Privacy policy

PipTalent ("we", "us") is a UK-based recruitment consultancy specialising in the forex and proprietary trading industry. We act as the data controller for the personal data described in this policy: we decide what data this site collects and why, and we are responsible for it under UK GDPR and the Data Protection Act 2018.

We collect different data depending on how you use the site:

If you submit your CV (via /submit-cv): full name, email address, phone number (optional), sector of interest, current role, a skills summary, an experience summary (optional), your LinkedIn URL (optional), the job title you applied to if you applied from a listing, and the CV file itself if you choose to upload one.

If you submit a hiring brief (via /submit-a-vacancy or the homepage contact form): company name, your name, work email, phone number (optional), the role you're hiring for, the sector, and whatever details you write in the brief itself.

If you sign up for job alerts: your email address and, optionally, the sector you want alerts for.

For everyone, regardless of which form you use: we run a basic anti-spam check on submissions, which involves hashing your IP address (turning it into a one-way string that can't be reversed back into the original address) and briefly storing that hash to detect unusually rapid repeat submissions. We never store your raw IP address, and hashes are deleted automatically after 24 hours.

We do not use cookies to track you, and we don't run any advertising or cross-site tracking on this site. We use Vercel Web Analytics to understand which pages get visited and roughly where from. It's cookieless and doesn't build a profile of you individually; it only produces aggregate counts like "how many people visited /jobs this week". The only cookie this site sets is a strictly necessary session cookie used to keep our internal admin dashboard secure once a member of our team logs in -- it's never set for ordinary visitors browsing the public site, and it doesn't identify you or track anything about your visit.

CVs and hiring briefs: we process this data to provide our recruitment service, that is, to match candidates with roles and to help hiring companies fill them. Our legal basis is legitimate interests (UK GDPR Article 6(1)(f)): recruitment matching is the entire purpose of the service you've chosen to use, and submitting a CV or brief is an unambiguous signal that you want us to act on it.

Job alerts: our legal basis is consent (Article 6(1)(a)) — you actively opt in by submitting the sign-up form, and every alert email includes a one-click unsubscribe link that permanently deletes your subscription record.

Anti-spam IP hashing: our legal basis is legitimate interests — keeping the forms usable by protecting them from automated abuse, using the least identifying form of the data (a short-lived hash, not a raw address) that achieves that.

If you submit a CV, we share your candidate profile and CV with hiring companies we are actively recruiting for on your behalf, where a role looks like a genuine match. We don't send your details to every client on a mailing list — recruitment is our core business, and this sharing is how it works.

Hiring briefs are not shared with third parties; they're used internally to work your vacancy.

We also use a small number of service providers ("processors") to run this site:

Supabase — hosts our database and stores uploaded CV files in a private file store. Our Supabase project is hosted in the London (eu-west-2) region.

Vercel — hosts the website itself and runs the code that processes form submissions.

Resend — sends transactional emails (for example, notifying us when a new CV or brief comes in, and sending job alerts). Resend is a US-based provider; where data is processed outside the UK/EEA by any processor we use, that processor is responsible for its own appropriate safeguards under its own terms and privacy policy.

We do not sell personal data, and we do not share it with data brokers or for advertising purposes.

We don't currently run an automatic time-based deletion schedule — we're a small team, and being upfront about that is more honest than claiming a retention period we don't yet enforce automatically. In practice: candidate and brief records are kept while they remain useful to an active or reasonably foreseeable search, and are deleted on request (see below). Job alert subscriptions are kept until you unsubscribe, which happens instantly and permanently via the link in every alert email. Anti-spam IP hashes are deleted automatically after 24 hours.

Under UK GDPR, you have the right to:

Ask what data we hold about you (access); ask us to correct it if it's wrong (rectification); ask us to delete it (erasure); ask us to restrict how we use it, or object to us using it (restriction and objection); and receive a copy of it in a portable format (portability).

To exercise any of these, email contact@piptalent.com. We'll action deletion requests within 30 days. Job alert subscriptions can also be removed instantly and without contacting us, via the unsubscribe link in any alert email or at /unsubscribe.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk, though we'd appreciate the chance to sort out any concern directly first.

This site is aimed at working adults looking to hire or be hired in the forex and prop trading industry. It is not directed at, and we do not knowingly collect data from, anyone under 18.

If we materially change what we collect or how we use it, we'll update this page and change the "last updated" date at the top. We won't make a material change and stay silent about it.

Questions about this policy or how your data is handled: email contact@piptalent.com.