Back to Home

Privacy Policy

Last updated: April 7, 2026

This Privacy Policy ("Privacy Policy") has been prepared by UpliftPeople Consulting OÜ ("Uplift", "We", "Us" or "Our"), the Data Controller with its registered office at Harju maakond, Kesklinna linnaosa, 3. korrus, Viruväljak 2, Tallinn Estonia under Personal Data Protection Act and General Data Protection Regulation.

This Privacy Policy describes our policies and procedures on the collection, use and disclosure of your Personal Data when we perform our Services and tells you about your privacy rights. We consider your privacy to be of utmost importance and we will always hold and process your information in accordance with data protection laws.

1. Interpretation and Definitions

a. Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

b. Definitions

For the purposes of this Privacy Policy:

  • Business: refers to the Company as the legal entity that collect your personal information and determines the purposes and means of the processing, or on behalf of which such information is collected and that alone, or jointly with others, determines the purposes and means of the processing.
  • Candidate: refers to any individual who applies for a job opening. This includes individuals who submit their CVs or other personal information through our website, LinkedIn, or other recruitment channels.
  • Candidate Pool: refers to the collection of CVs and Personal Data of individuals who have given their explicit consent to be considered for future employment opportunities. Uplift People Consulting OÜ maintains this pool for a period of six months, after which candidates are contacted to renew their consent if they wish to remain in the pool.
  • Client: refers to any employers or potential employers that engages Uplift People Consulting OÜ to provide recruitment and headhunting services.
  • Company: refers to Uplift People Consulting OÜ.
  • Country: refers to Estonia.
  • Data Controller: for the purposes of the Law, refers to the Company, Uplift People Consulting OÜ, as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
  • Data Processor: for the purposes of the Law, a natural or legal person that processes Personal Data on behalf of a Data Controller as instructed by the Data Controller.
  • Data Subject: for the purposes of the Law, refers to an individual whose Personal Data is being collected, processed, or stored by a Data Controller or Data Processor.
  • Direct Recruitment: refers to identifying and shortlisting of candidates for the purpose of matching them with an open role.
  • GDPR: refers to EU General Data Protection Regulation.
  • Headhunting Service: refers to the targeted and proactive search for highly qualified candidates, often for executive or specialized roles, typically involving a personalized approach to identify, engage, and attract individuals who may not be actively seeking new opportunities.
  • Law: refers to Personal Data Protection Act, UK GDPR, EU General Data Protection Regulation, and any other applicable data protection legislation.
  • Personal Data: is any information that relates to an identified or identifiable individual.
  • Online Job Portals: refers to websites and online platforms, such as LinkedIn, that facilitate the posting of job vacancies and the collection of job applications.
  • Services: refers to the Direct Recruitment and Headhunting services provided by Uplift.
  • Service Provider: refers to third-party companies or individuals employed by the Company, to provide the services to the Company.
  • Supervisory Authority: refers to Estonian Data Protection Inspectorate.
  • Website: refers to www.uplift-people.com.

2. Collecting and Using Your Personal Data and Purposes of Processing

Mainly, we collect and use the Personal Data you provide to us. However, in certain circumstances, we may collect your Personal Data from third parties. Please find below details on our activities regarding the collection and processing of your Personal Data, as well as the processing purposes.

Collecting Applications for Open Positions: When you apply for open positions on our Website or through Online Job Portals, such as LinkedIn, we collect your Personal Data, including but not limited to your name, date of birth, contact details, CV, and any other information you provide in your application. This information is processed for the purposes of evaluating your suitability for the relevant positions, conducting interviews, assessing your skills, and shortlisting.

If you apply for a job opening through Online Job Portals, please note that the relevant platform may retain your Personal Data. We advise you to review the privacy policy of the relevant platform to understand how your Personal Data is handled.

To assist with our recruitment process, we use Workable, an online application provided by Workable Software Limited. Workable processes personal information on our behalf as a data processor. Workable is only entitled to process your Personal Data in accordance with our instructions and is obligated to ensure that your data is handled securely and in compliance with applicable data protection laws.

  • Blind Positions: For most of our processes, we keep the Client's information confidential. Therefore, the positions you apply for are blind positions. If we determine that you are suitable for a position, we will first inform you about the Client and obtain your explicit consent before transferring your Personal Data to the Client.
  • Interviews: When you are selected for an interview, we may collect additional Personal Data from you, including but not limited to interview notes, assessments, and feedback from interviewers. This information is processed to further evaluate your suitability for the relevant positions, to understand your skills and competencies in more detail.
  • Assessment and Selection Process: As part of our evaluation and assessment process, we may collect data related to your performance during various stages of our recruitment process. This includes but is not limited to language assessments, and any other evaluations we made. This information helps us to identify the most suitable candidates for our job openings and to ensure a fair and thorough selection process.

