Matomo Candidate Privacy Notice
Effective Date: 26 October 2026
InnoCraft Limited trading as Matomo (“InnoCraft”, “Matomo”, “we”, “us”, “our”) is committed to protecting your privacy.
This Candidate Privacy Notice explains how we collect, use, disclose, retain and protect your personal information during our recruitment and hiring activities.
This Privacy Notice applies to our processing of personal information about individuals (each a “Candidate”) who apply for employment, internship, contractor, graduate, or other work opportunities with Matomo, including where we receive your personal information from third-party service providers, e.g., recruitment agencies.
This Privacy Notice does not apply to our personnel after their engagement, our customers, users of our products or visitors to our websites, except where they submit a job application.
Who we are
We are InnoCraft Limited trading as Matomo, a New Zealand registered company (NZBN 6106769), established by the creators of Matomo Analytics.
Our registered office is located at HLB Mann Judd, Level 8, 57 Symonds Street, Grafton, Auckland 1010, New Zealand.
During the recruitment process, we collect your personal information as an agency under the New Zealand Privacy Act 2020.
When we collect your personal information
(a) When you apply for a role advertised on our website
We collect the following personal information: your name, email address, phone number, country of residence if provided, the role you are applying for and your CV and cover letter or message. Our application forms are designed to collect only the personal information necessary for recruitment. If you provide us with additional information that we do not request or require (e.g., marital status, age, gender) we will handle the information in accordance with this Privacy Notice.
Purpose: We use the personal information you provide to evaluate your application and communicate with you during the recruitment process. If you do not provide your personal information, we may not be able to process your application.
(b) When we receive your personal information from our recruitment service providers
Where you are referred to us by a recruitment agency or search firm acting on your behalf, we receive personal information such as your name, contact details (address and country), CV, employment history, and any other information you have provided to that agency for the purpose of being considered for roles with us.
Purpose: We use this personal information to evaluate your suitability for the role and to communicate with you (directly or via the agency) during the recruitment process. If we cannot use this personal information, we may be unable to consider your application.
(c) When you upload your information to our Candidate management platform
When you apply for a role, your application details – including any documents you upload, such as your CV and cover letter – are collected and stored on our applicant tracking system, Lever, provided by Employ, Inc. Lever may also use AI-assisted features (Lever Talent Fit) to help our recruitment team review your application (see “Recruitment Assessments and AI-assisted Tools” below).
Purpose: We use this personal information, including the output of AI-assisted screening, to evaluate your application and manage your progress through our hiring process.
(d) When you take an aptitude test using our skills assessment providers
For certain roles, you may be invited to complete a skills or aptitude assessment, or to have your CV assessed by a resume scoring AI tool (see “Recruitment Assessments and AI-assisted Tools”).
Purpose: We use your assessment results, including AI-generated scores, to evaluate your suitability for the role.
(e) When you interact with us via social media, e.g., Meta (Facebook), LinkedIn, X , or other similar third-party platform, your personal information is processed by the social media platform providers according to their privacy policies and processes. We process your personal information collected from social media, such as your full name, business or personal email address, job title, company, telephone number and other personal information you choose to provide.
Purpose: We use the personal information to respond to your requests or communicate with you. If we cannot use your personal information, we would not be able to respond to your requests.
What Personal Information We Collect
Depending on the role and stage of the recruitment process, we may collect the following categories of personal information.
(a) Information You Provide Directly
- Name and preferred name
- Email address
- Telephone number
- Postal address
- Country of residence
- Nationality and work eligibility information where relevant
- CV
- Cover letter
- Employment history
- Educational background
- Professional qualifications and certifications
- Portfolio, publications, code samples or work samples
- Salary expectations
- Availability and notice period
- Responses to job-related questions
- Information you provide during interviews or communications with us
(b) Recruitment and Assessment Information
- Interview notes and evaluation records
- Recruitment communications
- Aptitude or technical test responses and results
- Assessment audio and image recordings, where applicable
- Reference information provided by your referees
- Recruitment decisions and related records
(c) Information Obtained from Third Parties
Where permitted by law, we may receive information from:
- Recruitment agencies;
- Referees nominated by you;
- Assessment providers;
- Publicly available professional sources such as LinkedIn or GitHub; and
- Background screening providers where applicable and authorised.
