Privacy Policy

TalentLeap AI Limited

Last updated: 18 August 2026

1. Who we are

TalentLeap AI Limited (“TalentLeap”, “we”, “us”, “our”) provides an outsourced recruitment function for growing companies. We source, screen, reference and shortlist candidates and manage the hiring process on behalf of our clients.

We are the data controller for the personal data described in this policy, except where we act as a processor on behalf of a client, in which case the client is the controller and our data processing agreement applies.

Company details:

  • Registered company: TalentLeap AI Limited
  • Company number: 17171393
  • Registered office: Lombard Business Park, 8 Lombard Road, London SW19 3TZ
  • ICO registration number: ZB265963
  • Contact for privacy matters: privacy@talentleap.ai

2. Scope of this policy

This policy explains how we collect and use personal data when you visit our website, when we consider you for a role or introduce you to a client, when you are a contact at a client or prospective client, and when you are a supplier or partner. It does not cover any separate software product we may offer, which carries its own policy.

3. The personal data we collect

Candidates and workers. Name, contact details, date of birth where needed, national insurance number and tax references where needed for placement, right to work and identity documents, CV and work history, qualifications and certifications, references, employment preferences, salary and rate expectations, interview notes and assessment results, and where relevant bank details for payment.

Client and prospective client contacts. Name, job title, business contact details, and records of our dealings with you.

Website users and enquiries. Information you provide through forms, along with technical data such as IP address, browser type and pages viewed, collected through cookies and similar technologies.

Suppliers and partners. Business contact details and information needed to manage the relationship.

We only collect special category data, such as information about health or the right to work, where it is necessary for a specific purpose and where we have a lawful basis to do so.

4. How we collect it

We collect personal data directly from you, from your interactions with our website, from your named referees, and from publicly available sources such as professional networking sites and company websites. We may also receive your details from a client or a third party who has your permission to share them.

5. Why we use your data and our lawful bases

We use personal data to provide our recruitment services, to match candidates to roles, to introduce candidates to clients, to carry out screening and referencing, to arrange interviews and placements, to manage payment where relevant, to communicate with you, to improve our services, and to meet our legal obligations.

Our lawful bases under the UK GDPR are:

  • Legitimate interests, where we source and assess candidates, manage client relationships and run our business, balanced against your rights.
  • Contract, where we need to process your data to take steps at your request or to perform a contract with you or a client.
  • Legal obligation, where we must process data to comply with the law, for example right to work checks.
  • Consent, where we rely on it, for example for certain marketing, which you can withdraw at any time.

6. Who we share your data with

We share personal data with clients when we introduce or place a candidate, with referees during referencing, with service providers who support our business such as IT and communications providers, with professional advisers, and with regulators or authorities where we are required to do so. We require anyone who processes data on our behalf to keep it secure and to use it only for the purposes we specify.

We do not sell your personal data.

7. International transfers

Where personal data is transferred outside the United Kingdom, we make sure an appropriate safeguard is in place, such as an adequacy decision or the International Data Transfer Agreement, so that your data receives an equivalent level of protection.

8. How long we keep it

We keep personal data only for as long as we need it for the purposes set out in this policy, and to meet our legal and regulatory obligations. For candidates we usually keep records for the duration of our relationship and for a reasonable period afterwards so that we can consider you for suitable roles, after which we review and delete or anonymise the data. You can ask us to remove your data sooner.

9. How we protect it

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including access controls, encryption where appropriate, and staff confidentiality obligations.

10. Your rights

Under data protection law you have the right to access your data, to have inaccurate data corrected, to have your data erased in certain circumstances, to restrict or object to processing, to data portability, and to withdraw consent where we rely on it. To exercise any of these rights, contact us at privacy@talentleap.ai. We will respond within the time limits set by law.

11. Cookies

Our website uses cookies and similar technologies to make the site work, to understand how it is used, and to improve it. You can control cookies through your browser settings. Where required, we ask for your consent to non essential cookies.

12. Changes to this policy

We may update this policy from time to time. The current version will always be available on our website, with the date it was last updated shown at the top.

13. How to contact us and how to complain

For any question about this policy or about how we handle your data, contact us at privacy@talentleap.ai or by post at the registered office above.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113.