Zillow Global Applicant Privacy Notice

Effective Date: October 1, 2025

This Zillow Group Global Applicant Privacy Notice ("Privacy Notice") explains how Zillow, Inc. and its affiliates (collectively, "Zillow Group," "Company," "we," "our," or "us") collect, use, disclose, and otherwise process personal data about recruits for employment and job applicants.

This Privacy Notice supplements other notices we may provide to you during the application process or upon commencement of employment. If there is any conflict between the Zillow Group Privacy Notice and this Privacy Notice, this Privacy Notice governs with respect to our use of personal data in connection with recruiting and job applications.

Your Consent

To apply for a role with Zillow Group, you must first create an account. You will be asked to read and acknowledge receipt of this Privacy Notice. By clicking “Create Account”, you acknowledge receipt of this Notice.

You may be asked to provide your consent during the application process to allow processing of certain specific or sensitive data or for international data transfers.  If provided, consent remains effective unless and until revoked. You may revoke your consent at any time by contacting privacy@zillow.com. Withdrawal will not affect prior processing.  If you are unable to agree to these terms, you will not be able to use the application portal and we may not be able to consider you for employment.

What Is Personal Data?

"Personal data" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual, when acting as a recruit or applicant to Zillow Group. Deidentified or aggregated data that cannot be reasonably linked to an individual is not considered personal data. Where we maintain deidentified data, we will not attempt to reidentify it unless legally required.

Our Collection of Personal Data

We collect the following categories of personal data:

• Identifiers and Contact Information
  • Name, email, address, phone number, signature
    
• Professional and Employment History
  • Previous employers, positions, licenses, certifications, references, potential conflicts
    
• Educational History
  • Degrees, schools, attendance dates, transcripts
    
• Compensation Information
  • Salary, equity, benefits, bonuses where permitted by law
    
• Internet or Electronic Activity
  • Career site analytics, application data, device/Wi‑Fi logs when visiting our offices
    
• Publicly Available Social Media Content (including content outside LinkedIn)
  
• Other Application and Interview Data
  • Resume, work authorization documents, cover letters, national IDs or other information necessary to confirm your eligibility to work in the country of application
    
• Inferences
  • Derived from other collected information, including abilities, interests, or preferences based on interactions with us

Zillow Group uses cookies, pixels, and similar technologies on its Careers site and job application portal to analyze performance and support security. See our Zillow Group Privacy Notice for more detail. The Zillow Group Privacy Notice governs our use of information collected from our website visitors. If there is any conflict between that notice and this Privacy Notice, this Privacy Notice governs for recruiting and job applications.

Sensitive Personal Data & Voluntary Disclosures

U.S. applicants may optionally provide gender, race/ethnicity, or veteran status for EEO monitoring. This is entirely voluntary, deidentified where feasible, and will not affect the evaluation of your application. We do not request information on health, religion, political beliefs, union status, or sexual orientation unless required by law or for accommodation purposes. Criminal history may be processed only where permitted by law.

Sources of Data

• You directly
  
• Recruiters, references, social media, public records, job boards
  
• Service providers acting on our behalf (e.g., scheduling and communications vendors)
  

Our Use of Personal Data

We use applicant data to:

• Evaluate candidacy and facilitate interviews
  
• Verify qualifications and eligibility
  
• Communicate status and future opportunities
  
• Improve hiring outcomes and candidate experience
  
• Comply with legal obligations (e.g., immigration, tax laws)
  
• Transfer to personnel files if hired

Lawful Bases for Processing (where required)

• Pre-contractual necessity (e.g., to enter into employment)
  
• Legal obligation (e.g., disability accommodation)
  
• Legitimate interests (e.g., interview travel reimbursement)
  
• Consent (if no other lawful basis applies)
  

Failure to provide certain information may impact our ability to evaluate your application.

For additional information on lawful bases for processing applicant data, refer to Annex A below.

Our Disclosures of Personal Data

We disclose personal data:

• Internally within Zillow Group entities
  
• To recruiters and application platforms
  
• To service providers (e.g., Employee Benefits and Human Resources, Information Technology, scheduling and communications vendors)
  
• In corporate transactions (e.g., modifications to corporate structures including sales and purchases, insolvency)
  
• To legal authorities, courts, or law enforcement
  
• At your direction or with your consent

We do not sell applicant data and do not share it for cross‑context behavioral advertising.

