Privacy

The short version

TalentBridge is software recruitment agencies use to run a hiring process and share progress with their clients. Most of the personal data in it is not ours and not about our customers — it is about job candidates, uploaded by the agency using the service. We hold it on their instructions and do not use it for anything of our own. We do not sell data, we do not advertise, and we do not track you around the internet.

Two different relationships

For the account of a recruiter using TalentBridge — their name, email and sign-in details — we are the data controller.

For candidate data an agency puts into the service, the agency is the controller and we are a processor. They decide whose data goes in, why, and how long it stays. If you are a candidate and want your data removed, the fastest route is the agency you applied through; you can also contact us at [PRIVACY CONTACT EMAIL] and we will pass it on and act on it.

What is stored

• Account details for agency users: name, email address, job title, and an authentication record.
• Candidate records the agency creates: name, contact details, location, current role and employer, salary expectation, notice period, skills, and any notes or pitch the recruiter writes.
• Documents the agency uploads, including CVs and right-to-work or background-check paperwork.
• Interview times, attendees, scorecard ratings and written feedback.
• Client-side activity: which candidates a client approved or rejected, any reason they gave, and comments they left.
• A history of when each candidate moved between pipeline stages, and when a client responded — this is what the reports are built from.
• Placement records: start date, salary and the agency's fee.

We do not ask for and have no use for special category data. If an agency puts it in a free-text field anyway, that is their decision as controller and their responsibility to have a lawful basis for.

Sharing with an agency's clients

The point of this service is that an agency can show a client their hiring progress without the client creating an account. That works through a secret link. Anyone holding the link can see whatever the agency chose to share on it, so it is a credential and should be treated like one.

The agency controls exactly what appears: a candidate is not visible to a client until it is explicitly shared, and a candidate can be shown anonymously, with their name and employer withheld until the client says they are interested. Links can be given a passcode and an expiry, and can be revoked at any time. These pages are excluded from search engines and send no referrer.

Where it lives

Everything is stored with the providers below. Our database and file storage are in Singapore. If you are in the UK or EEA, that means your data is transferred outside it. We rely on the safeguards in our agreements with these providers; ask us and we will share the detail.

Email we send

We send interview invitations and calendar files to the people invited to an interview, and a weekly reminder to an agency’s client when candidates are waiting on their decision. That reminder only goes out when something is genuinely outstanding. We send no marketing email to candidates or to an agency’s clients.

How long it is kept

Account data is kept while the account is open. Candidate data is kept until the agency deletes it or closes their account, because they decide their own retention. When an account closes we delete its data within 30 days, except where we must keep records longer by law.

Agencies can erase an individual candidate themselves, from inside the product, and it takes effect immediately: identifying details, CVs and written notes are destroyed, not hidden. Where that candidate was placed, the record of the placement and its fee is kept with nothing on it that identifies them — an invoice is a record the agency is separately obliged to keep. If you would rather we handled a request, email [PRIVACY CONTACT EMAIL] and we will complete it within 30 days.

Your rights

Depending on where you live you may have the right to ask for a copy of your data, have it corrected or deleted, object to how it is used, or ask us to restrict it. Write to [PRIVACY CONTACT EMAIL]. Where an agency is the controller we will forward your request to them and help them meet it. You can also complain to your data protection regulator.

Security

• Every table is restricted so one agency's data is unreachable from another's account, enforced by the database rather than the application.
• Clients reading a shared link have no database access at all; they read a fixed, filtered view through functions that check the link first.
• Files are private. A link to a CV is signed and expires after five minutes.
• Data is encrypted in transit, and at rest by our hosting provider.
• Credentials used by scheduled jobs are held in an encrypted store, not in configuration.

Cookies

One cookie, which keeps a recruiter signed in. No analytics, no advertising and no third-party tracking — so there is nothing here to consent to or opt out of. A client reading a shared link is not given a cookie at all.

Contact

[LEGAL ENTITY NAME], company number [COMPANY NUMBER], [REGISTERED ADDRESS]. Privacy questions to [PRIVACY CONTACT EMAIL].