Plain-language summary.
We collect only what we need to match buyers with vendors: the brief details you submit, your business email, and basic analytics that contain no advertising identifiers. We store everything in the European Union. We do not sell data. We do not share it with advertising networks. You can request deletion at any time and we will action it within 30 days.
1. Data we collect
When you submit a brief, we collect the role, city or region, target start date, and your work email. When you book a call, Calendly provides us with your name, email, and selected time slot. Our analytics provider (Plausible) records aggregate page views with no cookies and no personal identifiers.
2. How we use it
Brief data is used to classify the role against our ICP, to route the request to the right vendor pool, and to contact you with a shortlist. Your email is used solely for transactional communication about your brief. We do not send marketing email at launch.
3. Legal basis
We process your data on the basis of legitimate interest in fulfilling the service you requested (Article 6(1)(b) and 6(1)(f) GDPR). No special categories of personal data are processed.
4. Retention
Brief data is retained for 24 months from the date of submission, after which it is deleted. Successful placement records are retained for 7 years to satisfy German commercial bookkeeping obligations. You can request earlier deletion at any time via privacy@xpertdirect.io.
5. Your rights
Under GDPR you have the right to access, correct, port, restrict, and delete your personal data. To exercise any of these rights, email privacy@xpertdirect.io. We respond within 30 days. You also have the right to lodge a complaint with the Berlin Commissioner for Data Protection and Freedom of Information.
6. International transfers
All buyer and vendor data is stored within the European Union (Frankfurt and Dublin regions). Where a subprocessor operates outside the EU, we rely on the European Commission's Standard Contractual Clauses. The full list of subprocessors is published on our Subprocessors page.
7. Contact
Data Controller: XpertDirect GmbH, Berlin. Email: privacy@xpertdirect.io.