BWZ Recruitment Privacy Notice

Last Updated: February 2, 2026

Black & White Zebra Industries Inc. (“BWZ”, “we”, “us”) is committed to protecting and respecting your privacy. This Recruitment Privacy Notice explains how we collect, use, and store personal data in connection with our recruitment and hiring processes.

BWZ is headquartered in Canada and recruits candidates globally, primarily in Canada and the United States. This notice applies to applicants regardless of location, applies in addition to other privacy notices available on our website, and aligns with BWZ’s internal data privacy and information security policies. Privacy rights and obligations may vary depending on where you reside.

For the purposes of applicable data protection laws, including the General Data Protection Regulation (“GDPR”) where relevant, and other applicable privacy laws, BWZ acts as the data controller.

1. Recruitment Platforms We Use

We use third-party platforms to support our recruitment and hiring processes:

Lever (provided by Employ Inc.) is an applicant tracking system used to manage job applications, candidate communications, and recruitment processes.
Rippling is used as our core HR platform and may be used during recruitment, onboarding, and employment administration. Once an individual is hired, their employee data is managed primarily within Rippling.

Both platforms process personal data only on our behalf, in accordance with our instructions and applicable contractual data protection obligations.

2. Personal Information We Collect

Information you provide directly

We collect personal information you choose to provide when applying for a role, including through online applications, email, interviews, assessments, or other recruitment-related interactions. This may include:

Name, contact details, and location
Professional qualifications, experience, employment history, and portfolio materials
Records of correspondence with you or on your behalf, including communications with references or third parties you have chosen to involve in the recruitment process.
Any other information you voluntarily provide as part of the recruitment process

We may also collect limited information about how you interact with our careers website, such as pages visited, referral sources, and resources accessed. More information about how BWZ handles website and usage data is available in our general privacy policy.

Information from other sources

We may supplement your application with publicly available professional information, such as LinkedIn profiles or similar work-related sources.

In some cases, our recruitment team may proactively identify potential candidates using publicly available professional platforms or databases.

3. How We Use Your Information

Lawful basis for processing

Where required under GDPR, we rely on legitimate interests as the lawful basis for processing applicant personal data. Our legitimate interest is to assess, recruit, and hire qualified candidates and to manage our recruitment processes. This interest is balanced against the rights and reasonable expectations of applicants.

Purposes of processing

We use applicant information to:

Evaluate applications and assess suitability for roles
Consider candidates for current and future opportunities
Communicate with candidates throughout the recruitment process
Supplement application information with publicly available professional data
Improve recruitment processes and candidate experience

4. Automated Processing

Our recruitment platforms may assist with filtering or ranking candidates based on criteria defined by BWZ. These tools are used to support recruitment activities only. Final hiring decisions are always made by BWZ personnel and are not based solely on automated processing.

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect applicant data against unauthorized access, misuse, alteration, or loss. Access to applicant data is limited to individuals with a legitimate business need and subject to confidentiality obligations.

We maintain procedures to respond to suspected data breaches and will notify affected individuals and authorities where legally required. While we take reasonable steps to protect personal data, no method of transmission over the internet is completely secure.

Where data is stored

Applicant data may be stored or processed in jurisdictions where our service providers operate infrastructure, including Canada, the United States, and other locations. We apply appropriate safeguards to protect personal data and adapt our approach as required to meet applicable legal and regulatory requirements.

6. Retention of Applicant Data

BWZ retains applicant data for up to 12 months from the date of application.

In limited and specific circumstances, we may retain applicant data for a longer period where this is reasonably necessary, for example:

to consider an applicant for future opportunities,
to comply with legal obligations,
or to resolve disputes.

Where required by applicable law, we will notify you and/or obtain consent before extending retention.

Applicant data is deleted upon:

A verified deletion request, which we will act on without undue delay and typically within 30 days of verification
Use of available self-service tools (where applicable), or
Expiry of the applicable retention period.

7. Your Rights

Depending on your location, you may have rights regarding your personal data, including the right to:

Access and correct your personal information
Request deletion of your data
Object to or restrict certain processing
Request information about automated processing

GDPR-specific rights apply to individuals located in the EU/EEA and UK. U.S. applicants may have additional rights under applicable state privacy laws.

You may exercise your rights using available self-service tools or by contacting us as outlined below. We may need to verify your identity before fulfilling your request.

8. Questions, Requests, or Complaints

If you have questions or concerns about how your personal data is handled, or if you wish to exercise your privacy rights, you may contact our Privacy & Compliance team by email at [email protected] or by submitting our Data Subject Access Request (DSAR) form.

Where applicable, you may also have the right to lodge a complaint with a relevant supervisory authority in your jurisdiction.