Our Retention of Personal Data

If hired, applicant data becomes part of your personnel file and is retained per our Records Retention Schedule. If not hired, we will retain applicant data for up to two (2) years from the date of final decision, unless a different retention period is required by law. 

Applicants may request earlier deletion at any time, subject to legal exceptions.

Use of AI / Automated Tools

Zillow Group does not make employment decisions based solely on automated processing, such as algorithmic decision‑making or profiling, that produces legal or similarly significant effects on you. Some tools may assist human recruiters by providing non‑binding candidate matching suggestions, but decisions always involve human review.

Jurisdiction‑Specific Information

California Applicants (CPRA). This section applies to California residents and is provided under the California Consumer Privacy Act as amended by the California Privacy Rights Act (Cal. Civ. Code §§ 1798.100 et seq.).

• No “sale” or “sharing.” We do not sell applicant personal information and do not share it for cross‑context behavioral advertising. We also do not use or disclose sensitive personal information for purposes that would trigger the CPRA right to limit use; where we collect sensitive information (e.g., for accommodations), we use it only for permitted, necessary purposes and with safeguards.
  
• Your rights (CPRA): (1) Know/Access the categories and specific pieces of personal information we collect, the sources, purposes, categories of recipients, and retention periods; (2) Correct inaccurate personal information; (3) Delete personal information, subject to legal exceptions; (4) Opt‑out of sale or sharing (not applicable to applicant data as we do not sell/share); (5) Limit use/disclosure of sensitive personal information (not applicable to applicant data as described above); and (6) Non‑discrimination for exercising your rights.
  
• How to exercise your rights (designated method): Email privacy@zillow.com.
  
• Verification: If you do not have a password‑protected account with us, we verify your request by matching at least two (2) data points that we maintain about you, for requests to obtain specific pieces of information we may request additional information to verify your identity based on the sensitivity of the data requested. Requests by authorized agents must follow the requirements in the Exercising Rights Through an Authorized Representative section below.

Non‑U.S. Applicants.

• The data controller is the Zillow Group entity named in your application.
  
• Your data may be transferred to the U.S. and processed under U.S. law.
  
• We use Standard Contractual Clauses (SCCs) and an Intra‑Group Agreement (IGA) between Zillow Group entities where required.
  
• If you are located in the EU, UK, or certain other jurisdictions, you have the right to: access your personal data; correct inaccurate personal data; delete personal data; restrict or object to processing; withdraw consent where processing relies on consent; and receive a copy of your personal data.
  
  • Germany: Controller = Virtual Staging AI Germany GmbH, Kaufingerstrasse 24, Munich, Germany 80331
  • Serbia: Controller = ShowingTime d.o.o. Beograd, with its registered seat at Bulevar Milutina Milankovica 3b/III, 11070 Belgrade, Serbia and company registration number: 21356131. In addition to the rights described above, if you believe that your personal data has been processed in violation of applicable information protection law, you have the right to lodge a complaint with the competent supervisory authority. You may contact the Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti here.
  • Mexico: Controller = Zillow Mexico, S. de R.L. de C.V. with address at Avenida Insurgentes Centro, No. 64, Oficina B - 601, Colonia Juárez, Alcaldía Cuauhtémoc, Código Postal 06600, Ciudad de México, Mexico.
    
  • Canada: Controller - Zillow (Canada), Inc., with address at 465B-1122 Mainland St, Vancouver, BC V6B 5L1.  If you have questions about this Privacy Notice or the handling of your personal data, contact privacy@zillow.com for any inquiries

Exercising Rights Through an Authorized Representative

You may authorize a third party (such as a legal representative, attorney, or other authorized agent) to submit a request on your behalf to exercise your privacy rights, in accordance with applicable law. Depending on your location, we may require the following to validate such a request:

• A valid power of attorney, signed authorization letter, or other written evidence of delegation; and
  
• Contact information and identification for both you and your representative.

We evaluate requests submitted through authorized representatives on a case‑by‑case basis, consistent with local legal requirements. For example:

• California (CPRA): Agents must submit proof of written authorization or power of attorney under Probate Code §§ 4000–4465. Zillow may confirm authorization directly with the applicant.
  
