What we collect, and what we do with it

Northbound Talent Ltd is the data controller for personal data collected through this site. Data protection enquiries go to privacy@northboundtalents.com.

There are exactly two forms on this site, and nothing else here collects anything.

Engineer applications ask for your name, email address, where you are based, your working-hours band, your primary stack, years of experience, an optional portfolio or profile link, and whatever you write in the free-text field. If you apply from a specific role page, we also record which role.

Company hiring requests ask for the company name, your name, a work email address, an optional website, engineering team size, the engagement model and timeline you have in mind, and your description of the roles.

Every submission is stored with a generated identifier and the time it arrived. Our form endpoints also read the requesting IP address to apply a rate limit; that value is held in memory only, for the length of the rate-limit window, and is never written to storage or attached to your submission.

This site sets no cookies, runs no analytics, and embeds no third-party trackers or advertising pixels. Fonts are served from the same origin as the site. There is no consent banner because there is nothing to consent to.

Engineer applications are used to assess whether we can place you and to contact you about roles. The lawful basis is steps taken at your request prior to entering a contract, and our legitimate interest in operating a placement business.

Company enquiries are used to respond and to run the resulting search, on the basis of pre-contractual steps and legitimate interest.

We do not sell personal data, and we do not use it to train machine-learning models.

Your application is not shared with any client until you agree to be put forward for a specific role. That consent is per-role and you can withdraw it at any point before an introduction is made.

Behind the scenes, submissions are delivered to our own systems through our hosting provider and, depending on configuration, an email delivery provider and an internal notification endpoint. These act as processors on our instructions. Where they are outside the UK or EEA, transfers rely on standard contractual clauses or an adequacy decision.

Engineer profiles are held for two years from your last contact with us, then deleted. Company enquiries are held for the life of the client relationship and six years afterwards, which is the period we need for tax and contractual records. You can ask us to delete your data sooner, and we will unless we are legally required to keep a specific record.

If you are in the UK or the EEA you have the right to access a copy of your data, to correct it, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. You can exercise any of these by emailing privacy@northboundtalents.com. We respond within one month and we do not charge for it.

If you think we have handled your data badly, please tell us first — but you are entitled to complain directly to your national supervisory authority, which in the UK is the Information Commissioner's Office.

Submissions travel over HTTPS and are held in access-controlled systems. No system is perfect; if we ever suffer a breach affecting your data we will notify you and the relevant regulator within the statutory deadlines rather than quietly.

If we change this notice materially we will update the date at the top and, where the change affects how we use data you already gave us, contact you about it directly.

Related reading: our standards covers identity verification and what we will not do with your profile.