    We may use Workable’s technology to select appropriate candidates for us to consider based on criteria expressly identified by us, or typical in relation to the role for which you have applied. The process of finding suitable candidates is automatic, however, any decision as to who we will engage to fill the job opening will be made by our staff.

  • Cross-border Data Transfers: Some of our Clients may be located outside the GDPR area. In such cases, we will inform you and obtain your explicit consent under GDPR Article 49(1)(a). You will be informed of the possible risks of such transfers due to the absence of an adequacy decision and appropriate safeguards.
  • Candidate Pool: To enhance your opportunities for future employment, we maintain a Candidate Pool. This pool allows us to keep track of promising candidates and consider them for upcoming positions that match their qualifications.

    With your explicit consent, we may retain your CV and Personal Data in our Candidate Pool for a period of six months. We will contact you to renew your consent at the end of this term if you wish to remain in the candidate pool. This allows us to consider you for future opportunities that may arise.

  • Headhunting: As part of our headhunting services, we identify and approach potential candidates who may be suitable for our Client's vacancies. This involves collecting publicly available information from LinkedIn and other open sources. When we identify a potential candidate, we may collect additional Personal Data from publicly accessible sources. This data is used to evaluate the candidate's suitability for the role and to reach out to them regarding the opportunity.
  • When You Get in Touch with Us: If you contact us for any reason, we will process your Personal Data to handle and respond to your inquiries, provide support, and improve our services.
  • Open Position Bulletins: With your explicit consent, we may send you bulletins featuring open positions that match your profile and career interests. You have the right to withdraw your consent and opt-out at any time.

3. Lawful Basis for Processing Your Personal Data

Under the GDPR and Personal Data Protection Act, the lawful bases we rely on for the processing of your Personal Data include:

  • Legitimate Interest: We may process your Personal Data based on our legitimate interests. These interests include, without limitation, our interest in assisting job applicants in finding new employment opportunities.
  • Contract: We may process Personal Data to fulfill our contractual obligations to you.
  • Consent: In transferring your Personal Data to our Clients for blind positions, storing your Personal Data in our Candidate Pool and sending you Open Position Bulletins, we rely on your consent.
  • Legal Obligation: We may process your Personal Data to comply with legal or regulatory obligations.

4. Sharing Your Personal Data

We value your privacy and are committed to protecting your Personal Data. We only share your information in specific situations and with entities that adhere to our stringent data protection standards.

  • Clients: We share your Personal Data only with specific Clients. For blind positions, we obtain your prior explicit consent before transferring your Personal Data.
  • Service Providers: We may share your Personal Data with our trusted Service Providers who assist us in delivering our Services.
  • Legal and Governmental Requests: We may disclose your Personal Data to courts, government agencies, or other judicial and governmental bodies when required by law.

5. How Long We Keep Your Personal Data

We are committed to retaining your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations.

Data and documentation collected during the application process will be deleted after the evaluation process is complete unless you provide explicit consent for us to store your data in our Candidate Pool.

If you give explicit consent, we will retain your CV and personal data in our Candidate Pool for a period of six months. At the end of this term, we will contact you to renew your consent. If you do not renew your consent, your Personal Data will be deleted.

6. Ensuring the Security of Your Personal Data

We have taken appropriate technical and organizational security measures to protect your Personal Data against accidental or unlawful destruction, loss, or alteration and against the unauthorized disclosure, abuse, or other processing in violation of Law. This includes identity and access management, preventing unauthorized viewing of personal data, and set password requirements.

7. Your Rights Regarding Personal Data

  • Access Your Personal Data: You have the right to access, update, or request the deletion of your Personal Data held by Us.
  • Correct Inaccurate Information: You have the right to request corrections to ensure your data is accurate and up-to-date.
  • Object to Data Processing: You can object to the processing of your Personal Data when We rely on a legitimate interest.
  • Request Data Erasure: You have the right to request the deletion or removal of your data.
  • Data Portability: Upon request, we will provide you or a third party with a structured, commonly used, machine-readable format of your Personal Data.
  • Withdraw Consent: You can withdraw your consent to the use of your Personal Data at any time.

8. Exercising Your Data Protection Rights

Should you wish to exercise your rights under the Law, please reach out to Us. To ensure the security of your data, We may ask you to confirm your identity before addressing your requests.

We value your privacy and aim to address your concerns as swiftly as possible. Please note that in accordance with Law, we will respond to your requests within 30 days at the latest.

9. Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, you can contact us: info@uplift-people.com