Legal
Privacy policy
Last updated: 22 May 2026
1. Who we are
This website (traveltechtalent.com) is operated by Travel Tech Talent, a trading name of The Resource Group Limited, a company registered in England & Wales. Registered office: 19 Oxford Road, Bournemouth, BH8 8GS, United Kingdom. The Resource Group Limited is the data controller responsible for personal data collected through this website.
For any privacy-related enquiries, including to exercise your rights under UK GDPR, contact us at info@traveltechtalent.com.
2. What this policy covers
This policy explains what personal data we collect when you use this website, how we use it, who we share it with, how long we keep it and the rights you have over your data. It applies to candidates, clients, newsletter subscribers and general visitors.
3. Data we collect
3.1 When you apply for a job
When you apply for a role through this website, we collect:
- Your full name
- Your email address and phone number
- Your CV (uploaded file)
- Your cover letter or message (if provided)
- A timestamped record of your consent to this privacy policy
- Technical metadata: your IP address and the time of submission (used to prevent abuse via rate limiting)
3.2 When you join our talent pool
The same categories of data as a job application, but submitted without reference to a specific role, for ongoing consideration for future opportunities.
3.3 When you subscribe to our newsletter
Your name and email address.
3.4 When you browse the website
Strictly necessary cookies that keep the site functioning. With your separate consent (via our cookie banner), we may also place analytics or marketing cookies. You can withdraw cookie consent at any time.
3.5 When you refer someone
When you submit the referral form, we collect your name, email and (optionally) your relationship to the person you're referring, plus the name and contact details of the person you're referring. We use this to follow up with the referred person (with their consent, contacted separately) and to pay or arrange any thank-you owed to you if a placement results.
If you submit someone else's details, you confirm you have a reasonable basis to do so — typically because you've spoken to them and they're open to being contacted by us. If you'd rather not share their contact details directly, you can pass our link to them and let them get in touch themselves.
3.6 When you submit a job brief
When you submit a brief through the website, we collect your name, work email, company name, role detail and (optionally) an uploaded job description file. We use this to respond to your enquiry and to discuss the role with you.
3.7 When you send us a message
When you use the contact form, we collect your name, email and the content of your message. We use this to respond to your enquiry.
4. How we use your data and our lawful basis
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Considering you for a specific role you've applied to | Consent (Art. 6(1)(a)) |
| Holding your details in our talent pool for future opportunities | Consent (Art. 6(1)(a)) |
| Contacting you about relevant roles, market insights or referral opportunities | Legitimate interests (Art. 6(1)(f)) |
| Sending you our newsletter | Consent (Art. 6(1)(a)) |
| Operating and securing the website | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal and regulatory obligations | Legal obligation (Art. 6(1)(c)) |
Responding to enquiries and managing client relationships: Legitimate interests (Article 6(1)(f) GDPR) — when you contact us through our website, we have a legitimate interest in responding to your enquiry and maintaining a record of our communications for business development purposes.
Marketing communications: Consent (Article 6(1)(a) GDPR) — we only send marketing emails to individuals who have explicitly opted in via a checkbox at the point of form submission. You can withdraw consent at any time using the unsubscribe link in any marketing email, or by contacting info@traveltechtalent.com.
5. Automated processing of CVs
When you submit a CV, we use AI tooling (provided by Anthropic) to parse and structure your CV — extracting fields such as job titles, employers, dates, skills and education — and to triage applications so our consultants can review them efficiently.
This processing is decision support, not automated decision-making. A human consultant at Travel Tech Talent always reviews your application before any decision is made about whether to progress you for a role. You are not subject to a decision based solely on automated processing within the meaning of UK GDPR Article 22.
You can request that we disable AI processing of your data by contacting us. Note that this may slow our ability to respond to your application.
6. Who we share your data with
We share your personal data only with the following categories of recipients:
- Our clients (prospective employers) — when, and only when, we put you forward for a specific role. We will tell you which client before sharing.
- Service providers (processors) acting on our instructions:
- Supabase (Supabase Inc, infrastructure hosted in the EU, Frankfurt) — database and file storage for your CV and application data.
- Vercel (Vercel Inc, USA) — website hosting and serverless functions. Transfers covered by Standard Contractual Clauses.
- Anthropic (Anthropic PBC, USA) — AI processing for CV parsing and triage as described above. Anthropic does not train models on your data. Transfers covered by Standard Contractual Clauses.
- Brevo (Sendinblue SAS, France, EU) — newsletter delivery and, with your consent, tracking of email engagement and on-site activity for subscribers who arrive via our emails. See our Cookies policy for detail.
- HubSpot (HubSpot Ireland Ltd, EU) — we use HubSpot as our customer relationship management (CRM) platform to manage client enquiries, business development and marketing communications. When you submit a contact form, brief, referral or newsletter signup on our website, your data is transferred to HubSpot for the purposes of responding to your enquiry, managing our sales pipeline, sending marketing communications (where you have consented) and internal reporting. HubSpot processes this data on EU infrastructure.
- Legal and regulatory authorities — where we are required by law to disclose information.
Job applications and talent pool submissions are processed in our applicant tracking system (Candidate Ranker) and are not transferred to HubSpot. Candidate data is kept separate from our business development CRM.
We do not sell your personal data to third parties, ever.
7. International transfers
Some of our processors are based outside the UK and EEA. Where this is the case, we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses to ensure your data receives an equivalent level of protection.
8. How long we keep your data
| Data | Retention period |
|---|---|
| Candidate applications and talent pool records | 36 months from our last meaningful contact with you |
| Newsletter subscribers | Until you unsubscribe |
| Website logs and rate-limit data | Up to 30 days |
Client and prospect data in HubSpot: retained for 36 months from the date of last meaningful interaction (e.g. enquiry, reply, booking or marketing email engagement). After 36 months of inactivity, records are reviewed and deleted unless there is a continuing lawful basis to retain them.
You can ask us to delete your data sooner — see Section 9.
9. Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure— ask us to delete your data (“the right to be forgotten”).
- Restriction — ask us to limit how we use your data.
- Portability — receive your data in a portable format.
- Objection — object to processing based on legitimate interests, including direct marketing.
- Withdraw consent — where we rely on consent, you can withdraw it at any time.
- Complain— to the UK Information Commissioner's Office (ico.org.uk) if you believe we have mishandled your data.
To exercise any of these rights, email info@traveltechtalent.com. We will respond within one month.
10. Cookies
We use a small number of strictly necessary cookies to keep the website working. With your consent (via our cookie banner), we may also use:
- Analytics cookies (Google Analytics 4, Vercel Analytics) — to understand how visitors use the site so we can improve it.
- Marketing cookies (Brevo) — to track email and on-site engagement so we can send relevant follow-ups.
Full detail of every cookie and tracker, including planned future additions, is in our Cookies policy. You can change your cookie preferences at any time using the banner. Strictly necessary cookies cannot be disabled because the site would not function without them.
11. Security
We take the security of your data seriously. CVs and application data are stored in tenant-isolated database tables and storage buckets, encrypted at rest and in transit. Access is restricted to authorised personnel only.
No system is perfectly secure. If we become aware of a personal data breach that affects you, we will notify you and the ICO within the timeframes required by UK GDPR.
12. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. For significant changes, we will notify you by email or via a prominent notice on the website.
13. Contact us
The Resource Group Limited, trading as Travel Tech Talent.
Registered office: 19 Oxford Road, Bournemouth, BH8 8GS, United Kingdom.
Email: info@traveltechtalent.com