Transparency
Data & Résumé Handling
A plain description of what happens to a submission after you send it — where it is stored, who is able to see it, and when it is removed.
What We Store
Only what you choose to send
We do not ask for identification numbers, financial details, or any sensitive personal data, and we ask that you do not include them in a message or résumé.
- Candidate profile submissions
- Name, email, phone, current role, years of experience, area of expertise, preferred location, LinkedIn URL, your message, and — if you choose to attach one — your résumé file.
- Employer inquiries
- Your name, organization, work email, phone, the role or mandate, seniority level, location, number of positions, and any context you provide.
- General contact inquiries
- Your name, email, phone, current role, company, the type of inquiry, the service you are interested in, and your message.
- Technical records
- The date and time of submission, and a one-way hashed value derived from your connection used only to rate-limit abusive automated submissions. We do not use advertising or tracking cookies.
Storage
Résumés are private by construction
Where submissions are stored
Form submissions are written to a managed, access-controlled Postgres database hosted by our infrastructure provider. Data is encrypted in transit over HTTPS and encrypted at rest by the provider. Submissions are never written to a public location and are not indexed by search engines.
Where résumés are stored
Uploaded résumés go into a private storage bucket that has no public URL. The file is uploaded directly from your browser using a short-lived, single-use upload link issued by our server, and the storage location is chosen server-side — it cannot be guessed, browsed, or listed. Accepted formats are PDF, DOC, DOCX, RTF, and TXT, up to 5 MB.
How résumés are opened
A résumé can only be opened by an authenticated administrator, and only through a signed link that expires after 60 seconds. Every résumé view therefore requires a fresh, deliberate action by an authorized person. There is no permanent link to any file.
Access
A short, named list of people
Who can read submissions
Only authorized Global Hire Partners personnel who have been granted the administrator role can read submissions. Access is enforced at the database level by row-level security, not merely hidden in the interface: an unauthenticated or non-administrator request returns nothing at all.
Who can change them
Administrators can update the review status of a submission (new, reviewing, contacted, closed). Submission content itself is not edited. Records cannot be deleted through the website interface; deletion requests are handled manually so that the request is verified first.
Email notifications
A notification containing the details of your submission is sent to the firm's monitored inbox so that a person reviews it. Notifications are sent server-side to a fixed internal address and are not forwarded to third parties.
Service providers
We use infrastructure providers for database hosting, private file storage, and email delivery. They process data on our instructions to operate the service, and are not permitted to use it for their own purposes. We do not sell, rent, or trade your information, and we do not send your details to any employer without your knowledge and agreement.
Retention
How long each type of record is kept
- Up to 24 months
Candidate profiles and résumés
Retained for up to 24 months from your last interaction with us, so that we can consider you for relevant mandates as they arise. If there has been no contact in that period, the profile and any attached résumé are removed. Where a placement discussion is active, the record is kept for the duration of that process and 24 months after it concludes.
- Up to 36 months
Employer inquiries and mandates
Retained for up to 36 months to support ongoing client relationships and to meet our contractual and record-keeping obligations.
- Up to 12 months
General contact inquiries
Retained for up to 12 months, unless the inquiry becomes a candidate or client relationship, in which case the relevant period above applies.
- Up to 30 days
Rate-limiting records
The hashed anti-abuse records described above are short-lived and carry no name, email, or message content.
Your Control
Ask us to show, correct, or delete it
You can ask us at any time for a copy of what we hold about you, ask us to correct it, or ask us to delete your profile and any résumé you uploaded. Send the request from the email address you used to submit, so we can confirm it is you. We action deletion requests within 30 days and confirm in writing once the record and file are removed.
This page describes our current handling practices and may be updated as our systems change. Any revision is published here.