Candidate Privacy Notice
Last updated: 3 May 2026· GDPR Articles 13 & 14
1. Who we are (Art. 13(1)(a))
AsyncHire Ltd(“AsyncHire”, “we”, “us”) is the data controller for the personal data described in this notice.
Contact: hello@asynchire.io
Address: AsyncHire Ltd, [Registered Address], United Kingdom
2. What data we process (Art. 13(1)(c))
- Identification data — full name, job title, LinkedIn profile URL
- Professional data — current employer, seniority level, skills, work history sourced from public professional networks via Proxycurl / Clay
- Contact data — professional email address (where publicly available)
- Engagement signals — hiring intent signals, funding events, role openings detected from public sources
- Interaction data — email open/reply events, feedback provided on outreach quality
3. Where we get your data (Art. 14(2)(f))
We collect data from the following public or commercial sources:
- LinkedIn (public profiles via Proxycurl API)
- Clay data enrichment platform
- Bright Data public web index
- Company websites and press releases (funding, hiring announcements)
We do not collect data directly from you unless you respond to outreach.
4. Why we process your data and our legal basis (Art. 13(1)(c)(d))
| Purpose | Legal Basis |
|---|---|
| Identify candidates who match a client vacancy | Legitimate interests (Art. 6(1)(f)) — connecting professionals with relevant opportunities |
| Send personalised outreach about a specific role | Legitimate interests (Art. 6(1)(f)) — B2B professional recruitment |
| Qualify and score candidate relevance (LQS) | Legitimate interests (Art. 6(1)(f)) — improving match quality |
| Comply with legal obligations (e.g. erasure requests) | Legal obligation (Art. 6(1)(c)) |
5. Legitimate interests assessment (Art. 13(1)(d))
Where we rely on legitimate interests, we have balanced our interests against yours. We process only professional data available in public professional contexts. Outreach is limited to one initial contact per opportunity. You can object at any time (see §8 below) and we will cease processing immediately.
6. Who we share your data with (Art. 13(1)(e))
We use the following sub-processors who act under our instructions:
- Proxycurl / Clay / Bright Data — data enrichment (US; SCCs in place)
- HeyGen / ElevenLabs — personalised video/voice generation (US; SCCs in place)
- Resend / Instantly — email delivery and sequencing (US; SCCs in place)
- Hetzner — VPS hosting where all data is stored (Germany — EU ✅)
- Our client companies — if you are selected as a qualified candidate, your profile brief is shared with the relevant hiring company under confidentiality obligations
We do not sell your data to third parties.
7. International transfers (Art. 13(1)(f))
Some sub-processors are based outside the EEA (primarily the United States). Transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission under Art. 46(2)(c) GDPR. A copy of applicable SCCs is available on request.
8. How long we keep your data (Art. 13(2)(a))
- Candidate profiles: 90 days from the date of initial signal detection, unless actively engaged in a hiring process
- Active hiring process: retained for the duration of the process plus 30 days
- Opt-out / erasure records: 3 years (to prevent re-contact)
- Billing and compliance records: 7 years (legal obligation)
9. Your rights (Art. 13(2)(b))
You have the right to:
- Access (Art. 15) — request a copy of the data we hold about you
- Rectification (Art. 16) — correct inaccurate data
- Erasure (Art. 17) — request deletion of your data
- Restriction (Art. 18) — limit how we use your data
- Data portability (Art. 20) — receive your data in a machine-readable format
- Object (Art. 21) — object to processing based on legitimate interests at any time; we will cease immediately
To exercise any right, email hello@asynchire.iowith “Privacy Request” in the subject line. We will respond within 30 days.
10. Right to lodge a complaint (Art. 13(2)(d))
You have the right to lodge a complaint with your national supervisory authority. In the UK: Information Commissioner’s Office (ICO) — ico.org.uk. In the EU: the supervisory authority in your country of residence.
11. Automated decision-making (Art. 13(2)(f))
We use an automated Lead Quality Score (LQS) to rank candidate relevance (0–100). Candidates scoring ≥75 may be shortlisted without human review before being presented to client companies. You have the right to request human review of any automated decision affecting you — contact us at the address above.
12. Changes to this notice
We may update this notice when our processing activities change. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be communicated via the email used in any prior outreach.