Privacy Policy

Vertex — People & Technology ("Vertex", "we", "us") respects your privacy. This policy explains what personal data we collect through this website, why we collect it, how long we keep it, and the rights you have over it.

Last updated: August 2026

1. Who we are

Vertex — People & Technology is the data controller for the personal data described in this policy. You can reach us at info@vertexpeopletech.com or through our contact page.

2. What we collect

Information you give us

• Enquiry form. Your name, email address, and optionally your phone number, company name and the service you are interested in, together with the content of your message.
• Candidate registration. If you register with our talent pool or apply for a role, we collect your name, contact details, location, current role, experience, any links you provide, and the CV or résumé you upload.

Information collected automatically

• Technical data attached to form submissions. When you submit a form we record your IP address and browser user-agent string. We use this solely to detect and block automated spam and abuse.
• Server logs. Our hosting provider keeps standard web server logs, which may include IP addresses and requested pages.
• Analytics. Only if you have accepted analytics cookies. See section 6.

3. Why we use it, and our legal basis

Purpose	Data used	Legal basis
Responding to your enquiry	Name, contact details, message	Legitimate interest / steps prior to a contract
Considering you for roles and contacting you about opportunities	Candidate details and CV	Your consent, given at registration
Preventing spam and abuse of our forms	IP address, user-agent	Legitimate interest in site security
Understanding how the site is used	Analytics data	Your consent, given via the cookie notice

4. Who we share it with

We do not sell your personal data, and we do not share it for advertising.

• Candidates: we will never send your CV or details to a prospective employer without asking you first, on each occasion.
• Service providers: our web hosting and email providers process data on our behalf, under contract, and only on our instructions.
• Legal obligations: we may disclose data where we are required to by law.

5. How long we keep it

• Enquiries: up to 24 months from your last contact with us, then deleted.
• Candidate records and CVs: up to 24 months from your last interaction, after which we delete them or ask if you would like to stay registered.
• Spam-prevention data: retained with the associated submission and deleted with it.

You can ask us to delete your data sooner at any time — see section 7.

6. Cookies

This site uses one strictly necessary cookie, which keeps your session working and secures our forms against cross-site request forgery. It contains no personal information and is deleted when you close your browser. Because it is essential to the operation of the site, it does not require consent.

We set no analytics, advertising or tracking cookies unless you accept them through the cookie notice. Declining stores nothing extra, and your choice is remembered in your browser's local storage rather than in a cookie.

We host our own web fonts rather than loading them from a third-party font service, so your IP address is not shared with one when you visit.

We do not currently run any analytics at all. The only cookie this site sets is the strictly-necessary session cookie described above.

7. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we use it;
• receive your data in a portable format;
• withdraw consent at any time, where our use is based on consent;
• complain to your local data protection authority.

To exercise any of these, contact us at info@vertexpeopletech.com. We will respond within one month.

8. How we protect your data

The site is served over HTTPS. Uploaded CVs are stored outside the public web directory under randomised filenames, so they cannot be reached by guessing a URL, and are only accessible to authorised staff through an authenticated area. Administrator passwords are stored as salted one-way hashes, never in a recoverable form. Access to enquiry and candidate data is limited to staff whose role requires it.

9. Children

This site is intended for business and professional use and is not directed at children. We do not knowingly collect data from anyone under 16.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date above will always reflect the current version.

---

Questions about this policy? Get in touch — we are happy to explain anything here in plain terms.