(d) Technical and Security Information
When you apply through our recruitment systems, we may collect limited technical information such as:
- IP address;
- Browser and device information;
- Application timestamps; and
- Security and audit logs.
This information is used solely for security, fraud prevention, troubleshooting and system administration purposes.
Sensitive Personal Information
We do not intentionally seek sensitive personal information during recruitment unless it is reasonably necessary and permitted by law.
However, you may voluntarily provide information that is considered particularly sensitive, such as information about health conditions, disabilities or accommodation requirements; diversity information (ethnicity, religious or other beliefs); trade union membership; or other sensitive personal information.
Where we receive sensitive personal information, we will handle it in accordance with the New Zealand Privacy Act 2020, taking into account the sensitivity of the information, the purpose for which it was collected and the need for appropriate safeguards. We will only use or disclose such information where permitted by law.
Please do not include unnecessary sensitive information in your application materials.
How We Collect Your Personal Information
We collect personal information:
- directly from you through applications, emails, forms and interviews;
- from recruitment agencies acting on your behalf;
- from referees you nominate;
- from publicly available professional sources;
- from skills assessment providers;
- through recruitment systems and security monitoring tools; and
- from other sources where permitted by law.
Why We Use Your Personal Information
We use Candidate information to:
- assess your suitability for a role;
- administer recruitment and selection processes;
- schedule and conduct interviews;
- administer skills and aptitude assessments;
- communicate with you regarding your application;
- verify qualifications, experience and work eligibility;
- conduct reference checks;
- improve our recruitment processes;
- protect our systems and recruitment channels;
- establish, exercise or defend legal claims; and
- comply with legal and regulatory obligations.
If you do not provide certain information requested during recruitment, we may be unable to process your application.
Who We Share Your Personal Information With
A. Service providers acting on our behalf
We use a limited number of trusted external service providers for certain technical data processing and/or service offerings. These service providers are subject to privacy and security clearance before we engage them. We share with them only the information that is required for the services provided and we contractually bind them to treat any information we share with them as confidential and to process personal information only according to our instructions.
B. Third-party services we use
Some of the service providers we use may collect your personal information as independent agencies responsible for their own handling of your personal information (e.g., LinkedIn or TestGorilla). Please refer to the privacy policies of these third parties for full information about what personal information these third parties collect about you, how they process the information, for what purposes and how to exercise your privacy rights against them.
C. Other third parties
- Referees nominated by you
- Background screening providers, where applicable
- Professional advisers
- Regulatory authorities
- Law enforcement agencies, where required by law
- Employer of record service providers for Candidates who will be engaged via Employer of Record
Recruitment assessments and AI-assisted tools
We may use recruitment platforms, skills assessment tools and artificial intelligence (“AI”) technologies to assist our recruitment team. These tools may be used to:
- administer assessments;
- organise Candidate information;
- summarise interview notes;
- assist with recruitment administration;
- analyse assessment results; or
- improve recruitment efficiency and consistency.
AI systems are used solely as decision-support tools. We do not make hiring decisions based solely on automated processing or profiling that produces legal or similarly significant effects on Candidates. All recruitment decisions are made by appropriately authorised human reviewers.
A. Lever Talent Fit
We use Lever, provided by Employ, Inc. (“Lever”), as our Candidate tracking system. Lever includes AI-assisted features (“Lever Talent Fit”), such as screening support and CV analysis, which we use to help review applications.
Where these AI features are used, your application materials (e.g., your resume and responses to screening questions) may be analysed against job-related criteria to generate scores, summaries, or observations for our recruitment team’s review. These outputs support our recruitment team’s decisions; they do not replace human judgement, and we do not make hiring decisions based solely on automated processing.
Employ, Inc. and its relevant contractors process this information as our service provider, under contractual instructions from us.
An AI usage notice is shown on our career site and job descriptions where AI features are in use.
