Zillow Group Global Applicant Privacy Notice

No material change: wording, formatting, dates or contact details only.

Cosmetic change: formatting, typos, or contact details.

20261014_rev01COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 **EEA/UK (GDPR/UK GDPR).** We rely on: (i) **Art. 6(1)(b)** pre‑contractual necessity (to evaluate your application, schedule interviews, and move toward an employment contract); (ii) **Art. 6(1)(c)** legal obligation (e.g., equal opportunities reporting where required, health & safety, immigration/right‑to‑work at the appropriate stage); and (iii) **Art. 6(1)(f)** legitimate interests (recruitment operations, security/fraud prevention, analytics/process improvement, and establishing/defending legal claims). Where we process **special‑category data**, we rely on **Art. 9(2)(b)** (employment/social protection), **Art. 9(2)(h)** (occupational health), or **Art. 9(2)(g)** (substantial public interest under local law); if none apply, we will seek **explicit consent (Art. 9(2)(a))** and provide a genuine alternative where feasible. **Criminal‑convictions data** (if any) are processed only under **Art. 10** where authorised by member‑state law and with appropriate safeguards.
 Failure to provide certain information may impact our ability to evaluate your application.
 **Standard (non‑special‑category) personal data**
+<table id="table-5b4d9fa3-fab4-4cb0-8fa9-ec3c38337a48"><thead></thead><tbody><tr name="body"><td><strong>Purpose</strong></td><td><strong>Examples of personal information that may be processed</strong></td><td><strong>Grounds for processing</strong></td></tr><tr name="body"><td>Manage and evaluate applications</td><td>Identity and contact information (name, email, phone, address); application materials (CV, cover letter, portfolio); employment history; education and qualifications; professional licenses/certifications.</td><td><strong>EEA/UK:</strong> Art. 6(1)(b) steps prior to contract; Art. 6(1)(f) legitimate interests (recruit talent and manage applications). <strong>US:</strong> Legitimate business purposes (recruiting, auditing); disclosures per applicable state privacy laws (e.g., CPRA).</td></tr><tr name="body"><td>Conduct interviews and assessments</td><td>Interview schedules; interview notes and ratings; recordings (audio/video) where used; assessment results (technical/cognitive/skills); work samples.</td><td><strong>EEA/UK:</strong> Art. 6(1)(f); Art. 6(1)(b) where tests are part of pre‑contractual steps. <strong>US:</strong> Legitimate business purposes; consent/notices for recordings where required by state law.</td></tr><tr name="body"><td>Scheduling and communications</td><td>Emails, calendar invites, messaging metadata; time zone and availability; correspondence with recruiting and hiring teams.</td><td><strong>EEA/UK:</strong> Art. 6(1)(f) (coordinate/document process). <strong>US:</strong> Legitimate business purposes; consent for SMS/texts where required (e.g., TCPA/CTIA).</td></tr><tr name="body"><td>Right‑to‑work verification and immigration support</td><td>Work authorization/visa status; copies of identification documents; government identifiers where required by law.</td><td><strong>EEA/UK:</strong> Art. 6(1)(c) legal obligation (right‑to‑work); Art. 6(1)(f) (evaluate sponsorship) where necessary. <strong>US:</strong> Legitimate business purposes (sponsorship/eligibility evaluation). <strong>Note:</strong> Form I‑9 and similar checks occur <strong>post‑offer/employment</strong> under separate legal obligations.</td></tr><tr name="body"><td>Background and reference checks (non‑criminal)</td><td>Employment/education verification; professional references; qualification confirmations via third parties.</td><td><strong>EEA/UK:</strong> Art. 6(1)(f); Art. 6(1)(b) if initiated at your request; conduct only where proportionate/lawful. <strong>US:</strong> Legitimate business purposes; with required disclosures/authorizations where applicable.</td></tr><tr name="body"><td>Security and access management at offices</td><td>Visitor/badge logs; CCTV images; incident reports related to onsite interviews.</td><td><strong>EEA/UK:</strong> Art. 6(1)(f); Art. 6(1)(c) where mandated by local law. <strong>US:</strong> Security and fraud prevention business purposes; local signage/notice where applicable.</td></tr><tr name="body"><td>Information security and fraud prevention (candidate systems)</td><td>Account identifiers; authentication logs; IP address; device/browser information; portal activity logs.</td><td><strong>EEA/UK:</strong> Art. 6(1)(f). <strong>US:</strong> Security/bug detection business purposes.</td></tr><tr name="body"><td>Sourcing candidates and profile verification</td><td>Public professional profiles; job board information; contact details; outreach notes.</td><td><strong>EEA/UK:</strong> Art. 6(1)(f) with reasonable expectations and easy opt‑out. <strong>US:</strong> Legitimate business purposes; honor do‑not‑contact requests where applicable.</td></tr><tr name="body"><td>Talent pool / future opportunities</td><td>Contact information; roles/locations of interest; skills summary; communication preferences.