Privacy Policy

Talentedbridges is the data controller for personal information you submit through this platform. For specific role applications, our employer clients may act as joint controllers for data they receive after you actively apply to one of their roles.

• Account data — name, email, password hash, role, and authentication metadata.
• Profile data — date of birth, address, country, and résumé you upload.
• Application data — the roles you apply to, your application status, and recruiter notes related to those applications.
• Communication data — messages exchanged with recruiters through our in-platform chat.
• Contract data — your placement agreement, electronic signature, optional witness signature, signing timestamp, and a SHA-256 hash of the document.
• Operational data — session logs, IP address and user-agent for security and fraud-prevention purposes.

We rely on the following GDPR lawful bases:

• Contract — to deliver the placement services you request.
• Legal obligation — to keep records we are required to retain by applicable law.
• Legitimate interest — to secure the platform, prevent fraud, and improve our service.
• Consent — for any optional communications. You can withdraw consent at any time.

We do not charge candidates to register, apply, interview, or sign an agreement. Because our revenue comes from vetted employer clients, we never sell candidate data to third parties, and we never use your profile for advertising.

Your data is only shared in three controlled ways:

• With the specific employer you actively apply to, scoped to that role.
• With our sub-processors below, under data-processing agreements.
• With authorities, where compelled by a valid legal order.

Candidate profiles and employer-client profiles live in separate access partitions. Candidates never see client internal identifiers; employer clients only see candidate information that is directly relevant to a role you have applied to.

All traffic is served over HTTPS. Authentication uses secure password hashing and short-lived session tokens. Uploaded documents (résumés, signed contracts) are stored in private buckets with row-level access policies — only you and authorised staff can retrieve your own files. Contracts include a SHA-256 hash so any future tampering is provable.

• Active accounts — kept for as long as you use the service.
• Inactive accounts — automatically reviewed after 24 months of inactivity.
• Signed contracts — retained for the period required by applicable law, minimised and encrypted.
• Chat history — retained while the related thread is active and deleted on account erasure.

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data via your profile.
• Request erasure of your account and personal data.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, message us via the contact page. We respond within 30 days.

You can request full account deletion at any time. Within 30 days we erase your personal profile, uploaded documents, application history and chat messages. Records we are legally required to retain (such as signed contracts) are minimised, encrypted and stored in segregated, access-controlled storage.

We use a small number of strictly necessary cookies to keep you signed in and protect against forgery. We do not use third-party advertising cookies. You can clear cookies at any time from your browser settings.

Every marketing or non-essential email contains a one-click unsubscribe link. Transactional emails — interview confirmations, contract delivery, status updates — are required to deliver the service and cannot be opted out of while your account is active.

Our sub-processors may store and process data in regions outside your country of residence. When that happens, we rely on Standard Contractual Clauses or equivalent safeguards approved by the European Commission.

We may update this policy as our service evolves. Material changes will be announced by email or via a prominent notice on the platform at least 14 days before they take effect.

Questions, complaints or data requests? Reach our privacy team via the contact page.