B. TestGorilla Assessments
For certain roles, Candidates may be invited to complete assessments administered through TestGorilla B.V. or to have their CV assessed using TestGorilla’s Resume Scoring AI tool. This tool analyses the content of your CV against job-related criteria to generate a compatibility score and supporting rationale for our recruitment team’s review. The tool does not use personally identifying details such as your name, photo, or contact information to generate the score, and any score is only one input reviewed by a human recruiter.
Under our agreement with TestGorilla, TestGorilla is responsible for certain processing activities carried out on its platform, while we are responsible for the use of assessment results in our recruitment decisions. You may contact either TestGorilla or us regarding the processing of your personal information, and we will assist you in exercising your applicable privacy rights.
TestGorilla uses your personal information for its own purposes, including operating and improving its platform, generating anonymised or aggregated benchmarking data, and AI-based scoring of your assessment responses. Please see TestGorilla’s Privacy Policy for details of its independent processing activities.
Assessment results are only one factor considered during recruitment and are always reviewed by human decision-makers.
International transfers
As a New Zealand-based organisation, we may share your personal information with our service providers located outside New Zealand, including in the European Union, United States or other jurisdictions. The privacy laws in these jurisdictions may differ from those that apply in New Zealand or your country.
Where overseas service providers process personal information solely on our behalf, we require them to handle that information in accordance with our instructions and appropriate contractual confidentiality and security obligations.
Where we disclose personal information to an overseas organisation that will use or disclose it for its own purposes, we comply with Information Privacy Principle 12 of the New Zealand Privacy Act 2020. This includes taking reasonable steps to ensure that the recipient is subject to privacy safeguards comparable to those required under New Zealand law, unless another permitted basis for disclosure applies.
For further information about international transfers, please contact: privacy@matomo.org.
Retention of information
We keep Candidate personal information only as long as reasonably necessary to manage the recruitment process, including maintaining records of recruitment decisions, considering candidates for future opportunities where appropriate and meeting our legal obligations.
Your Rights
Privacy rights vary depending on the applicable privacy laws. We are based in New Zealand and governed by the New Zealand Privacy Act and any privacy laws that may apply to the processing in the context of recruitment because of their extraterritorial application.
Under the New Zealand Privacy Act 2020, you have a right to request access to personal information we hold about you and ask us to correct it. If we do not make a requested correction, you may ask us to attach a statement of the correction sought to the information. We will respond to requests as soon as reasonably practicable and generally within 20 working days, subject to lawful extensions and statutory grounds for withholding information.
Although the Privacy Act does not provide an unconditional right to erasure, you may request deletion of your personal information. We will consider such requests in accordance with our legal obligations and retention requirements.
To exercise any of the rights mentioned in this Privacy Notice and/or if you have questions or comments about the use of your personal information, you may contact our privacy team: privacy@matomo.org.
Matomo may request additional information to verify your identity before responding to your request. We will respond within the response period prescribed by law or notify you of an extension of time, if permitted and necessary.
You have a right to complain to the Office of the Privacy Commissioner if you feel we have breached your privacy. For information about the complaints process refer to: https://www.privacy.org.nz/your-rights/making-a-complaint-to-the-privacy-commissioner/.
How We Protect Your Personal Information
Data security is important to us. We process your personal information securely, using appropriate technical and organisational measures designed to protect your information from unauthorised access, disclosure, alteration or loss. InnoCraft is ISO 27001 certified and maintains an information security management system aligned with that standard.
If you have any concerns about the security of your personal information, please contact us immediately using the contact details provided below.
Privacy Notice changes
We may update this Candidate Privacy Notice from time to time. If we do, we’ll let you know about any material changes, either by notifying you on the website or by sending you an email. The amended Privacy Notice will take effect on the Effective Date stated in the updated notice.
The version of this Privacy Notice in force is the one that applies on the date of your interaction with us described in this Notice.
Contact us
If you have any questions or concerns regarding this Candidate Privacy Notice or how your personal information is processed, please contact us by emailing privacy@matomo.org.
We aim to respond to your enquiries as soon as reasonably possible. If you wish to give us feedback on how we have handled your request, please let us know. We are always trying to improve.