Privacy Policy – HoldTalent
HoldTalent (“we”, “us”, “our”) runs a niche job board for AI Governance & Risk, Cybersecurity, GRC, Privacy & Data Protection roles across the EU.
This Privacy Policy explains how we collect, use and protect personal data when you:
- browse our website
- contact us
- subscribe to updates
- ask to post a job or work with us
We are the data controller for this website under EU/EEA data protection law.
Website: https://holdtalent.com Email: hello@holdtalent.com
Registered office address: 77 Camden Street Lower, Dublin, D02 XE80, Ireland (correspondence only).
1. What data we collect
1.1. When you browse the site
We collect technical and usage data such as:
- IP address and basic device/browser details
- pages you visit, time and date, referral source
- basic error and security logs
This comes mainly from our hosting provider and any analytics tools we may add later (only after consent).
1.2. When you contact us
When you email us or use the contact form, we collect:
- your name (if you provide it)
- your email address
- the content of your message
- any other details you choose to share
1.3. When employers post or request to post a job
When an employer fills out a “Post a job” or similar form, we collect:
- contact name and role
- work email address
- company name and basic company details
- job title, location and description
- apply URL and any extra information you provide
1.4. When you subscribe to email updates
If you sign up for jobseeker or employer updates, we collect:
- your email address
- your name (if you give it)
- your topic preferences (for example, “jobseeker updates”)
1.5. Data we do not collect
On HoldTalent we do not:
- create candidate accounts
- run a CV database
- host video interviews
- provide employer-side ATS or AI-screening tools
You usually apply directly on the employer’s own site or system. They are responsible for what happens with your data once you leave HoldTalent.
2. How we use your data and legal bases
We only use personal data where we have a legal basis under EU/EEA law.
2.1. Provide the website and keep it secure
We use data to:
- show pages and load content
- keep the site running and fix technical issues
- block abuse and detect security problems
Legal basis: our legitimate interests in running a secure, functioning website.
2.2. Reply to messages and run day-to-day operations
We use your data to:
- answer questions from jobseekers and employers
- follow up on “Post a job” or “Contact” submissions
- manage launch offers and similar
Legal basis: pre-contractual steps at your request and our legitimate interests in operating the service.
2.3. Publish and promote job listings
For employer job forms, we use the information to:
- review whether the role fits HoldTalent’s niche and rules
- create and maintain the public job listing
- show the company name, role and apply link to candidates
- share the listing in job feeds, email updates or social posts (if relevant)
Legal basis: performance of a contract or pre-contractual steps, and our legitimate interests in promoting the site and roles in line with what you requested.
2.4. Send email updates
We use your details to:
- send the specific updates you signed up for
- manage your preferences and unsubscribes
Legal basis: your consent (you can withdraw at any time via the unsubscribe link or by emailing us).
2.5. Analytics and improvement (if and when enabled)
If you accept analytics cookies in our cookie banner, we may use tools such as Google Analytics or Hotjar to:
- understand how the site is used
- fix usability issues and improve content
- plan what to build next
These tools will not run until you opt in via the cookie banner.
Legal basis: your consent for non-essential cookies, and our legitimate interests in improving the service for anonymised or aggregated stats that do not rely on tracking cookies.
2.6. Legal and compliance
We may use or keep certain data to:
- comply with legal obligations (for example accounting or regulatory requests)
- handle complaints, disputes or claims
- protect our rights and those of users
Legal basis: legal obligations and our legitimate interests in protecting the service and enforcing our terms.
3. Cookies and similar technologies
We use cookies and similar technologies to keep basic site functions working, remember your choices and, only if you agree, run analytics or similar tools.
Before setting non-essential cookies (like analytics or Hotjar), we will show a cookie banner, ask you to opt in and let you change your mind at any time via our cookie tool or browser settings.
Details of each cookie type will be listed in our Cookie Policy
4. Who we share your data with
We do not sell your personal data.
We only share personal data with:
4.1. Service providers (processors)
We use external providers for things like hosting, email and consent management. Where they act as our data processors, they may only process personal data on our documented instructions, must have a data-processing agreement with us, and must keep the data secure.
4.2. Other independent providers
Some tools we use (for example certain analytics or social-media tools) act as independent data controllers. They process your data under their own privacy policies and legal bases. We only share the minimum data needed to use those services.
4.3. When you click through to employers or other sites
When you click an apply button or external link on HoldTalent you leave our website and go to the employer’s site, application system or course provider. We do not control those sites. Their own Privacy Policy and cookies apply there. You should read those policies before sharing your data with them.
4.4. Legal reasons
We may share personal data if we are legally required to, for example to comply with a court order, respond to a regulator or protect our rights, users or others.
5. International transfers
Some of our service providers may process data outside the EU/EEA. When this happens, we use the safeguards required by EU law, such as an adequacy decision or the European Commission’s standard contractual clauses (SCCs). You can contact us for details of specific safeguards for a given service.
6. How long we keep data
We keep personal data only as long as needed for the purposes in this policy (for example to run HoldTalent, answer queries, meet legal/accounting duties), then delete or properly anonymise it.
We keep server and security logs normally up to 12 months, unless needed longer to investigate security issues and we may keep anonymised or aggregated data (which does not identify you) for longer.
7. Children
HoldTalent is aimed at adults and older students exploring careers in GRC, privacy, cybersecurity and related fields.
We do not knowingly collect personal data from children under 16. If you believe a child under 16 has given us personal data, contact us and we will delete it.
8. Your rights
Under EU/EEA data protection law, you have the right to:
- access your personal data we hold
- ask us to correct inaccurate or incomplete data
- ask us to delete your data, in some situations
- ask us to restrict how your data is used
- receive your data in a structured, commonly used format and send it to another controller (where the legal basis is consent or contract and processing is automated)
- object to certain processing, especially where we rely on legitimate interests
- withdraw consent at any time where we rely on consent
To use these rights, email us at hello@holdtalent.com. We may need to confirm your identity before acting on your request.
You also have the right to lodge a complaint with your local data protection authority. In Ireland, this is the Irish Data Protection Commission’s official site: Data Protection Commission’s official site
9. Third-party sites and content
Our site links out to employer career pages, application forms, external job sources, course providers, reference materials and social media profiles.
We are not responsible for how those sites collect or use personal data. Please read their own Privacy Policies and cookie notices.
10. Automated decision-making
We do not:
- use your personal data to make automated decisions with legal or similar effects
- run AI-based profiling or scoring of candidates or employers
Any technical automation we use for jobs is focused on job content, not on evaluating people.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will update the “Last updated” date at the top and, where appropriate, show a notice on the website or in email updates.
Please check this page from time to time to stay informed.