Privacy
Last updated 8 September 2026
This notice is awaiting sign-off. It describes accurately what the careers site does today, but our company registration details still need adding, and if you are applying from Europe there is a question about your data being stored in Singapore that we have not finished answering. If any of that matters to your decision to apply, email [email protected] and ask before you send anything.
This covers the Mad Monkey careers site — what happens to your details when you apply for a job or ask us to tell you when one opens. It does not cover booking a stay.
What we collect
If you apply for a role
- Your name, email address and, if you give it, your phone number.
- Which countries you would move to, and when you could start.
- What you tell us about your right to work.
- Your answer to the written question on the form.
- Your CV, and your video pitch if you send one.
Everything on the form except your name and email is optional. Nothing is collected about you from anywhere else — we do not buy candidate lists or look you up.
If you join the talent pool
Your email address, the countries you picked, and the exact sentence you agreed to. We store the wording itself so that if we ever change it, we can still tell you what you actually said yes to.
Automatically
Your IP address, briefly, so that one person cannot flood the form with submissions. It is stored as part of a counter, not against your application, and it is deleted about an hour later. We set no cookies on these pages and run no analytics — see cookies.
Why we hold it
To decide whether to offer you a job, and to talk to you about it. If you joined the talent pool, to email you when a role opens where you said you would move. Nothing is used for advertising, sold, or shared with other companies.
Who can see it
A named list of Mad Monkey people staff — three people at the time of writing. Access is checked against that list on every single page load, so when someone is removed they lose access immediately, not whenever they next log out.
Your CV and video are kept in private storage. They are never on a public link. When someone on the list opens one, they get a link that stops working after two minutes.
Where it is kept
On DigitalOcean servers in Singapore — both the database and the file storage. If you are applying from the EU or the UK, that means your details leave your country. We are still confirming the right legal mechanism for that, which is one of the reasons this notice is not signed off yet.
How long we keep it
| What | How long |
|---|---|
| Your application, CV and video | 12 months from the day you apply, then deleted automatically |
| Your application, if we offer you a job | Longer than 12 months — see below |
| Talent pool signup | 12 months, restarting if you submit the form again |
| IP address used for rate limiting | About an hour |
Deletion is a scheduled job, not a promise someone has to remember. It removes the files from storage first and then the records, so nothing is left orphaned in a bucket.
If we offer you a job, your application stops being only an application — it becomes part of the record of hiring you, including the evidence that you are allowed to work in the country. Records like that have their own legal retention rules, and they are longer than 12 months. We are still confirming exactly how long, so for now those applications are held back from the 12-month deletion rather than removed. If this applies to you, ask us and we will tell you what we hold.
What you can ask for
- A copy of what we hold about you.
- Anything wrong corrected.
- All of it deleted, at any point, including in the middle of a hiring process.
- To be taken off the talent pool list.
Email [email protected]. You do not need to give a reason, and asking will not affect an application you have already sent. If you are in the EU or the UK you can also complain to your national data protection authority.
Changes
If we start collecting something new, this page changes before the form does, and the date at the top changes with it.