Privacy Policy
This Privacy Policy explains how TalentMasters collects, uses, and protects personal data in connection with our recruitment services, candidate applications, and website.
Last updated: January 28, 2026
1) Who we are (Data Controller)
TalentMasters (“we”, “us”, “our”) is the data controller for the personal data described in this Privacy Policy.
Legal entity: [TalentMasters Legal Entity Name]
Address: [Company Address]
Email: privacy@talentmasters.co (replace with your real email)
Phone: [Company Phone]
If you have appointed a Data Protection Officer (DPO), include their contact details here: [DPO Email / Address].
2) What personal data we collect
Depending on how you interact with us, we may collect:
- Identification & contact: name, email, phone number, location, and communication preferences.
- Recruitment & employment details: CV/resume, cover letter, work history, education, skills, portfolio links, salary expectations, notice period, right-to-work status (where applicable), and interview notes.
- Communications: emails/messages with you, call notes, and feedback you provide.
- Website & technical: IP address, device/browser information, pages viewed, and cookies/analytics identifiers (see “Cookies” below).
Special category data
In some cases, you may voluntarily provide information that could be considered “special category” data (e.g., disability-related accommodations). We do not ask for it unless necessary, and we handle it with extra care and an appropriate legal basis/condition.
3) How we collect your data
- When you submit an application or enquiry through our forms.
- When you email us, message us, or speak with us.
- From publicly available professional sources (e.g., LinkedIn) where legally permitted and relevant to recruitment.
- From third parties such as referees or previous employers (only where appropriate and typically with your knowledge/consent).
- Automatically via cookies/analytics when you use our website.
4) Why we use your data (purposes)
- To respond to enquiries and provide recruitment services.
- To assess suitability for roles and match candidates to opportunities.
- To schedule interviews and manage the recruitment process.
- To share candidate profiles with client companies (with your instruction or agreement, depending on the engagement).
- To improve our website, security, and service quality.
- To comply with legal obligations (where applicable).
5) Lawful bases for processing (GDPR)
We rely on one or more lawful bases under GDPR depending on the context, including:
- Legitimate interests: operating our recruitment business, communicating with candidates/clients, improving services, and protecting our business from fraud and abuse.
- Contract / steps to contract: processing necessary to provide recruitment services or take steps you request.
- Consent: where we ask (e.g., optional marketing, certain talent pool retention, or special category data in limited scenarios). You can withdraw consent at any time.
- Legal obligation: where we must comply with applicable laws.
6) Who we share data with
We may share personal data with:
- Client companies where you are being considered for a role (typically with your knowledge/approval).
- Service providers who help us run our business (e.g., hosting, email delivery, CRM/ATS, analytics), acting as processors under contract.
- Professional advisers (lawyers, accountants) where necessary.
- Authorities where required by law.
We do not sell personal data.
7) International transfers
If we transfer personal data outside the European Economic Area (EEA), we will use appropriate safeguards (such as adequacy decisions or Standard Contractual Clauses) where required.
8) Data retention
We keep personal data only as long as necessary for the purposes described above. Typical retention periods:
- Active recruitment: for the duration of the process and a reasonable period afterward to manage follow-ups and defend legal claims.
- Talent pool: typically up to 12 months (or longer if you ask us to keep your profile and/or where lawful).
- Website logs/security: kept for a limited period for troubleshooting and security monitoring.
9) Your rights
Subject to certain conditions, you may have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion (erasure) in certain cases
- Restrict processing in certain cases
- Object to processing (including to direct marketing)
- Data portability (where applicable)
- Withdraw consent (where processing is based on consent)
To exercise your rights, contact: privacy@talentmasters.co.
10) Cookies & analytics
We may use cookies and similar technologies to ensure the website works, improve performance, and understand usage (analytics). You can control cookies through your browser settings and (where implemented) cookie banners/preferences.
If you use marketing/analytics cookies, ensure you have an appropriate cookie notice and consent mechanism where required.
11) Security
We use reasonable technical and organizational measures designed to protect personal data (e.g., access controls, secure hosting, encryption in transit where supported). No method of transmission or storage is 100% secure.
12) Complaints
If you have concerns, please contact us first so we can try to resolve them. You also have the right to lodge a complaint with your local supervisory authority.
Cyprus supervisory authority (if applicable)
Office of the Commissioner for Personal Data Protection (Cyprus)
Website: dataprotection.gov.cy
13) Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when it was most recently revised.