Acquia Candidate Privacy Notice

Last updated: August 2026

Introduction

We appreciate your interest in Acquia. This Acquia Candidate Privacy Notice (“Notice”) applies to Acquia Inc., a Delaware Corporation having its principal place of business at 53, State Street, Boston, MA, 02109 and its affiliates (together, “we”, “us”).

If you apply for a job with us or otherwise express interest in joining us (or someone else applies or expresses interest on your behalf), we will receive, collect, disclose, process and retain certain information that identifies you or relates to you (“Personal Data”). This Notice explains the Personal Data that we may receive or obtain, the way we may use, disclose, secure and process it and your rights in relation to it. If we use automated tools, including artificial intelligence, to help screen your application, our separate Notice of Automated Screening Tools Used in Our Hiring Process (the “AI Screening Notice”) explains that use in more detail and describes additional rights you have in connection with it; that notice should be read alongside this one. If you subsequently become our employee, our processing of your Personal Data will be governed by the terms and conditions of the employment contract that you enter into with us and subject to any rights that you may have as our employee.

The “controller” or “data controller” or other analogous terms in applicable data protection laws shall be the specific Acquia legal entity which is hiring for the relevant role. Please feel free to write to us on the email address given in the Contact Us section below if you need further information.

Personal Data that we collect

We collect Personal Data in the following ways:

Information that you provide in your application

To apply for a role with us, we require limited information that identifies you and provides more information about you. This includes your full name, email address, phone number, city of residence, LinkedIn profile, current employer name, name of the person who referred you (if applicable), a confirmation that your are eligible to work in the country where the role in based and any information that you choose to include in your application (including in your resume’).

Information that we receive from third party sources

We may obtain additional information about you from third party sources such as recruitment and background check agencies, job portals/ boards, social media sites and other publicly-available information or from the person who referred you to us. We will take reasonable steps to ensure that these third parties have the necessary rights to disclose any Personal Data to us.

Information that we obtain during the interview and evaluation process

We may ask you to provide us with additional Personal Data or we may generate certain Personal Data (e.g. in the form of interviewer notes/ feedback) during the interview and evaluation process. For roles based in certain countries, we will require documents and information necessary to verify your right to work in that relevant country, which may include your date of birth, a copy of your current passport and/ or relevant VISA. Our offices may have closed circuit cameras installed and they may capture your image and track your movements when you are visiting our offices.

Some of the information you submit as part of your application may be reviewed with the help of automated tools, including artificial intelligence, before a human reviewer considers your application. See our AI Screening Notice for details on these tools, the categories of information they consider, and your related rights.

If you are shortlisted for a role with us, then we may require you to undergo certain background checks and/ or complete aptitude tests. We will provide information about the additional processing involved in these activities and seek your prior consent for it (wherever necessary).

We will endeavor not to obtain any information that is not relevant for the purposes of the interview and evaluation process. At the time of collection, we will inform you of any information that we consider as mandatory for such purposes. If you refuse to provide any such mandatory information, it may impact your chances of being selected.

Additional information that you may choose to provide

We may receive additional information that you voluntarily choose to provide to us (including in any optional documents that you include along with your application).

Sensitive Personal Data

As a general rule, we do not require any Personal Data that is sensitive or considered as special category Personal Data under applicable data protection laws (“Sensitive Personal Data”). But we may ask you for limited demographic information (e.g. your ethnic background or disability status) but you will be given a choice not to provide it. Your choice will not have any impact or prejudice on your application or influence our decisions in any way.

Purpose of collection and use of your Personal Data

We will use your Personal Data for the following purposes:

  • To evaluate your job application for suitability and eligibility for current or future job opportunities with us, including to match your skills, interests and credentials to the relevant job opportunity;
  • To communicate with you regarding your application including to facilitate setting up of interviews or meetings;
  • To inform the person who referred you (if applicable) of the status of your application;
  • To decide whether or not to offer you the role;
  • To administer, update and track your application status;
  • To prepare, discuss and execute an employment contract with you (if you are selected);
  • To meet our obligations under and requirements of applicable laws;
  • To defend ourselves and our officers against threatened or actual claims, demands or other legal proceedings and/ or to exercise our legal and contractual rights;
  • To carry out internal analysis and reporting;
  • To enable due-diligence or similar activities in anticipation of and/ or to transfer your Personal Data pursuant to, any corporate reorganization, sale, merger, consolidation, joint venture, assignment or other disposition of all or part of our business, asset or stock.

As required under applicable laws, we may use your Sensitive Personal Data to generate aggregated reports which are submitted to government authorities and for internal reporting on diversity, equity and inclusion matters. In such cases, we will ensure that such reports do not have any information that can identify you. As described in our AI Screening Notice, we use certain automated tools, including artificial intelligence, to help screen applications. A trained member of our recruiting team reviews the output of these tools before any decision affecting your application is made, and no applicant is rejected, advanced, or otherwise affected based solely on an automated output without that human review.

Your rights

Depending on the applicable local data protection laws, you have certain rights relating to your Personal Data including, but not limited to:

  • Access to your data;
  • Rectification
  • Erasure (“right to be forgotten”)
  • Restriction of Processing
  • Object, opt-out, withdrawing your consent
  • Transfer of your data

Acquia provides you with the ability to exert any such right through the self-service mode under the User Management field of your Acquia Academy account. However, we will retain any information in its original form to the extent it is necessary for us to comply with applicable laws or to exercise our legal rights or perform our legal or contractual obligations.

If our use of automated screening tools is relevant to your application, our AI Screening Notice describes additional rights you have in that context, including the right to request human review of an automated flag, to request an alternative evaluation process, and to contest an automated outcome.

In addition - depending on the jurisdiction applicable to you, e.g. where the GDPR applies -, you have a right to lodge a complaint with the relevant supervisory authority.

Contact us

For any queries or concerns, you may contact us at: Acquia Inc. Global Data Protection Officer Email - [email protected]

EU Representative (GDPR Art. 27)

If you are located in the European Union (EU) or European Economic Area (EEA), Acquia, Inc. has appointed Acquia Sarl to act as our representative, as required by Article 27 of the GDPR. Contact details: Acquia Sarl, 7 rue Meyerbeer, 75009 Paris, France; [email protected]; +33 01 42 46 79 92.

UK Representative (UK GDPR Art. 27)

If you are located in the United Kingdom, Acquia, Inc. has appointed Acquia LTD to act as our UK representative, as required by Article 27 of the UK GDPR. Contact details: Acquia LTD, Davidson House, Forbury Square, Reading, Berkshire RG1 3EU, United Kingdom; [email protected]; +44 (0)1865 520 011.

India Representative (DPDP Act, 2023)

If you are located in India, Acquia processes your Personal Data in accordance with India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Acquia is not currently required to appoint a local representative under the DPDP Act. Indian applicants may direct privacy enquiries, rights requests, and grievances to Acquia's Global Privacy Officer: Acquia Inc, 53 State Street, 10th Floor, Boston, MA 02109, USA; [email protected].