Issa Compass

Log in

Legal

Candidate privacy notice

Effective date: 22 August 2026

This notice is for people who apply for a job, internship, contractor role, or other paid work with Issa Compass. It covers applications sent by email, video, our internship page, our careers / join-us pages, in person at our Bangkok office, or through a referrer.

It does not replace our Privacy Policy for clients using Issa Compass visa services. Client visa files are a different purpose.

1. Who is responsible

The controller is Issara Platforms Pte. Ltd. (UEN 202305342W), registered at 32 Pekin Street #05-01, Singapore 048762. Hiring for roles in Thailand is also handled with Issa Systems Co, Ltd. (Tax ID 0105565194414), at theCOMMONS at Cloud 11, 4th Floor, Unit G02, 888 Sukhumvit Rd, Bang Chak, Phra Khanong, Bangkok 10260.

Our Data Protection Officer can be reached at privacy@issacompass.com. You can also write to either address above, or visit the Bangkok office in person and ask for a privacy request form.

2. Information we collect

2.1. Information you send us

  • Contact and identity: name, email, phone, city or country, and any identifiers you include (for example a passport or national ID number). We do not use NRIC, FIN, or similar ID numbers as a login or password.
  • Application materials: CV or resume, cover letter, portfolio, links, work samples, and answers to application questions.
  • Video and audio: internship applications may be a short video of you speaking. We use the recording to assess the application. We do not run facial recognition on it.
  • Right to work and availability: work authorization, notice period, expected compensation, start date, and where you can work (including onsite in Bangkok).
  • Sensitive data only if you choose to send it: health, disability, religion, criminal history, or a photo or passport page. Please do not send these unless we ask, or unless you need us to know for a reasonable adjustment.

2.2. Information from other people

  • Referrers and referees you name, if we contact them about you.
  • Public professional profiles or work you point us to (for example a LinkedIn, GitHub, or portfolio URL).
  • Staff notes from interviews and exercise reviews.

2.3. If we hire you

We then collect what we need to start employment or a contractor engagement: bank details for pay, tax identifiers (including NRIC/FIN as a labour or tax record, never as a password), emergency contacts, and statutory forms. That processing is employment and payroll, not this application stage.

3. How we use it

We use candidate data to:

  • Receive, review, and decide your application.
  • Communicate with you about the process and next steps.
  • Run interviews, work samples, and reference checks you agree to.
  • Keep unsuccessful applications for 12 months so we can consider you for another role, unless you ask us to delete sooner.
  • Meet legal duties (labour, tax, immigration for the role, and defending claims).
  • Start employment or a contractor file if we make an offer.

We do not use your application to train public AI models. We do not sell candidate data. We do not use candidate data for visa client marketing.

4. Legal basis

Under Thailand's Personal Data Protection Act and Singapore's Personal Data Protection Act, we rely on:

  • Steps toward a contract, or your request to be considered for work, to assess the application.
  • Legitimate interests in running a fair hiring process, keeping a limited talent pool, and protecting the company in a dispute, where those interests are not overridden by your rights.
  • Legal obligation once we must keep employment, tax, or immigration records.
  • Extra care (and, where Thai law requires it, a specific basis) if you send sensitive data such as health or criminal history.
  • Consent only where we ask for something optional (for example keeping your file for future roles after you would otherwise be deleted). You can withdraw consent by emailing privacy@issacompass.com.

5. Who we share it with

Access is limited to people who need it to hire: founders, hiring managers, people and finance, and interviewers for that role.

We also use service providers that process candidate data for us:

  • Google Workspace, for email (including recruiting.team@issacompass.com) and file storage.
  • Notion, for careers pages and internal hiring notes.
  • Slack, for internal discussion of candidates.
  • Payroll and HR tools (including Talenox and Issa Shift Manager) if you are hired.

Providers may only use the data to provide their service to us. We may also disclose data if the law requires it, or to protect rights and safety.

6. Where data is processed

Applications are reviewed in Singapore and Thailand. Email and files sit with Google Workspace and Notion, which may store or access data in other countries. We use contractual and access controls so those transfers stay consistent with this notice and applicable law.

7. How long we keep it

  • Unsuccessful applications: 12 months after we close the round, so we can answer questions, consider you for another role, or handle a dispute.
  • If you ask us to delete an unsuccessful application, we do so unless a legal hold or statutory record requires a copy.
  • If you are hired: employment and payroll retention under labour and tax law, which is longer than the application file.
  • Access-request logs: at least two years, as required for Thailand access procedures.

8. Your rights

Depending on where you are and which law applies, you can ask us to:

  • Give you access to, or a copy of, your candidate data.
  • Tell you the source, if we did not collect it from you.
  • Correct inaccurate or incomplete data.
  • Delete or restrict the data, or object to some processing, where the law allows.
  • Withdraw consent where we relied on consent.

Email privacy@issacompass.com or use the postal / in-person channels in section 1. We will ask enough to verify it is you. We aim to complete a valid request within 30 days (we may extend once by 30 days with a written reason). Requests are free unless you ask for a special format or repeat the same request.

You can complain to the Personal Data Protection Commission in Singapore (pdpc.gov.sg) or the Personal Data Protection Committee in Thailand (pdpc.or.th).

9. Children

Our roles are for people aged 18 or over. If you are under 18, do not apply unless a parent or guardian contacts us first and we agree in writing.

10. Cookies on this website

This notice is hosted on issacompass.com. The site may use cookies and similar tools as described in the Privacy Policy. Those tools are for the website, not for scoring your application.

11. Changes

We may update this notice when our hiring process or the law changes. The effective date at the top will change. Material changes will be posted on this page.

12. Contact