Privacy Policy | TalentX Market

TalentX Market (“TalentX”, “we”, “us”, or “our”) is committed to protecting your privacy and handling your personal data with transparency, care, and in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. Please read this policy carefully before using the TalentX Market platform.

1.Who We Are

TalentX Market is the data controller responsible for the personal data processed through this Platform. We operate the compliance talent marketplace available at talentxmarket.com. For all data protection enquiries, please contact us at hello@talentxmarket.com.

2.Data We Collect

2.1 Candidates

When you register as a Candidate, we collect and store the following:

Identity data: Full name, professional headline, current job title, current employer
Contact data: Email address, phone number, LinkedIn profile URL
Professional data: Years of experience, compliance specialisms, certifications and qualifications, professional biography, work preferences, salary expectations, availability status
Account data: Clerk user ID, account creation date, profile approval status, profile visibility settings
Usage data: Log-in activity, profile update history, dashboard interactions

Your contact data and identifying information (full name, email, phone, LinkedIn URL) are withheld from Employers until your profile is explicitly unlocked by an Employer using the Platform's credit system. Until that point, only your anonymised professional information is visible.

2.2 Employers

When you access the Platform as an Employer, we collect:

Identity data: Contact name, job title
Organisation data: Company name, business email address, company website
Transaction data: Unlock credits used, profiles unlocked, unlock history
Account data: Account creation date, subscription status, account activity
Usage data: Pages visited, search queries, profiles viewed

2.3 All Users

When any user accesses the Platform, we may automatically collect:

Technical data: IP address, browser type, device type, operating system
Log data: Access times, pages viewed, referring URLs, session duration
Cookie data: As described in Section 9 below

3.How We Use Your Data

We process your personal data for the following purposes and on the following legal bases:

Purpose	Legal Basis
To create and manage your account	Performance of a contract (Article 6(1)(b) UK GDPR)
To display your anonymised profile to Employers	Performance of a contract / Legitimate interests
To reveal your contact details to Employers who unlock your profile	Consent (by opting to make your profile available)
To send OTP verification emails to Employers	Performance of a contract
To send transactional emails (account notifications, profile status updates)	Performance of a contract
To review and approve Candidate profiles	Legitimate interests (platform quality and safety)
To prevent fraud, abuse, and misuse of the Platform	Legitimate interests / Legal obligation
To improve the Platform and understand usage patterns	Legitimate interests
To comply with legal obligations	Legal obligation (Article 6(1)(c) UK GDPR)

We will not use your personal data for automated decision-making that produces legal or similarly significant effects on you without your explicit consent.

4.The Anonymity Model

TalentX is built on the principle that compliance professionals should be able to signal their availability without exposing their identity to all visitors. This is how our anonymity model works:

Before unlock: Employers browsing the Platform see only your professional title, years of experience, specialism areas, certifications, availability status, work preferences, and salary expectations. Your name, employer, email address, phone number, LinkedIn URL, and any other identifying information is hidden.
After unlock: When an Employer uses a credit to unlock your profile, your full name, email address, phone number, LinkedIn URL, and current employer are revealed to that specific Employer only. This constitutes your consent to that Employer contacting you for recruitment purposes.
Your control: You may set your profile to hidden or remove it entirely from your dashboard at any time. Doing so will prevent any further Employers from unlocking your profile. Employers who have already unlocked your profile prior to removal retain the data they received at the point of unlock, subject to their own data retention obligations.

5.Data Sharing and Third Parties

5.1 Service Providers (Data Processors)

We share personal data with the following trusted third-party service providers who process data on our behalf and are bound by data processing agreements:

Clerk (clerk.com) — Authentication and identity management. Stores credentials and manages sign-in sessions for Candidates.
Supabase (supabase.com) — Cloud database hosting. Stores all Candidate profile data, Employer account data, and unlock records.
Vercel (vercel.com) — Website hosting and deployment. Processes server logs and request data.
Resend (resend.com) — Transactional email delivery. Used to send OTP verification emails and account notifications.

