GDPR & CCPA

Your rights under GDPR and UK GDPR

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights with respect to your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure — ask us to delete your personal data, subject to legal retention requirements
• Right to restrict processing — ask us to pause use of your data while a concern is resolved
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest, including profiling
• Right to withdraw consent — withdraw consent at any time, without affecting the lawfulness of earlier processing
• Right to lodge a complaint — file a complaint with your local data protection authority

Lawful bases for processing

We rely on the following lawful bases under Article 6 of the GDPR:

• Performance of a contract — processing needed to provide the Service to Customers and Candidates
• Legitimate interest — workforce matching, fraud prevention, security, and product improvement, balanced against your rights
• Consent — for demographic data and any other processing that explicitly requires it
• Legal obligation — where processing is required by funder, statutory, or regulatory rules

International data transfers

Patterned operates primarily in the United States, and personal data we process is generally stored and processed there. Where we transfer data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the Standard Contractual Clauses.

Your rights under CCPA / CPRA

If you are a California resident, you have the right to:

• Know what categories of personal information we collect about you and how we use it
• Access the specific pieces of personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information, subject to legal exceptions
• Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising
• Limit our use of sensitive personal information
• Be free from retaliation for exercising your rights

Patterned does not sell personal information for money, and we do not use personal information for cross-context behavioral advertising. There is therefore no opt-out for "sale" or "sharing," but you may still exercise your other rights at any time.

How to exercise your rights

To exercise any of these rights, email us using the address below and include enough information for us to identify you and confirm your request is genuine. We may ask for additional verification before acting on requests involving sensitive data.

We will respond within the timeframes required by applicable law (generally 30 days under GDPR, 45 days under CCPA, extendable where permitted).

Authorized agents

California residents may use an authorized agent to make a CCPA request. We will require written authorization and may verify the request directly with you before acting.

Contact and Data Protection Officer

Send privacy requests and questions to:

We have not formally designated a Data Protection Officer; the contact address above is the appropriate point of contact for all data protection inquiries.