Privacy Notice
Last updated 17 August 2026
Controller
Pass (Oventro Technologies Ltd) is the data controller for the personal data described here. Contact hi@getonpass.com for any data protection question or to reach our data protection contact.
What we collect
Account details (name, handle, email, phone), professional information (roles, venues, skills, availability, pay expectations), content you upload (clips, images), messages sent through Pass, and device and usage data such as IP address, app version and interactions.
Why we use it
To run your Pass profile and work record, to confirm roles with the venues you name, to surface you to venues hiring for matching roles, to keep the platform safe, and to improve the product.
Who sees it
Venues you apply to or allow to view your profile, and service providers who host, store and process data on our behalf under contract. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
Your rights — UK
Our lawful bases under UK GDPR Art. 6 are: contract (your account, work record and matching), legitimate interests (safety, fraud prevention, product improvement, showing your profile to hiring venues), consent (optional marketing and non-essential cookies, withdrawable at any time) and legal obligation. You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. Requests are free and answered within one month. You may complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
Your rights — US
If you live in California, Colorado, Connecticut, Virginia, Texas, Oregon or another state with a comprehensive privacy law, you can request access to, correction of, a copy of, or deletion of your personal information, and appeal a refusal. California residents also have rights under the CCPA/CPRA, including the right not to be retaliated against for exercising them. Submit a request in-app under Settings, or email hi@getonpass.com — we verify requests using your account credentials and respond within 45 days.
Automated decision-making
Pass uses software, including AI models, to rank and shortlist candidates for a venue that is hiring, and to suggest which chefs to notify about a shift. This is decision support, not decision making: no offer, rejection, hire, or removal from Pass is ever made automatically. A named person at the venue makes the hiring decision, and Pass records who they were and when they decided. Ranking uses the work record confirmed by your employers, the roles and locations you chose to list, your stated availability, and how well your experience matches what the venue asked for. It does not use race, religion, sex, age beyond the legal minimum to work, disability, or any special-category data, and it does not use facial or biometric analysis of your clips. You can ask us what factors applied to you, ask a human to review any ranking, correct the underlying record, or hide yourself from search entirely in Settings. Ask by emailing hi@getonpass.com or in-app under Settings.
International transfers
Some providers are outside the UK. Those transfers rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses, with a transfer risk assessment on file.
Retention and security
We keep your data while your account is active and for up to 24 months after closure to meet legal and dispute-resolution obligations, then delete or anonymise it unless we must keep it longer by law. Data is encrypted in transit and at rest, with access limited to staff who need it.
Children
Pass is not for anyone under 18 and we do not knowingly collect their data.
Questions, privacy requests or takedowns: hi@getonpass.com