Recruiting Privacy Notice

Neko Health values your privacy and is committed to keeping you informed and confident about how we process your personal information. This privacy notice explains what personal information we collect and process about you as a candidate, why we do it, how we use the personal information, and the measures we take to ensure compliance with applicable laws. It also outlines your rights regarding your personal information. Please contact us if you have any questions about our data practices using the contact details provided in the “Contact” section at the end of this notice. Towards the end of this policy, we also describe how we handle personal information of people who has been named as references by a candidate.

Who’s responsible for processing my personal information?

Neko Health Inc is responsible for processing of your personal information in the market where the role you have applied for is located in the U.S., unless the ad specifically refers to another legal entity.

Data protection principles

We will comply with data protection law and principles, which means that your data will be:

Used lawfully, fairly and in a transparent way.
Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
Collected only if necessary and relevant to the purposes we have told you about and limited only to those purposes.
Accurate and kept up to date.
Kept securely and only as long as necessary for the purposes we have told you about.

Where is your personal information collected from and why?

With your separate approval (which is usually obtained in connection with your submission of the application form on our website) we may keep and process your personal information for opportunities that may arise in the future.

If you fail to provide personal information

If you fail to provide information when requested, which is necessary for us to consider your application (such as evidence of qualifications or work history), we will not be able to process your application successfully. For example, if we require a credit check or references for this role and you fail to provide us with relevant details, we will not be able to take your application further.

How we use particularly sensitive personal information

We do not collect sensitive Personal Information from candidates other than in certain limited circumstances, such as health information as needed to provide reasonable accommodations to a candidate with disabilities. We will confirm the lawful work authorization of any candidate to be put forward for interview.

Data sharing

With which third parties do we share personal information and why?

We will only share your personal information with third parties assisting Neko Health to carry out or which otherwise may get involved in our recruitment process, including:

In addition to the third parties set forth above, we may share your personal information with service providers such as providers of applicant tracking systems, hosting services and analytics tools. Such third parties can only process data on our behalf and instructions, typically only to provide the relevant service, and are not allowed use your data for their own business purposes. All third parties described above are required to take adequate security measures to protect your personal information.

Data security

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need-to-know. Relevant staff has received training on handling of personal information, will only process your personal information according to internal policies and are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Processing of personal information of reference persons

If you have been named as a reference by a candidate, we will collect certain personal information about you, including your name, role current employer, relationship with the relevant candidate and contact details. We will process your data for the purpose of contacting you for reference checks and will store any information you provide as notes or transcripts in our systems. We may also store recordings. Our legal basis for this processing of your personal information is our legitimate interest to carry out a well-informed, fair and efficient recruitment process. We will store your data for the same period which we store the candidate personal information as further described above. Otherwise, the provisions and information about processing of candidate data of this policy applies equally to our processing of personal information of reference persons.

California: Notice at Collection

This Notice applies to candidates who are California residents and their personal information.

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

“Candidate Information” means personal information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular candidate.

The categories of information collected, the sources and purposes for collection are all set out above in the section labelled ‘Where is your personal information collected from and why?’

The retention period for all categories of Candidate Information is three years from the end of the application process.

We do not sell or share Candidate Information for cross-contextual behavioral advertising purposes.

We do not use applicant tracking systems (ATS) which use machine learning or statistical models to (for example) score or rank candidates, filter resumes automatically or recommend candidates for interview. We only use ATS to store, organize and track applications and efficiency gains like recording and transcribing interviews and scheduling meetings.

We do not create or use AI-generated profiling, use AI systems in producing or analyzing your interview test data, or track your precise geolocation data.

We do not share your personal information for the purpose of cross-context behavioral advertising nor sell your information.

We only share your personal information within the Neko Health corporate group and the third parties set out above in the main body of this notice only for purposes connected to your candidacy or claims in connection therewith, such as by forwarding a copy of your application to an appropriate company representatives in relevant group companies or as necessary to establish, exercise or defend against claims or exercise our rights. We do not share your personal information for the purpose of cross-context behavioral advertising nor sell your information.

You have a number of rights related to your personal information, including:

Right to know: To request disclosure of personal information collected, sources, categories shared/sold, and business purposes (past 12 months).
Right of access: To obtain a copy of your personal information, including categories collected, sources, purpose for collecting, selling or sharing the information, thirdparty recipients, and specific pieces of personal information collected.
Right to delete: To request deletion of your personal information.
Right to opt out: To decline the sale or sharing of personal information.
To correct: To update inaccurate personal information.

You may exercise your privacy rights by emailing our data protection officer at dpo@nekohealth.com or by writing to us at:

Attention: Data Protection Officer

Neko Health Inc

524 Broadway

New York, NY 10012 USA

You will not be discriminated against for exercising your rights under California privacy law.

Illinois Notice

We do not use artificial intelligence with respect to recruitment, hiring, promotion, renewal of employment, selection for training or apprenticeship, discharge, discipline, tenure, or the terms, privileges, or conditions of employment, that has the effect of subjecting candidates to discrimination on the basis of protected classes or to use zip codes as a proxy for protected classes. We do not use AI for video interviews or employment decisions.

New York City Notice

We do not use automated employment decision tools or AI systems to substantially assist in the hiring decision process or to make hiring decisions.

Contact

If you have any questions or concerns about this privacy notice or how we handle your personal information, please contact our data protection officer (DPO) at:

Neko Health Inc

524 Broadway

New York, NY 10012 USA dpo@nekohealth.com

Changes to this policy

We may update this Privacy Notice from time to time. For example, in the event of new or changed processing of your personal information or if we decide to further clarify the information herein or if necessary to comply with law. We encourage you to regularly visit this notice to stay informed about potential changes. The date of the last revision is set forth below.

Last revised: 12 January 2026