</td><td><strong>EEA/UK:</strong> Art. 6(1)(a) consent (preferred); alternatively Art. 6(1)(f) with short retention and easy opt‑out where permitted. <strong>US:</strong> Consent/opt‑in for marketing emails/texts as required (e.g., CAN‑SPAM/CTIA); otherwise legitimate business purposes for talent pooling with easy opt‑out.</td></tr><tr name="body"><td>Job alerts and recruiting newsletters</td><td>Email address; notification preferences; limited engagement metrics (deliveries/opens/clicks).</td><td><strong>EEA/UK:</strong> Art. 6(1)(a) consent + e‑privacy rules. <strong>US:</strong> Consent/opt‑in and required unsubscribe mechanisms under applicable marketing laws.</td></tr><tr name="body"><td>Recruiting analytics and process improvement</td><td>Stage progression data; time‑to‑hire; aggregated/pseudonymized analytics.</td><td><strong>EEA/UK:</strong> Art. 6(1)(f) with minimization/aggregation where feasible. <strong>US:</strong> Legitimate business purposes (analytics/auditing).</td></tr><tr name="body"><td>Legal, regulatory, audit and dispute management</td><td>Records of hiring decisions; correspondence; audit trails; deletion records; documentation for compliance inquiries.</td><td><strong>EEA/UK:</strong> Art. 6(1)(c); Art. 6(1)(f) (establish, exercise or defend legal claims). <strong>US:</strong> Legal obligations and defense of claims.</td></tr></tbody></table>
+<table data-c11n-component="Table.Root" data-c11n-version="10.9.2" id="table-5b4d9fa3-fab4-4cb0-8fa9-ec3c38337a48"><thead data-c11n-version="10.9.2" data-c11n-component="Table.Header"></thead><tbody data-c11n-version="10.9.2" data-c11n-component="Table.Body"><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>Purpose</strong></td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>Examples of personal information that may be processed</strong></td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>Grounds for processing</strong></td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Manage and evaluate applications</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Identity and contact information (name, email, phone, address); application materials (CV, cover letter, portfolio); employment history; education and qualifications; professional licenses/certifications.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(b) steps prior to contract; Art. 6(1)(f) legitimate interests (recruit talent and manage applications). <strong>US:</strong> Legitimate business purposes (recruiting, auditing); disclosures per applicable state privacy laws (e.g., CPRA).</td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Conduct interviews and assessments</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Interview schedules; interview notes and ratings; recordings (audio/video) where used; assessment results (technical/cognitive/skills); work samples.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(f); Art. 6(1)(b) where tests are part of pre‑contractual steps. <strong>US:</strong> Legitimate business purposes; consent/notices for recordings where required by state law.</td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Scheduling and communications</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Emails, calendar invites, messaging metadata; time zone and availability; correspondence with recruiting and hiring teams.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(f) (coordinate/document process). <strong>US:</strong> Legitimate business purposes; consent for SMS/texts where required (e.g., TCPA/CTIA).</td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Right‑to‑work verification and immigration support</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Work authorization/visa status; copies of identification documents; government identifiers where required by law.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(c) legal obligation (right‑to‑work); Art. 6(1)(f) (evaluate sponsorship) where necessary. <strong>US:</strong> Legitimate business purposes (sponsorship/eligibility evaluation). <strong>Note:</strong> Form I‑9 and similar checks occur <strong>post‑offer/employment</strong> under separate legal obligations.</td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Background and reference checks (non‑criminal)</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Employment/education verification; professional references; qualification confirmations via third parties.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(f); Art. 6(1)(b) if initiated at your request; conduct only where proportionate/lawful. <strong>US:</strong> Legitimate business purposes; with required disclosures/authorizations where applicable.</td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Security and access management at offices</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Visitor/badge logs; CCTV images; incident reports related to onsite interviews.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(f); Art. 6(1)(c) where mandated by local law. <strong>US:</strong> Security and fraud prevention business purposes; local signage/notice where applicable.</td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Information security and fraud prevention (candidate systems)</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Account identifiers; authentication logs; IP address; device/browser information; portal activity logs.