Privacy Policy

1. Who We Are

Lombard Tech Ltd ("Lombard Tech," "we," "us," or "our") is a recruitment technology and advisory firm serving clients and candidates globally. We are the organization that determines how and why the personal data described in this Policy is processed. For purposes of data‑protection law we act as a Data Controller (EU/UK) and a Business (California and other U.S. state privacy laws) for most of the processing described here. In some situations we may act as a Processor / Service Provider when we handle personal data strictly on behalf of a client under contract.

2. Scope of This Policy

This Policy explains how we collect, use, disclose, store, transfer, and otherwise process personal data relating to:

• • Candidates – job‑seekers, interim consultants, contractors, advisors, executives, and other professionals whose information we receive in connection with recruitment, talent mapping, or market intelligence services.
• • Client Contacts – employees, agents, hiring managers, procurement contacts, and decision‑makers at organizations that engage, may engage, or are evaluated by Lombard Tech.
• • Website Visitors & Online Users – visitors to www.lombardtech.com, recipients of our marketing communications, webinar registrants, event participants, and users of any portals or talent platforms we operate.
• • Vendors & Partners – service providers, technology partners, background screening partners, payroll / benefits intermediaries, and others who help us deliver services.
• • Other Individuals – people whose data we receive from publicly available sources or from referrals.

3. Personal Data We Collect

3.1 Identification & Contact Data

Name, title, company, postal address, email address, telephone numbers, professional profile URLs, government identifiers where required for payroll/placement compliance (collected only where lawful and necessary).

3.2 Professional & Employment Data

CVs/resumés, employment history, skills, certifications, education, salary expectations, compensation history (where lawful), right‑to‑work status, references, interview feedback, and notes from conversations.

3.3 Assessment & Screening Data

Interview recordings, psychometric or technical assessments, background check results, and work eligibility documentation.

3.4 Marketing & Preference Data

Subscriptions, event registrations, content downloads, marketing preferences, cookie and tracking data.

3.5 Device / Technical Data

IP address, device identifiers, browser type, operating system, referral URLs, pages viewed, and interaction logs gathered via cookies, pixels, or similar technologies.

4. How We Use Personal Data

We use personal data for the following purposes:

• • Candidate sourcing & talent mapping – Building talent networks and fulfilling client mandates
• • Recruitment process management – Screening, shortlisting, presenting candidates to clients
• • Background & compliance checks – Verification and due diligence where required
• • Communications & marketing – Insights, market reports, event invitations, and service updates
• • Analytics & service improvement – Improving database quality and enhancing technology features

5. Disclosures of Personal Data

We disclose personal data only as necessary for the purposes described in this Policy:

• • Client Organizations – Candidate information shared with client hiring teams when appropriate
• • Vetted Service Providers – IT hosting, CRM platforms, background screening, skills testing, and other contractors
• • Professional Referees – With your consent or at your request for reference checks
• • Legal & Regulatory Authorities – Where required to comply with law or protect our rights

6. Data Security

We implement technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include access controls, encryption, secure hosting, vendor due diligence, incident response procedures, and employee training.

7. Your Privacy Rights

7.1 EU/EEA & UK Rights

Subject to legal limits, you may have the right to:

• • Access your personal data and receive a copy
• • Rectify inaccurate or incomplete data
• • Erase certain data ("right to be forgotten")
• • Restrict processing
• • Object to processing based on legitimate interests and to direct marketing
• • Data portability
• • Withdraw consent at any time where processing relies on consent

7.2 California & Other U.S. State Rights

Depending on your state of residence, you may have rights to:

• • Know/access the personal information collected about you
• • Delete personal information (subject to exemptions)
• • Correct inaccurate personal information
• • Opt out of sale or sharing of personal information
• • Non‑discrimination for exercising your privacy rights

8. How to Exercise Your Rights

To exercise your rights, please contact us at privacy@lombardtech.com. Please specify the nature of your request (e.g., access, deletion, correction, opt‑out). We will verify your identity before fulfilling requests.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, including to satisfy legal, accounting, or reporting requirements. When determining retention periods we consider the nature and sensitivity of the data, ongoing relationships, statutory requirements, and legitimate business needs.

10. Contact Us

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, our services, or our data practices. When we make material changes, we will post a prominent notice on our website and update the "Last Updated" date below.