Applicants must give their explicit consent to their personal data being used and retained by ticking a box when they apply.
By default, the statement they accept is:
"I agree that YOUR COMPANY NAME may retain my personal data for two* years so I can be contacted about new opportunities."
*This number can be changed -
Finally, if you want to add more details, you can do this in the "Details for Your applicants" field.