Privacy Policy

This Privacy Policy explains how NearTalent, operated by SelectionBook S.A. de C.V. ("we", "us", "NearTalent") collects, uses, discloses and protects your personal information when you visit neartalentlatam.com or interact with our recruiting services. We comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by CPRA, the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information we collect

Information you provide

• Contact information: name, email address, company, role title, when you submit our contact form, request a salary benchmark, or download a report
• Candidate information: resume, professional history, salary expectations, work authorization, when you apply for a role through our network
• Communication content: messages you send to our team via email or contact forms

Information collected automatically

• Usage data: pages visited, time on page, referrer URL, click events on our site (aggregated, not individually identifying)
• Device data: browser type, operating system, screen resolution, IP address (truncated to /24 within 24 hours), approximate geographic region

What we do NOT collect

• We do not use third-party advertising trackers (no Facebook Pixel, no Google Ads tags)
• We do not buy or sell email lists
• We do not use behavioral profiling beyond first-party analytics
• We do not collect data from minors under 16

2. How we use your information

We use your information only for the following purposes:

• Service delivery: to respond to your inquiries, deliver shortlists, send requested reports and provide recruiting services
• Candidate matching: to evaluate candidates against client briefs and present qualified shortlists
• Site improvement: aggregated analytics to understand which content is useful
• Legal compliance: to meet tax, labor and regulatory requirements in jurisdictions where we operate

We do not use your data for automated decision-making, profiling that produces legal effects, or any purpose not listed above.

3. Legal basis for processing (GDPR Article 6)

• Consent — when you opt into our reports or newsletter
• Contract performance — when you are a client or candidate and we are executing recruiting services
• Legitimate interest — to operate our site, prevent fraud, and respond to inquiries (we balance these interests against your privacy rights)
• Legal obligation — to comply with tax, labor and regulatory requirements

4. Data sharing and third parties

We do NOT sell your personal data. We share information only with:

• Client companies — when you are a candidate and we present your profile (always with prior candidate consent)
• Service providers — payment processors, email infrastructure, hosting providers (Netlify/Vercel), analytics (privacy-friendly tools like Plausible if used). All providers are bound by data processing agreements.
• Legal authorities — when required by law, court order or to prevent imminent harm

5. International data transfers

SelectionBook is headquartered in Mexico City. Some service providers operate in the United States, Canada and the European Union. When data is transferred internationally, we rely on Standard Contractual Clauses (EU SCCs), Mexico-EU adequacy considerations, and the recipient country's equivalent protections.

6. Data retention

• Client inquiries: retained 24 months after last contact, then deleted
• Candidate profiles: retained per the candidate's preference (default: 36 months) — candidates can request deletion at any time
• Aggregated analytics: retained 24 months, after which only year-over-year aggregates remain
• Legal/tax records: retained as required by Mexican, US and EU tax law (typically 5-10 years)

7. Your rights

Depending on your jurisdiction, you have the right to:

• Access — request a copy of personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion ("right to be forgotten")
• Restriction — limit how we process your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — at any time, without affecting prior lawful processing
• CCPA-specific: opt-out of sale (we do not sell data), non-discrimination for exercising rights
• LFPDPPP-specific (Mexico): ARCO rights (Acceso, Rectificación, Cancelación, Oposición)

To exercise any right, email agustin@outsidersdigital.com. We respond within 30 days (or 45 days where local law permits).

8. Cookies and tracking

We use only essential cookies required for site operation. We do not use third-party advertising cookies. If we add analytics, we will use privacy-friendly tools (e.g., Plausible) that do not require consent banners under EU ePrivacy Directive interpretations.

9. Data security

We implement appropriate technical and organizational measures:

• TLS 1.3 encryption for all data in transit
• Encryption at rest for stored personal data
• HSTS preload, Content Security Policy, and frame-ancestors restrictions
• Access controls and audit logging for our internal candidate database (TeamTailor)
• Annual security review and quarterly access audits

10. Breach notification

If a personal data breach occurs that is likely to result in risk to your rights, we will notify you within 72 hours (GDPR Article 33) or per applicable local notification timelines.

11. Children's privacy

Our services are intended for business use. We do not knowingly collect data from minors under 16. If you believe a minor has provided data, please contact us for immediate deletion.

12. Changes to this policy

We may update this policy. Material changes will be communicated via email (if we hold your address) and posted at the top of this page with a new "Last updated" date.

13. Contact & Data Protection

For privacy inquiries:

• Email: agustin@outsidersdigital.com
• Postal: SelectionBook, Mexico City
• EU representative: on request, we will appoint an EU Article 27 representative for clients with EU operations

You also have the right to lodge a complaint with your local data protection authority (INAI in Mexico, your national DPA in EU/UK, your state Attorney General in CA/US).