In short
An applicant tracking system (ATS) brings job ads, applications and messaging into one place. For SMBs the essentials are your own careers page, multiposting, a clear pipeline and mobile use – plus a clean approach to applicant data.
What an ATS is – and why SMBs need one
Without a system, applications scatter across inboxes, spreadsheets and notes. Nobody knows who has been contacted, good candidates drop out, and time-to-hire climbs. An ATS keeps the whole process in one place – from advert to offer.
Example: a café group with three sites and 40 staff is hiring for the summer. Applications arrive by email, through a job board and in person. A fortnight later nobody is sure who has been called back – and the strongest candidate has taken another job.
Must-have features for small businesses
- Your own careers page, on-brand and mobile-friendly.
- Multiposting: one advert, many job boards.
- A pipeline or kanban so you can see each candidate’s stage at a glance.
- Scheduling and team scorecards in one place.
- Mobile use – in shift businesses, speed wins.
Short mobile applications without a CV
Shop, kitchen and care staff rarely have an up-to-date CV to hand – but they almost always have a phone. Ask only for what you need for a first decision: name, contact details, role and earliest start date. Make the CV optional.

Pipeline stages and response time
A good pipeline is short – five stages usually do:
- 1Received
- 2First contact by phone or message
- 3Interview or trial shift
- 4Team decision
- 5Offer or rejection
Speed matters: hourly-paid candidates often apply to several employers at once. Set a fixed response time, such as two working days, and agree in advance who in the team makes the call. At first, track just time-to-hire and application source.
Data protection in recruitment
Applicant data is personal and often sensitive. What matters is purpose limitation, restricted access and a deletion plan. As a rule of thumb, many employers keep rejected applicants’ data for around six to twelve months, then delete it.
The lawful basis is usually that processing is necessary to take steps before entering into a contract (Article 6(1)(b) UK GDPR). Under Article 13 you also owe candidates a privacy notice saying how you use their data and how long you keep it.
Talent pool: ask first
Want to keep a rejected candidate on file for future roles? The safest route is their consent – separate from the application and withdrawable at any time (Article 7(3) UK GDPR).
Data & anti-discrimination (UK)
- Basis: UK GDPR and the Data Protection Act 2018 govern applicant data.
- Retention: there is no fixed period – document your policy; ~6–12 months is common.
- Fair recruitment: the Equality Act 2010 protects nine characteristics from discrimination.
- Right to work: keep evidence for the whole of employment plus two years.

Keeping selection fair
A neutral advert, structured criteria and recorded decisions reduce discrimination risk – and lead to better hires. An ATS helps apply the same criteria to everyone.
Health questions are restricted: section 60 of the Equality Act 2010 generally bars you from asking about health or disability before offering the job, with narrow exceptions, such as whether someone can do a function intrinsic to the job. Watch advert wording too – ‘young, dynamic team’ can signal age discrimination.
Buyer’s checklist
- Own careers page and multiposting?
- Short application without a CV?
- A clear pipeline, including on mobile?
- Retention periods and access rights handled properly?
- Can it integrate with your HR or scheduling system?