• European Union / UK: No formal “agent” mechanism is required; any written delegation will be honored subject to GDPR/UK GDPR.
  
• Mexico / Brazil / Canada / Serbia: Local laws recognize third‑party representation through formal or notarized documentation. We may request additional evidence where needed under national regulations.
  
• India (DPDP Act): You may exercise your rights through a “nominee” designated under Section 14 of the Act. Proof of nomination may be requested where applicable.

If required by law, we may reject requests that do not include sufficient evidence of authorization.

Identity Verification Standards

Before processing any request to access, correct, delete, or otherwise exercise rights related to your personal data, we must take steps to verify your identity to protect against unauthorized access. The methods we use may vary based on: (i) the nature and sensitivity of your request; (ii) the jurisdiction from which the request originates; and (iii) our relationship with you (e.g., whether you are a current or former applicant).

We may require you to provide: (a) information that matches records we already maintain (e.g., email, application ID, or recruitment history); (b) government‑issued identification or similar documentation (where permitted and appropriate); or (c) successful re‑authentication through a secure account portal, where available. If you are acting through a representative, we may also verify your identity independently before processing the agent’s request. We may deny a request where identity cannot be reasonably verified, or where doing so may compromise the rights of others or violate legal obligations.

Equal Employment Opportunity (EEO) Statement

Zillow Group is an EEO employer. We do not discriminate against any applicant or employee on the basis of race, color, sex, religion, national origin, age, disability, or any other consideration made unlawful by applicable federal, state, or local laws. Zillow Group also prohibits harassment of applicants and employees based on any of these protected categories.

Assistance for Disabled Applicants (ADA/ADAAA – U.S.)

Zillow Group complies with all applicable laws related to consideration of unemployment status and the Americans with Disabilities Act (ADA), the ADA Amendments Act of 2008 ("ADAAA"), and relevant state laws. Reasonable accommodations will be provided where necessary to enable qualified applicants to perform the essential functions of a job. Employment offers may be contingent upon medical exams or skill/agility testing as appropriate.

Updates to This Privacy Notice

We may update this Privacy Notice periodically. When we do, we will update the Last Updated date and highlight material changes.

Contact Us

• Email: privacy@zillow.com
  

ANNEX A — Purposes and Legal Basis (Applicants – EEA/UK GDPR and U.S.)

Lawful Basis for Processing (where required)

United States. We process applicant information for legitimate business purposes, including recruiting/placement, security and fraud prevention, debugging and auditing, compliance and legal defense, analytics/process improvement, reimbursements, and communications. If we use a background screening vendor, we comply with the Fair Credit Reporting Act (FCRA) and state equivalents (stand‑alone disclosure and written authorization; pre‑adverse and adverse action steps; job‑relatedness/individualized assessment as required). For accommodations, we follow ADA/ADAAA and applicable state laws. For job alerts/marketing, we comply with CAN‑SPAM (email) and TCPA/CTIA (texts) and obtain any required consents. 

EEA/UK (GDPR/UK GDPR). We rely on: (i) Art. 6(1)(b) pre‑contractual necessity (to evaluate your application, schedule interviews, and move toward an employment contract); (ii) Art. 6(1)(c) legal obligation (e.g., equal opportunities reporting where required, health & safety, immigration/right‑to‑work at the appropriate stage); and (iii) Art. 6(1)(f) legitimate interests (recruitment operations, security/fraud prevention, analytics/process improvement, and establishing/defending legal claims). Where we process special‑category data, we rely on Art. 9(2)(b) (employment/social protection), Art. 9(2)(h) (occupational health), or Art. 9(2)(g) (substantial public interest under local law); if none apply, we will seek explicit consent (Art. 9(2)(a)) and provide a genuine alternative where feasible. Criminal‑convictions data (if any) are processed only under Art. 10 where authorised by member‑state law and with appropriate safeguards.

Failure to provide certain information may impact our ability to evaluate your application.

Standard (non‑special‑category) personal data

Special‑category data (Art. 9 GDPR)

Criminal‑convictions/offence data (Art. 10 GDPR) and U.S. screening rules

End of Document