Privacy Policy

This policy explains what Human in the Loop Talent does with personal information — what we collect, why, who sees it, how long we keep it, and what you can tell us to do about it. It covers this website and our recruiting work.

The section that matters most to most readers is candidates. If you are in our talent database and want out, that is the section, and the answer is one email.

Who we are

Human in the Loop Talent is a technical recruiting and workforce architecture practice working with startups across the United States and Canada. We are the controller of the personal information described here. Reach us at inquiry@humanintheloop.com.

If you visit this website

This site has no accounts, no login and no forms. Nothing you type is sent to us from a page. The only automatic collection is analytics, through Google Analytics 4 (measurement ID G-L5PRS8ELQE), which records:

• Pages viewed and the order they were viewed in
• Approximate location derived from IP address, at city level or coarser
• Device, browser and operating system
• The referring site or search engine, when your browser sends one
• Clicks on outbound links — our booking calendar, our planner, an email address, or a move between insights pages — stored as the link URL, its visible text and the page it was clicked from

Google Analytics sets cookies to recognise repeat visits, typically for up to two years. Google truncates IP addresses before storing them and we have not enabled any advertising or remarketing feature. We do not sell analytics data, share it for advertising, or attempt to connect it to a named person.

This site also loads fonts from Google Fonts, which means Google receives your IP address in order to serve them. That is the whole of it — no other third party runs code on these pages.

If you contact us

If you email us or book a call through our scheduling link, we keep what you send: your name, your email address, and whatever you tell us about your hiring situation. We use it to reply and, if we go on to work together, to run the search. We do not add enquirers to a marketing list or sell what you send us.

If you are a candidate

Where your information comes from

Some of it you give us — a CV, an application, a conversation. Some of it we collect without you having contacted us first, because that is what search work is: we identify people whose public professional record fits a role and approach them. In that case your information comes from sources such as LinkedIn and other professional networks, public profiles and portfolios, published work, conference and community listings, or a referral from someone who suggested you. When we contact you off the back of that, tell us where it came from and we will say.

What we hold

• Identity and contact details: name, email, phone, location, links to public profiles
• Professional record: CV, work history, skills, education, portfolio or code samples
• Search context: the roles you were considered for and what stage you reached
• Our assessment: interview and screening notes, and reference notes where taken
• Practical terms: compensation expectations, notice period, work authorisation, preferences on remote and location

We ask for compensation expectations, not salary history. We do not seek information about your health, race, religion, sexual orientation, political views or trade union membership, and we ask that you do not send it. If it reaches us anyway — some CVs volunteer it — we remove it rather than record it.

Why we are allowed to

We rely on legitimate interests: matching people to roles is the service, and it cannot be delivered without holding professional information about the people being matched. Where a law that applies to you requires consent instead, we ask for it and you can withdraw it at any time. We take steps toward a contract with you where you have asked us to represent you for a role.

What we never do

• We do not charge candidates. The hiring company pays the fee. You are never billed for placement, introductions or advice.
• We do not send your details to a client without your agreement for that specific role. No CV blasting, no speculative submissions.
• We do not tell your current employer that you are in a process, and we do not take references without your say-so.
• We do not sell candidate data, ever, to anyone.
• We do not make automated decisions about you. A person decides whether to put you forward. Where we use AI tools in our own work, they assist that judgment; they do not replace it, and nothing about you is decided by a model alone.

Getting out

Email inquiry@humanintheloop.com and say you want to be removed. We will delete your record and confirm when it is done — normally within 30 days, usually much sooner. You do not need to give a reason, and it will not affect how we treat you if you approach us later.

If you are a client

For companies we work with, we hold business contact details for the people we deal with, the brief and requirements for each search, and the correspondence and records the engagement generates. We keep it to run the search and to meet our record-keeping obligations afterwards.

Who we share information with

We share personal information in four situations, and no others:

• Candidate to client, for a specific role, once the candidate has agreed to be put forward for it.
• With service providers that run parts of our operation — email and file storage, scheduling, and website analytics — who act on our instructions and cannot use the information for their own purposes.
• With professional advisers, such as accountants or lawyers, where they need it to advise us.
• Where the law requires it, or to establish or defend a legal claim.

We do not sell personal information, and we do not share it for cross-context behavioural advertising — including as those terms are defined under California law.

Where your information goes

We operate across the United States and Canada and our providers are largely US-based, so information about you may be stored or processed in the United States. If you are outside it, that means your information may be handled in a country whose privacy laws differ from your own. Where a transfer needs a safeguard — such as Standard Contractual Clauses — we rely on the ones our providers put in place.

How long we keep things

Ask us to delete something sooner and we will, unless we are required to keep it — in which case we will tell you which record and why.

How we protect it

Candidate and client records are held in access-controlled business accounts protected by multi-factor authentication, and shared only with the people who need them for the search in hand. This website is served over HTTPS and holds no personal data of its own. No system is perfectly secure, and we will not pretend otherwise — but if a breach affects your information and puts you at real risk, we will tell you and the relevant regulator as the law requires.

Your rights, and how to use them

Depending on where you live, you may have some or all of the rights below under the GDPR and UK GDPR, the California Consumer Privacy Act as amended by the CPRA, Canada's PIPEDA, or a similar law. We honour these requests wherever you live, rather than checking first whether you can compel us:

• Know what we hold about you and why
• Get a copy, in a portable format
• Correct anything inaccurate or out of date
• Delete it
• Object to or restrict what we do with it, including our reliance on legitimate interests
• Withdraw consent where we asked for it
• Not be discriminated against for exercising any of this

Email inquiry@humanintheloop.com. We reply within 30 days, or tell you inside 30 days if we need longer and why. We may need to confirm who you are before handing over a copy of a record — that check protects you, not us. An authorised agent may act for you if you say so in writing.

You can also block analytics at any time using your browser's cookie controls, a tracking blocker, or Google's opt-out browser add-on. Everything on this site works without it.

If you think we have handled your information badly, tell us first and give us the chance to fix it. You also have the right to complain to your data protection authority — in the UK the Information Commissioner's Office, in the EU your national supervisory authority, and in Canada the Office of the Privacy Commissioner.

Children

This site and our services are for people hiring, and for professionals being considered for work. Neither is directed at children, and we do not knowingly collect information from anyone under 16. If you believe we hold something about a child, tell us and we will delete it.

Changes to this policy

When this policy changes, the new version is posted here with a new date at the top. If a change materially affects how we handle information we already hold about you, we will make a reasonable effort to tell the people affected rather than rely on you re-reading the page.

Contact

Questions about this policy, or any request under it: inquiry@humanintheloop.com. A real person reads that address.