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(f). <strong>US:</strong> Security/bug detection business purposes.</td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Sourcing candidates and profile verification</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Public professional profiles; job board information; contact details; outreach notes.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(f) with reasonable expectations and easy opt‑out. <strong>US:</strong> Legitimate business purposes; honor do‑not‑contact requests where applicable.</td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Talent pool / future opportunities</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Contact information; roles/locations of interest; skills summary; communication preferences.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(a) consent (preferred); alternatively Art. 6(1)(f) with short retention and easy opt‑out where permitted. <strong>US:</strong> Consent/opt‑in for marketing emails/texts as required (e.g., CAN‑SPAM/CTIA); otherwise legitimate business purposes for talent pooling with easy opt‑out.</td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Job alerts and recruiting newsletters</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Email address; notification preferences; limited engagement metrics (deliveries/opens/clicks).</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(a) consent + e‑privacy rules. <strong>US:</strong> Consent/opt‑in and required unsubscribe mechanisms under applicable marketing laws.</td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Recruiting analytics and process improvement</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Stage progression data; time‑to‑hire; aggregated/pseudonymized analytics.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(f) with minimization/aggregation where feasible. <strong>US:</strong> Legitimate business purposes (analytics/auditing).</td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Legal, regulatory, audit and dispute management</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Records of hiring decisions; correspondence; audit trails; deletion records; documentation for compliance inquiries.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(c); Art. 6(1)(f) (establish, exercise or defend legal claims). <strong>US:</strong> Legal obligations and defense of claims.</td></tr></tbody></table>
 **Special‑category data (Art. 9 GDPR)**
+<table id="table-599f78ae-52a8-4980-8fa7-c20321558e74"><thead></thead><tbody><tr name="body"><td><strong>Purpose</strong></td><td><strong>Examples of personal information that may be processed</strong></td><td><strong>Grounds for processing</strong></td></tr><tr name="body"><td>Equal opportunity monitoring and reporting (voluntary)</td><td>Special‑category data such as race/ethnicity, disability status, gender identity, sexual orientation (where permitted), veteran/armed forces status (UK), collected on an optional basis and used in aggregate.</td><td><strong>EEA/UK:</strong> Art. 6(1)(f) or 6(1)(c) where required; + Art. 9(2)(b) employment/social protection or 9(2)(g) substantial public interest (where enabled by local law); otherwise 9(2)(a) explicit consent. <strong>US:</strong> Collected on a voluntary basis where permitted/required (e.g., OFCCP); not used in hiring decisions; aggregated/deidentified where possible.</td></tr><tr name="body"><td>Providing interview and workplace accommodations</td><td>Health/disability information strictly necessary to arrange accommodations (e.g., mobility, vision/hearing needs); limited medical notes if supplied by you.</td><td><strong>EEA/UK:</strong> Art. 6(1)(c) (employment law obligations); + 9(2)(b) employment/social protection or 9(2)(h) occupational health; consent (9(2)(a)) where required by local law. <strong>US:</strong> ADA/ADAAA and state analogues (job‑related, necessary accommodations); restricted access and separate medical file where applicable.</td></tr><tr name="body"><td>Trade union membership information (where necessary)</td><td>Trade union membership status to support leave, benefits eligibility, accommodations, or compliance with local labor requirements.</td><td><strong>EEA/UK:</strong> Art. 6(1)(c) where law imposes duties; + 9(2)(b) or 9(2)(g) under local law; otherwise 9(2)(a) explicit consent. <strong>US:</strong> Process only where necessary and lawful; limited access and safeguards.</td></tr></tbody></table>
