Privacy

Privacy Notice

Who this notice covers

This notice covers two groups: clients who request a Talent Drop, and candidates who appear in a Talent Drop shortlist.

What Droply collects about clients

• Contact details you provide when requesting a Talent Drop: name, work email and company.
• Role and calibration information: the role, seniority, location or remote policy, salary band, must-have signals, anti-signals and comparable companies.
• Billing region, and the commercial records associated with your invoice.

This information is used to assess the request, calibrate the search, deliver the shortlist and issue the invoice.

What Droply collects about candidates

Candidates in a Talent Drop are identified through manual research of publicly available professional information. Droply deliberately keeps this to a minimum.

• Professional information only: current or recent role title, type of company or sector, general location, relevant skills and years of experience.
• Fit signals and evidence notes explaining why the candidate matches the calibrated search.
• A link to a public professional profile.

Droply does not collect or store private contact details — no personal phone numbers, no personal email addresses, no home addresses. Droply does not collect dates of birth, photographs, or any special-category data such as health, religion, ethnicity, political opinions or trade union membership. Droply does not scrape platforms or operate automated matching.

Why Droply may process candidate information

Candidate professional information is processed on the basis of legitimate interests: connecting relevant professionals with relevant open roles, using information they have already made public in a professional context. Candidates may object to this processing at any time using the contact address below, and Droply will remove their record.

Who sees the information

A Talent Drop is delivered on a private page protected by a long random URL and a password, shared only with the client who commissioned the search. Droply does not sell, publish or share candidate information with anyone else. Clients contact candidates directly through their public professional profiles, and are asked to keep the shortlist confidential.

How long information is kept

• Private Talent Drop access expires 30 days after delivery by default. Access can be extended manually while the hiring process is still active, and can be revoked at any time.
• Candidate records are deleted or anonymized when the role closes or the Drop expires, and no later than 60 days after delivery unless a documented lawful reason requires otherwise.
• Declined or unpaid client requests are deleted after 30 days.
• Commercial and invoicing records are handled separately from candidate records and retained only as long as accounting and legal obligations require.

Security

• Delivery pages use high-entropy random URLs and passwords stored only as hashes; passwords are never placed in the URL.
• Access to each Drop is revocable and expires automatically.
• Private pages are excluded from search engine indexing.
• Internal access is restricted to authenticated Droply staff.

Your rights

You can request access to your information, correction, deletion, or object to its processing. Email hello.droplytalent@gmail.com. Droply aims to respond within 30 days. Candidates who wish to be removed from consideration do not need to explain why — a single email is enough.

Changes to this notice

This notice will be updated as the service develops and following legal review. Material changes will be reflected on this page.

Draft version — pending legal review. Contact: hello.droplytalent@gmail.com