Effective Date: 22/09/26

1. Who We Are

ELMA TALENT LTD trading as Aura Talent ("we", "us", or "our") respects your privacy and is committed to protecting your personal data.

Company Details:

• Company Name: ELMA TALENT LTD (trading as Aura Talent)
• Company Number: 16178575
• Registered Office: [Insert current registered office address]
• Privacy Contact: josh@auratalent.io

2. How We Collect Your Data

We process personal data regarding our website visitors, clients, and candidates. We collect this data in two ways:

• Directly from you: When you apply for a role, submit a contact form, email us, or speak with our team.
• Indirectly from third parties: For candidates, we actively source data from public domains and third-party platforms. This includes LinkedIn, specialized job boards, referrals from your professional network, and other publicly accessible professional profiles.

3. What Data We Use and Why

We collect and use your data under specific lawful bases defined by UK data protection law:

• Contact & Identity Data (Name, email, phone, LinkedIn profile)
  
  • Purpose: To communicate with you and respond to website inquiries.
  • Lawful Basis: Legitimate Interest / Consent
• Professional Candidate Data (CV, work history, skills, portfolio, salary expectations)
  
  • Purpose: To assess your suitability for roles and match you with our clients.
  • Lawful Basis: Legitimate Interest / Contractual Necessity
• Technical & Usage Data (IP address, browser type, page views)
  
  • Purpose: To analyze site traffic and improve our website functionality.
  • Lawful Basis: Consent (via Cookie Banner)

5. International Data Transfers

Some of our software providers may store data on servers outside the UK or European Economic Area (EEA). Whenever we transfer your personal data outside the UK, we ensure a similar degree of protection is afforded to it by ensuring appropriate safeguards are in place, such as standard contractual clauses or adherence to the UK International Data Transfer Agreement (IDTA).

6. Data Retention and Security

We only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including any legal, accounting, or reporting requirements. Candidate data is kept active while we are actively assisting you with your career. We employ appropriate security measures to prevent your data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed.

7. Your Data Protection Rights

Under the UK GDPR and related legislation, you have the right to:

• Request access to your personal data.
• Request correction of incomplete or inaccurate data.
• Request erasure of your data (the "right to be forgotten").
• Object to processing or request a restriction of processing.
• Request data portability to transfer your data to another party.
• Withdraw consent at any time (e.g., for cookies or specific marketing communications).

To exercise any of these rights, please email josh@auratalent.io.

Complaints to the ICO

If you are unhappy with how we have handled your data, you have the right to make a complaint to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO.