Last updated: 16 September 2026
Whip respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains what information Whip collects, why we use it, who we may share it with, how long we keep it and the rights you have over your information.
Whip is a UK automotive careers and recruitment platform operated as an unincorporated business. For the purposes of UK data protection law, Whip is the data controller for the personal information described in this policy.
For privacy enquiries or requests relating to your personal information, contact hello@whipauto.co.uk.
This policy applies to people who visit or use the Whip website, create a candidate account or Whip Talent profile, upload a CV, participate in an employer introduction through Whip, use Whip on behalf of an employer, or otherwise communicate with Whip.
Whip Talent is intended for people aged 18 or over.
The information Whip collects depends on how you use the service.
If you create a candidate account or Whip Talent profile, we may collect:
Candidate profiles are created by candidates themselves. Whip does not currently create Whip Talent profiles by scraping candidate information from other websites or importing CVs obtained elsewhere.
Candidates may choose to upload a CV to Whip.
Your CV is not displayed to employers browsing Whip Talent.
Because CVs are created by candidates, they may contain information Whip does not request, including sensitive personal information. Please do not include sensitive personal information in your CV unless it is genuinely necessary for your application.
Whip does not use sensitive information contained incidentally within a CV for Talent matching or employer discovery.
If you use Whip on behalf of an employer, we may collect information including your name, work email address, employer or organisation, job role, account information, Talent activity, candidate introduction requests, correspondence with Whip and information relating to recruitment introductions and their outcomes.
Access to Whip Talent is restricted to employers or recruiters approved by Whip. Creating an employer account does not automatically provide access to candidate profiles.
When you visit Whip, technical and usage information may be collected, such as information about your browser, device, pages visited and interaction with the website.
Whip uses website analytics to understand how the service is used and to help improve it. More information is provided in our Cookie Policy.
Whip may use personal information to:
Depending on the purpose, Whip may process personal information because it is necessary to perform a contract or take steps requested before entering one, because Whip has a legitimate interest in operating and protecting its service, because you have given consent, or because processing is necessary to comply with a legal obligation.
Where processing is based on consent, you may withdraw that consent.
If you choose to be included in Whip Talent, approved automotive employers may discover your professional profile.
Information visible to an approved employer may include relevant professional information such as your desired role, general location, automotive experience, brands worked with, skills, qualifications, accreditations and career preferences.
Employers browsing Whip Talent cannot see your private contact details, full home address, account/login information or CV.
Enabling Whip Talent visibility does not give employers permission to contact you directly or receive your CV.
If an approved employer is interested in your profile, they may submit an introduction request to Whip.
An introduction request is a request to Whip. It does not authorise Whip to disclose your private information to that employer.
Whip will contact you and provide sufficient information about the opportunity for you to decide whether you are interested. This may include the employer's identity, relevant role, location, opportunity details and an appropriate message supplied by the employer.
You decide whether the introduction proceeds.
Only where you agree will Whip facilitate the introduction and share information reasonably necessary to connect you with that employer.
Agreeing to an introduction does not automatically authorise Whip to send your CV.
Whip will ask for your specific agreement before sharing your CV with an employer.
Permission applies to that particular introduction and does not provide employers with general access to your CV.
Whip displays automotive job vacancies to help users discover career opportunities.
Currently, applications for jobs displayed on Whip are completed through the relevant employer or external recruitment website.
Whip does not currently receive applications submitted through those external websites.
When you leave Whip and provide information to another website, that organisation is responsible for how it handles your information. You should review its privacy information before submitting personal data.
If Whip introduces direct applications through the Whip platform in future, this Privacy Policy will be updated accordingly.
Whip distinguishes between communications required to provide the service and optional marketing or opportunity communications.
We may send service communications relating to your account, account security, candidate introduction requests, important changes to the service and privacy or administrative matters.
Candidates may separately choose whether to receive job and opportunity emails from Whip.
Joining Whip Talent does not require you to agree to optional marketing communications, and you can change your marketing preferences or withdraw consent at any time.
Whip does not sell candidate personal information.
We use trusted service providers to help operate Whip, including providers for website hosting, database and authentication services, secure file storage, email, analytics and technical infrastructure.
These currently include:
Webflow — website hosting and operation.
Supabase — database, authentication and secure file storage. Whip's Supabase project is hosted in the AWS Europe (Ireland) region (eu-west-1).
Google Analytics — website usage analytics. Whip currently uses a limited analytics configuration and does not have Google Signals or user-provided data collection enabled.
Zoho Mail — business email and communications.
Service providers may use their own approved subprocessors where necessary to provide their services.
We may also disclose information where required by law, where reasonably necessary to protect Whip or others from fraud or security threats, or to establish, exercise or defend legal claims.
Candidate information is only disclosed to prospective employers in accordance with the Whip Talent and introduction process described in this policy.
Although Whip's primary Supabase project is hosted in Ireland, some technology providers or their subprocessors may process information in other countries.
Where UK personal information is transferred internationally, Whip will take appropriate steps to ensure that applicable safeguards required by UK data protection law are in place.
Whip does not keep personal information for longer than reasonably necessary for the purpose for which it was collected.
We generally retain a candidate profile while the account remains active.
If a candidate account has been inactive for 24 months, Whip may contact the candidate to ask whether they wish to keep their profile.
Where the candidate does not respond after appropriate notice, Whip may delete or anonymise the profile.
CVs are retained while required to provide the candidate's Whip service and are deleted when they are no longer required, subject to any legitimate legal or record-keeping requirement.
Records relating to completed or closed candidate introductions or placements may generally be retained for up to six years after the introduction process closes, where necessary for business, contractual, accounting, dispute or legal purposes.
This does not mean a candidate's live Talent profile or CV will automatically be retained for six years.
Candidates may request deletion of their Whip account. Whip also intends to provide self-service account deletion.
When an account is deleted, Whip will delete or anonymise the candidate profile, CV and other information that is no longer required.
Limited information may be retained where genuinely necessary to comply with law, maintain essential business records, resolve disputes, prevent fraud or establish, exercise or defend legal claims.
Whip takes reasonable technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.
Access to candidate information is restricted according to the role and purpose for which it is required.
No online service can guarantee absolute security, but Whip will continue to review its security arrangements as the platform develops.
Depending on the circumstances, UK data protection law may give you rights including:
These rights are not all absolute and their application depends on the circumstances and lawful basis for processing.
You have the right to object to your personal information being used for direct marketing.
To exercise your rights or ask a privacy question, contact hello@whipauto.co.uk.
We may need to verify your identity before acting on certain requests.
If you have concerns about how Whip handles your personal information, please contact hello@whipauto.co.uk.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Whip may update this Privacy Policy as the platform, services or legal requirements change.
The latest version will be published on the Whip website and the Last updated date at the top of this page will be updated when appropriate.
Where a change materially affects how Whip uses existing personal information, additional notice will be provided where required.