Privacy

Privacy Notice

Effective date:

24 August 2026

Version:

1.2

Last updated:

2 October 2026

Who this notice covers

This notice covers two groups: clients who request a Talent Drop, and candidates who appear in a Talent Drop. The controller of this information is Droply, which can be reached at hello@droplytalent.com.

What Droply collects about clients

Client information is collected through the Talent Drop request form on this website.

• Contact details you provide when requesting a Talent Drop: name, work email and company.
• Role and scope information: the role, seniority, hiring locations, working arrangement, time-zone constraints, salary band and currency, must-have signals, anti-signals and comparable companies.
• Billing region, and the commercial records associated with your invoice.

This information is used to assess the request, agree the scope, carry out the search, deliver the Talent Drop and issue the invoice.

Information clients provide about other people

When requesting a search, a client may optionally tell Droply about people who did not submit that information themselves:

• Calibration references: up to three public professional-profile URLs, with the client's note on what Droply should learn from each profile, together with the limited professional information visible on that public profile.
• People already in the client's hiring process, so that Droply avoids duplicate outreach.

Droply uses this only to calibrate the search, avoid duplicate outreach and assess role relevance. A calibration reference is not automatically contacted and is not automatically included in a Talent Drop. Droply does not scrape or automatically analyse the links. Someone would only be contacted if Droply separately and manually decides that the role may be relevant to them.

Clients must only share public professional information that is relevant to the search. Clients must not provide special-category data (such as health, religion, ethnicity, political opinions or trade union membership), private contact details or any other information that is not needed for the search.

What Droply collects about candidates

Candidate information comes from three sources: the commissioning client (as described above), the candidates themselves, and relevant public professional sources. Candidates are mainly identified through manual research of publicly available professional information. Droply then contacts them directly about the specific role and records what they tell us during that conversation or written exchange. Droply deliberately keeps this to a minimum.

• Professional information only: current or recent role title, type of company or sector, general location, relevant skills and years of experience.
• Fit signals and evidence notes explaining why the candidate matches the agreed scope.
• A link to a public professional profile.
• What the candidate confirmed during the initial check: their interest in this specific role, compensation expectations, working arrangement, availability and any open points.
• The date on which the candidate agreed to be shared with the client.

Droply does not collect or store private contact details on the delivery page — no personal phone numbers, no personal email addresses, no home addresses. Contact details used to reach a candidate are kept separately in Droply’s own correspondence and are never published to the client page. Droply does not collect dates of birth, photographs, or any special-category data such as health, religion, ethnicity, political opinions or trade union membership. Droply does not scrape platforms, and there is no automated matching or automated decision-making: every Talent Drop is researched, checked and assembled manually.

Why Droply may process candidate information

Candidate professional information is processed on the basis of legitimate interests: connecting relevant professionals with relevant open roles, using information they have already made public in a professional context. Information gathered during the initial check is recorded because the candidate provided it to Droply for this purpose, and a candidate is only shared with a client after they have agreed to it. Candidates may object to this processing or withdraw at any time using the contact address below, and Droply will remove their record from the delivery page.

How people are informed when their information was not collected from them

Information being publicly available does not remove Droply’s duty to be transparent. If Droply contacts someone whose details it obtained from a client or from a public source, the first message will include or link to this privacy information and explain, in plain language, where their details came from and what categories of information Droply holds. They can object or ask for deletion at any time.

There are no solely automated hiring decisions: nobody is included in a Talent Drop automatically, and every inclusion is a manual decision made after the person has agreed to be shared.

Depending on the activity, Droply relies on legitimate interests (calibrating and carrying out a search requested by a client), on steps needed for a contract with the client, and on the candidate’s agreement before they are shared in a Drop. Consent is not the only basis Droply relies on. Droply keeps the information it holds to the minimum needed for these purposes.

Who sees the information

A Talent Drop is delivered on a private page protected by a long random URL and a password, and candidate information is shared only with the client who commissioned that search, and only for candidates who agreed to be shared. Droply does not sell, publish or share candidate information with anyone else. Clients are asked to keep the Drop confidential.

Marketing and transactional messages

Marketing consent is optional and separate from the required privacy acknowledgment on the request form. Transactional messages about your request — confirmation, calibration questions, invoicing and delivery — are sent whether or not you opt in to marketing, because they are necessary to handle the request you submitted.

Payment

Payment is handled through manual Wise Business invoicing. There is no card checkout on the Droply website and Droply does not collect or store card details.

How long information is kept

• Private Talent Drop access expires 30 days after delivery by default. Access may be extended manually while the hiring process remains active and may be revoked at any time.
• Candidate records are reviewed and manually deleted or anonymized when the role closes or the Drop expires, and normally no later than 60 days after delivery, unless a documented legal reason requires longer retention.
• Declined or unpaid client requests are reviewed and manually deleted after 30 days.
• Calibration references and notes about people in a client's process are part of the client request and follow the same manual retention as that request and its Drop.
• Commercial, payment and invoicing records are kept separately for as long as accounting, tax and legal obligations require.
• These deletion periods are currently enforced through a manual administrative process; automated deletion jobs are not currently enabled.

Security

• Delivery pages use high-entropy random URLs and passwords stored only as hashes; passwords are never placed in the URL.
• Access to each Drop is revocable at any time, and expiration is enforced by the platform when a Drop reaches its expiry date.
• Private pages are excluded from search engine indexing.
• Internal access is restricted to authenticated Droply staff.
• Deletion and anonymization of records is carried out manually by Droply, not by an automated process.

Your rights

Clients, candidates, and people referred to Droply by a client can request access to their information, correction, deletion, or object to its processing. Email hello@droplytalent.com. Droply aims to respond within 30 days. Candidates who wish to be removed from consideration do not need to explain why — a single email is enough.

Changes to this notice

This notice will be updated as the service develops. Material changes will be reflected on this page, with a new version number and date.

Version 1.2 — 2 October 2026. Contact: hello@droplytalent.com