+<table data-c11n-component="Table.Root" data-c11n-version="10.9.2" id="table-599f78ae-52a8-4980-8fa7-c20321558e74"><thead data-c11n-version="10.9.2" data-c11n-component="Table.Header"></thead><tbody data-c11n-version="10.9.2" data-c11n-component="Table.Body"><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>Purpose</strong></td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>Examples of personal information that may be processed</strong></td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>Grounds for processing</strong></td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Equal opportunity monitoring and reporting (voluntary)</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Special‑category data such as race/ethnicity, disability status, gender identity, sexual orientation (where permitted), veteran/armed forces status (UK), collected on an optional basis and used in aggregate.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(f) or 6(1)(c) where required; + Art. 9(2)(b) employment/social protection or 9(2)(g) substantial public interest (where enabled by local law); otherwise 9(2)(a) explicit consent. <strong>US:</strong> Collected on a voluntary basis where permitted/required (e.g., OFCCP); not used in hiring decisions; aggregated/deidentified where possible.</td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Providing interview and workplace accommodations</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Health/disability information strictly necessary to arrange accommodations (e.g., mobility, vision/hearing needs); limited medical notes if supplied by you.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(c) (employment law obligations); + 9(2)(b) employment/social protection or 9(2)(h) occupational health; consent (9(2)(a)) where required by local law. <strong>US:</strong> ADA/ADAAA and state analogues (job‑related, necessary accommodations); restricted access and separate medical file where applicable.</td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Trade union membership information (where necessary)</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Trade union membership status to support leave, benefits eligibility, accommodations, or compliance with local labor requirements.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(c) where law imposes duties; + 9(2)(b) or 9(2)(g) under local law; otherwise 9(2)(a) explicit consent. <strong>US:</strong> Process only where necessary and lawful; limited access and safeguards.</td></tr></tbody></table>
 **Criminal‑convictions/offence data (Art. 10 GDPR) and U.S. screening rules**
+<table id="table-aaf319a1-8ccd-40a9-a9c5-ce034db22042"><thead></thead><tbody><tr name="body"><td><strong>Purpose</strong></td><td><strong>Examples of personal information that may be processed</strong></td><td><strong>Grounds for processing</strong></td></tr><tr name="body"><td>Criminal background checks (post‑conditional offer; where permitted)</td><td>Criminal records results; disqualification lists; sanction registers; only job‑relevant data within lawful scope.</td><td><strong>EEA/UK:</strong> Art. 6(1)(f) or 6(1)(c) <strong>and</strong> Art. 10 (process only under authority of law with appropriate safeguards; member‑state rules apply). <strong>US:</strong> Conduct under the Fair Credit Reporting Act (FCRA) and state equivalents: stand‑alone disclosure and written authorization; pre‑adverse/adverse action notices; evaluate job‑relatedness and consider EEOC guidance.</td></tr><tr name="body"><td>Sanctions/watchlist and regulated‑role vetting</td><td>OFAC/AML/financial‑services checks where role or customer requirements warrant.</td><td><strong>EEA/UK:</strong> Art. 6(1)(c) where legally required; otherwise Art. 6(1)(f) + Art. 10 when criminal‑offence data are implicated (only if authorised by law). <strong>US:</strong> Legitimate business/legal obligations for regulated industries; follow applicable sectoral rules and recordkeeping.</td></tr></tbody></table>
+<table data-c11n-component="Table.Root" data-c11n-version="10.9.2" id="table-aaf319a1-8ccd-40a9-a9c5-ce034db22042"><thead data-c11n-version="10.9.2" data-c11n-component="Table.Header"></thead><tbody data-c11n-version="10.9.2" data-c11n-component="Table.Body"><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>Purpose</strong></td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>Examples of personal information that may be processed</strong></td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>Grounds for processing</strong></td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Criminal background checks (post‑conditional offer; where permitted)</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Criminal records results; disqualification lists; sanction registers; only job‑relevant data within lawful scope.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(f) or 6(1)(c) <strong>and</strong> Art. 10 (process only under authority of law with appropriate safeguards; member‑state rules apply). <strong>US:</strong> Conduct under the Fair Credit Reporting Act (FCRA) and state equivalents: stand‑alone disclosure and written authorization; pre‑adverse/adverse action notices; evaluate job‑relatedness and consider EEOC guidance.</td></tr><tr data-c11n-version="10.9.2" data-c11n-component="Table.Row"><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">Sanctions/watchlist and regulated‑role vetting</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell">OFAC/AML/financial‑services checks where role or customer requirements warrant.</td><td data-c11n-version="10.9.2" data-c11n-component="Table.Cell"><strong>EEA/UK:</strong> Art. 6(1)(c) where legally required; otherwise Art. 6(1)(f) + Art. 10 when criminal‑offence data are implicated (only if authorised by law). <strong>US:</strong> Legitimate business/legal obligations for regulated industries; follow applicable sectoral rules and recordkeeping.</td></tr></tbody></table>
 **End of Document**