Privacy Policy
Last updated: 4 May 2026
NxtFind ("we", "us") operates a recruitment marketplace connecting UK startups with software engineers. This policy explains what personal data we collect, why, and your rights under the UK GDPR and Data Protection Act 2018.
1. Data we collect
- Hiring leads: company name, contact name, work email, phone (optional), company size, roles you are hiring for, and any free-text message.
- Candidates: first and last name, email, phone (optional), LinkedIn / GitHub / portfolio URLs, current role, years of experience, skills, preferred roles, notice period.
- Operational metadata: submission timestamp, IP address (for rate limiting and abuse prevention), and the source of the form.
2. Lawful basis
We process your data on the basis of your explicit consent, captured via the consent checkbox on each form, and our legitimate interest in operating a recruitment service.
3. Who we share data with
- Attio (CRM): we synchronise your submission to our CRM so our team can respond. Attio is GDPR-compliant; see their policy at attio.com/legal/privacy.
- Neon (database hosting): your data is stored on encrypted Postgres infrastructure inside the EU.
- Vercel (web analytics): we use Vercel's privacy-friendly analytics to count page views and form submissions. It is cookieless and does not collect personal data or track you across sites; see vercel.com/legal/privacy-policy.
We never sell your data. We never share it with advertisers.
4. Retention
We keep submitted data for as long as you remain in our talent network or active hiring conversations, and for up to 24 months after our last contact. After that we delete or anonymise it.
5. Your rights
You have the right to access, correct, export, restrict processing of, or delete your personal data. To exercise any of these rights, email privacy@nxtfind.com. We respond within 30 days.
You may also lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.
6. Security
Data is transmitted over HTTPS and stored encrypted at rest. Access is restricted to authorised NxtFind staff. We follow the controls documented in our internal security policy.
7. Contact
Data controller: NxtFind. Email privacy@nxtfind.com.