GDPR Compliance

Our Commitment

Hiretio complies with the General Data Protection Regulation (GDPR) and is fully committed to protecting the rights of individuals in the European Economic Area (EEA). We view data protection not as a legal obligation, but as a core responsibility to the people who trust us with their information.

This page explains how GDPR applies to your use of Hiretio and what rights you have as an EEA resident. For full details on how we process your data, please also refer to our Privacy Policy.

Lawful Basis for Processing

Under GDPR, we are required to have a lawful basis for processing your personal data. Hiretio relies on the following legal grounds:

• Consent: For optional data such as your portfolio URL, LinkedIn profile, and marketing communications — we process data only with your explicit consent.
• Legitimate Interests: For platform security, fraud prevention, and improving our services — where we have a legitimate interest that does not override your rights.
• Legal Obligation: Where we are required to retain or process data to comply with applicable law or court order.

Your GDPR Rights

As an individual in the EEA, you have the following rights regarding your personal data:

Data Retention

We retain your data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy, or as required by law.

After the applicable retention period, data is securely deleted or irreversibly anonymized.

International Data Transfers

Hiretio may transfer your personal data to countries outside the EEA in order to operate our platform globally. When such transfers occur, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) — approved by the European Commission
• Adequacy Decisions — transfers to countries deemed to offer adequate protection
• Binding Corporate Rules — where applicable within our internal operations

We only transfer data to jurisdictions or organizations that meet our data protection standards.

Data Security Measures

Hiretio implements robust technical and organizational security measures to protect your data, including:

• AES-256 encryption for all stored identity documents and sensitive data
• TLS encryption for all data transmitted to and from our platform
• Regular third-party security audits and penetration testing
• Strict role-based access controls — only authorized personnel can access personal data
• Staff training on data protection and GDPR obligations
• Incident response procedures with breach notification within 72 hours to the relevant supervisory authority when required

Exercising Your Rights

When submitting a request, please include your full name and email address so we can verify your identity before processing the request. In complex cases, we may extend the response period by up to two additional months, in which case we will notify you within the initial one-month window.

Complaints

If you are not satisfied with our handling of your personal data or your GDPR rights request, you have the right to lodge a complaint with your local data protection supervisory authority.

EEA residents can find their relevant authority through the European Data Protection Board (EDPB). We encourage you to contact us first — most concerns can be resolved quickly and directly.

Data Protection Contact

For all GDPR-related enquiries, data subject access requests, or data protection concerns, please contact our team: