c) Candidate Data submitted by our Customers

When our Customers use Casper ATS to manage recruitment, they may upload personal data relating to job candidates, such as names, contact details, CVs/résumés, work history, and interview notes. We process this data on behalf of our Customers, in accordance with their instructions and this Policy. If you are a candidate and have questions about your data, please contact the organisation that submitted your information (our Customer), as they control that data.

3. Our Role: Controller and Processor

In relation to Account Data (information about our Customers and their Users), Skill Engine acts as the data controller.

In relation to Candidate Data uploaded by Customers, Skill Engine acts as a data processor, and the Customer acts as the data controller, determining the purposes and means of processing that data. Where required, we enter into data processing agreements with our Customers governing this relationship.

4. How We Use Personal Data

We use personal data to:

  • Provide, operate, and maintain the Service, including AI-assisted candidate matching and evaluation features;
  • Manage Accounts, process payments, and provide customer support;
  • Communicate with you about the Service, including updates, security notices, and administrative messages;
  • Send marketing communications, where you have consented or where permitted by law (you may opt out at any time);
  • Monitor, analyse, and improve the Service, including troubleshooting and security;
  • Detect, prevent, and address fraud, abuse, security incidents, and technical issues;
  • Comply with legal obligations, including tax, accounting, and regulatory requirements.

5. Legal Basis for Processing (UK GDPR)

Where UK GDPR applies, we rely on the following legal bases:

  • Contract: processing necessary to provide the Service under our agreement with you.
  • Legitimate interests: for example, improving the Service, preventing fraud, and direct marketing to existing Customers (where you can object at any time).
  • Consent: where you have given specific consent, such as for certain marketing communications or optional cookies.
  • Legal obligation: where processing is required to comply with applicable law.

6. How We Share Personal Data

We do not sell personal data. We may share personal data with:

  • Sub-processors and service providers who help us operate the Service, such as cloud hosting (AWS), payment processing (Stripe), email delivery, and analytics providers, under contractual confidentiality and data protection obligations;
  • AI processing providers, to deliver AI-assisted features within the Service, subject to contractual safeguards restricting use of your data for their own model training unless you have separately agreed otherwise;
  • Professional advisers, such as lawyers, auditors, and insurers, where necessary;
  • Regulators, law enforcement, or other third parties where required by law, or to protect our rights, property, or safety, or that of others;
  • A successor entity, in connection with a merger, acquisition, or sale of assets, subject to equivalent protections for your data.

7. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service, remember your preferences, and understand usage. This includes:

  • Strictly necessary cookies, required for the Service to function (e.g. authentication, session management);
  • Analytics cookies, used to understand how the Service is used, where permitted by your cookie preferences;
  • Preference cookies, used to remember settings such as language or display options.

You can manage cookie preferences using the cookie banner on this website, or through your browser settings. Disabling certain cookies may affect the functionality of the Service.

8. International Data Transfers

Your data may be processed in countries outside the UK or European Economic Area, including where our hosting or sub-processors operate. Where this occurs, we put in place appropriate safeguards, such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, to ensure your data receives an adequate level of protection.

9. Data Retention

We retain Account Data for as long as your Account is active, and for a reasonable period afterwards to comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. We retain Candidate Data for as long as instructed by the relevant Customer, or as required to provide the Service, after which it is deleted or anonymised in accordance with our data retention procedures and any applicable data processing agreement.

10. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or alteration, including encryption in transit, access controls, and regular security reviews. No system is completely secure, and we cannot guarantee absolute security of information transmitted to the Service.

11. Your Rights

Subject to applicable law, you may have the right to:

  • Access the personal data we hold about you;
  • Correct inaccurate or incomplete data;
  • Request erasure of your data, in certain circumstances;
  • Object to or restrict certain processing;
  • Request a portable copy of your data;
  • Withdraw consent, where processing is based on consent, without affecting prior lawful processing.

To exercise these rights, contact us at privacy@casperats.com. If you are a candidate whose data was submitted by one of our Customers, please contact that Customer directly, as they control that data; we will support our Customers in responding to such requests.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or your local supervisory authority.

12. Children's Privacy

The Service is intended for business use by adults and is not directed at children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

13. Marketing Communications

Where we send marketing communications, you can opt out at any time using the unsubscribe link in the relevant email, or by contacting support@skillengine.co.uk. Opting out of marketing does not affect transactional or service-related communications, which we send as necessary to provide the Service.

14. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. If we make material changes, we will notify you by email or in-app notice at least 14 days before the changes take effect. The "Last updated" date at the top of this Policy indicates when it was last revised.

15. Contact Us

If you have questions about this Privacy Policy or how we handle personal data, contact us at:

Email: privacy@casperats.com