Data Flags is an IT consulting and staffing company. We help people find contract and permanent roles, and we help our clients fill them. Doing that means handling personal information — most often a candidate's CV, contact details and work history — and we take that responsibility seriously.
This policy explains what we collect, why we collect it, who we share it with, how long we keep it, and the choices you have. It applies to www.dataflags.com and to our recruiting and staffing activities generally, whether you reach us through this site, a job board, a referral, or a recruiter.
Different people interact with us in different ways, and the information we hold reflects that. This policy covers:
When you apply or ask us to represent you, we typically collect:
Where a client or a role requires it, and where the law allows, we may also handle information such as the results of a background or reference check, or professional licence verification. If you are placed on an assignment, we will collect the additional information needed to employ and pay you — for example a government identification number for tax and employment-eligibility purposes, and bank details for payroll. We ask for this only at the point it is actually needed, not when you first apply.
If you use the enquiry or careers forms on this site, we receive the details you type into them, including any file you attach. Our web host also keeps standard server logs, which record technical details such as IP address, browser type, the pages requested and the time of the request.
For people at client companies we generally hold business contact details — name, job title, work email, work telephone number — and records of our correspondence and the roles being worked on.
| What we use it for | What that means in practice |
|---|---|
| Matching you to roles | Reviewing your experience against open positions and putting you forward for ones that fit. |
| Submitting you to clients | Sharing your CV and relevant details with a client so they can consider you. We tell you before we submit you to a client. |
| Communicating with you | Responding to enquiries, arranging interviews, and — if you want them — telling you about roles that may suit you. |
| Employment and payroll | If you are placed, employing you, paying you, administering benefits, and meeting tax and employment-eligibility obligations. |
| Running our business | Keeping records, managing our relationships with clients, and improving how we work. |
| Legal and compliance | Meeting our legal obligations, responding to lawful requests, and establishing or defending legal claims. |
| Security | Protecting our website and systems, and detecting and preventing fraud or misuse. |
We share personal information only where there is a reason to, and only with:
We do not share your CV with a client without telling you which client and which role.
Data Flags does not sell personal information, and does not share it for cross-context behavioural advertising. Submitting a candidate to a client for a role is not a sale of that candidate's information — it is the service you have asked us to perform. We have not sold or shared personal information for those purposes in the preceding twelve months.
We keep this simple: our website does not run advertising trackers, marketing pixels or third-party analytics. We do not build advertising profiles from your visit.
Two things are still worth knowing:
You can block or delete cookies in your browser settings. Because we do not rely on tracking cookies, doing so should not affect your ability to browse the site or apply for a role.
We keep candidate information for as long as it is useful for the purpose you gave it to us for — that is, while we are considering you for roles and for a reasonable period afterwards, so that we can approach you about suitable openings in future. If you would rather we did not keep your details on file, tell us and we will remove them.
Some records we are required to keep for longer, such as payroll, tax and employment-eligibility records for people we have placed. Where information is no longer needed and we are not required to retain it, we delete it or render it no longer identifiable.
We use reasonable administrative, technical and physical safeguards designed to protect personal information against loss, misuse and unauthorised access — including restricting access to those who need it, and using reputable service providers for storage and transmission.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please avoid sending sensitive identifiers such as a full government identification number by ordinary email; if we need something of that kind, we will tell you a secure way to provide it.
Depending on where you live, you may have some or all of the following rights in relation to your personal information:
Residents of California and of other states with comprehensive privacy laws have these rights under their state's legislation, including the right to appeal a refused request where the applicable law provides one.
Email Contact@DataFlags.com with the subject line "Privacy Request", or write to us at the postal address below, and tell us what you would like us to do.
So that we do not disclose your information to someone else, we will ask you to verify your identity before we act — usually by confirming details we already hold. We will respond within the time required by the law that applies to you. There is no charge for a reasonable request.
Our website and services are intended for people seeking work and for business contacts, and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.
Our site links to other places — client sites, job boards, professional networks, our social media profiles, and the application form hosted by Google. Those services have their own privacy policies and we are not responsible for their practices. We would encourage you to read the policy of any site you share information with.
Data Flags is based in the United States, and personal information we collect is processed there. Some of our service providers may process or store information in other countries. Where information moves across borders, we take steps intended to ensure it remains protected in a manner consistent with this policy and applicable law.
We may update this policy as our business, technology or the law changes. When we do, we will revise the "Last updated" date at the top of this page. If a change materially affects how we handle information we already hold about you, we will take reasonable steps to let you know.
Questions about this policy, or about how we handle your information: