Most requests never reach you. A candidate opens /apply/me, gets a one-time link by e-mail, sees everything held about them, downloads a machine-readable copy, and changes their optional consents on the spot.
Deletion requests go to privacy@offerrole.com and are completed within 30 days. The data is removed, and a tombstone in the consent ledger records that the request was honoured, with no personal data in it.
As the employer you remain the controller for your applicants, so a request sent to you directly is yours to answer — and an export of the applicants concerned, from the job's Applicants page, is the place to start. The platform's side is set out in the DPA (/legal/dpa).
Posting and reviewing are free. Every stage, e-mail and export described here is in the console from the first sign-in.