All providers are reputable, GDPR-compliant services. Supabase and Vercel infrastructure is hosted within the European Economic Area or on servers with appropriate adequacy decisions or safeguards in place.

5.2 Employers

When an Employer unlocks your profile, your contact data is shared with that Employer for the sole purpose of making a legitimate recruitment enquiry. Employers are bound by our Terms of Use regarding the permitted use of your data. TalentX is not responsible for how Employers handle your data after disclosure, and we encourage you to review our Terms of Use for details of Employer obligations.

5.3 Legal Disclosures

We may disclose personal data to law enforcement, regulatory authorities, or other third parties where required to do so by law, court order, or other legal process, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of TalentX, our users, or the public.

5.4 We Do Not Sell Your Data

TalentX does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We do not share your data with advertisers. Your profile is only disclosed to Employers who have legitimately unlocked it through the Platform.

6.Data Retention

We retain your personal data for as long as necessary for the purposes set out in this policy:

Candidate profiles: Retained for the duration of your account and for up to 2 years following account deletion, to resolve any disputes and comply with legal obligations.
Employer accounts and unlock records: Retained for 3 years following account closure for audit, compliance, and dispute resolution purposes.
Technical and log data: Retained for up to 12 months.
Email communications: Retained for up to 2 years.

When data is no longer required, it is securely deleted or anonymised. You may request earlier deletion subject to our legal obligations as described in Section 7.

7.Your Rights Under UK GDPR

As a data subject under the UK GDPR, you have the following rights:

Right of access: You may request a copy of the personal data we hold about you (a Subject Access Request).
Right to rectification: You may request that inaccurate or incomplete data is corrected. You can update most profile data directly via your dashboard.
Right to erasure (“right to be forgotten”): You may request deletion of your personal data where there is no compelling reason for its continued processing. This right is subject to certain exceptions, including where retention is required by law.
Right to restriction of processing: You may ask us to pause processing of your data in certain circumstances, for example while a dispute is being resolved.
Right to data portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service.
Right to object: You may object to processing based on legitimate interests, including profiling.
Rights related to automated decision-making: You have the right not to be subject to decisions based solely on automated processing that produce significant legal or similar effects on you.

To exercise any of these rights, please contact us at hello@talentxmarket.com. We will respond within 30 days. We may need to verify your identity before processing your request. There is no charge for exercising your rights, though we reserve the right to charge a reasonable fee for manifestly unfounded or excessive requests.

8.Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

Encrypted data transmission (HTTPS/TLS) across the Platform;
Access controls limiting data access to authorised personnel only;
Separate handling of public profile data and contact data, with contact data only accessible post-unlock;
Use of SOC 2 compliant infrastructure providers;
Email verification (OTP) before any Employer can unlock a Candidate profile;
Work email domain verification to prevent anonymous or fraudulent access.

While we take all reasonable precautions, no internet-based service is completely secure. In the event of a data breach affecting your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.

9.Cookies

TalentX uses essential cookies and similar technologies necessary for the Platform to function, including authentication session cookies managed by Clerk. We do not currently use advertising cookies, tracking pixels, or third-party analytics cookies.

Essential cookies cannot be disabled as they are required for the Platform to operate. You may clear cookies via your browser settings, but doing so will end any active session and require you to sign in again.

10.International Data Transfers

TalentX is operated from the United Kingdom. Our service providers may process data in the European Economic Area (EEA) or other jurisdictions. Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or reliance on adequacy decisions recognised under UK law.

11.Children's Privacy

The Platform is not directed at children under 18 years of age. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at hello@talentxmarket.com and we will delete it promptly.

12.Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or Platform functionality. We will notify registered users of material changes by email or by a prominent notice on the Platform. The “Last updated” date at the top of this page will always reflect the most recent version. Continued use of the Platform after any update constitutes your acceptance of the revised policy.

13.Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our data protection team:

TalentX Market — Data Protection

Email: hello@talentxmarket.com

Website: talentxmarket.com

We aim to respond to all data protection enquiries within 5 business days and all Subject Access Requests within 30 days.