Privacy policy

Who we are

Bionic Talent is a remote recruitment firm. We source and vet candidates and introduce them to US businesses that hire them directly. Our clients are law firms, marketing agencies and home services businesses, so almost everyone who contacts us does so in a business capacity rather than a personal one.

For anything in this policy, write to [email protected]. That inbox is monitored by a person.

What we collect

What you tell us

The main thing we collect is a hiring enquiry. Our Get a shortlist form asks for your name, your work email, your company and the role you are trying to fill. Later steps ask for detail that helps us scope the search: team size, timeline, budget, phone number, and a time for an intake call.

We save what you have entered at the end of the first step, before you reach the end of the form. That is deliberate and you should know it: if you fill in the first step and then close the tab, we still hold your name, email and role, and someone may follow up about it. Ask us to delete it and we will.

We also collect whatever you put in an email to us, and the notes our team takes during an intake call.

What your browser tells us

When you visit, we and the services listed below receive your IP address, approximate location derived from it, browser and device type, the pages you view, how long you spend on them, and the page or advert that sent you here.

The IP address is the part worth reading twice. Two of the services below use it to work out which company you are browsing from, whether or not you ever contact us. That is set out in full under working out which company you are from.

Advertising click IDs

If you arrive from a Google or Meta advert, the link carries a click identifier in the URL: gclid, gbraid, wbraid or fbclid. We read it from the address bar, keep it in your browser for the length of your visit, and store it alongside your enquiry if you submit one. It is how we find out which advert produced a real conversation instead of guessing.

Analytics and marketing software

Everything on this site loads through Google Tag Manager, which is a container for the tools below rather than a tool in its own right. The full list of what it currently loads is here. If we add something, it gets added to this page.

Google Analytics 4 counts visits and shows us which pages lead to enquiries.

HubSpot loads its tracking script on every page. It records the pages you view and how long you spend on them, and it keeps that history against a cookie in your browser. If you later give us your email address, whether through our form or by clicking a link in an email we sent you, HubSpot can attach that browsing history to your contact record, including the pages you looked at before you told us who you were. That is what the tool is for; we are telling you because it is not obvious from the outside.

We do not record session replays. There is no tool on this site that plays back your mouse movement, scrolling or the screens you saw. An earlier version of this page said otherwise, describing a replay tool we had planned and never installed. It was wrong and it has been removed.

Working out which company you are from

This is the section most privacy policies leave out, so read it before the advertising one. Two services on this site try to identify the business you are visiting from, using your IP address, before you have given us anything at all. They run on your first page view. There is no form, no button and no consent step in front of them.

• Clearbit Reveal (a HubSpot company) receives your IP address and matches it against its own database of company networks. When it matches, we may be told the company name, its industry, rough size and location.
• Leadsy.ai does the same kind of IP-to-company lookup, and markets itself as going further, surfacing contact details for people associated with the company it matched. We do not control how it builds that database and we cannot verify any individual match.

What this means in practice: if you read this site from an office network and never contact us, we may still end up with a note that says someone at your firm was here and which pages they read. We use it to decide who to approach and what to say. It is not a precise science, and IP matching gets the company wrong often enough that we treat it as a hint rather than a fact. But the intent is genuinely to identify you, not to measure traffic, and we would rather say so.

Blocking cookies does not stop this. Neither service needs one; your IP address is sent by the act of loading the page. A VPN or a corporate proxy will usually break the match, but that is your network doing it, not us. What we can do is act on a request: email [email protected] and we will delete the company records we hold from these lookups, stop using them for outreach to you, and not contact you off the back of them again. We cannot promise a third party will never resolve your IP address again. That lookup happens in their systems, not ours. So we are telling you what we control rather than what we do not.

Advertising and conversion measuring

We advertise on Google Ads and Meta (Facebook and Instagram). Two things follow from that.

• Both platforms have a tag on every page of this site: Google’s conversion tag and the Meta pixel. They set cookies and receive events (which pages you saw, and when you complete a step of our form) so they can measure and target advertising, including showing you Bionic Talent adverts elsewhere after you have visited.
• When an enquiry turns into a real conversation or a hire, we send that outcome back to Google and Meta: the click ID from your original visit, plus a hashed, irreversible form of your email address so the platform can match it to the click. This is what the platforms call offline conversion import. It tells us which adverts are worth running. It does not send them your enquiry, your role requirements or the contents of your emails.

Under California law this second point may count as sharing personal information for cross-context behavioural advertising, even though no money changes hands. See your California privacy rights for how to stop it.

Cookies and tracking

Cookies and similar storage are used here for three things:

• Necessary: keeping your place in the multi-step form, and the bot check described below. The site cannot work without these.
• Analytics: Google Analytics and HubSpot, as above.
• Advertising: Google and Meta, as above.

We do not show a cookie banner. This is a US business selling to US companies, and we would rather tell you plainly what runs here than put a dialog in front of the page. If you are visiting from the UK or the EEA, this site tells Google’s tags to default to no advertising or analytics storage for you, so no such cookie is set unless you are outside that region.

You can clear or block cookies in your browser settings, and Google publishes a Google Analytics opt-out add-on (opens in a new tab) that works across sites. Blocking analytics and advertising cookies does not affect your ability to send us an enquiry. It does not stop the IP-based company lookups in working out which company you are from. Those never needed a cookie.

Bot protection

Our forms are protected by Cloudflare Turnstile, which checks that a submission comes from a real browser rather than a script. It inspects browser and device signals and may set a short-lived cookie. It is not an advertising tool and we get no profile from it. Without it the form fills up with spam within a day. Cloudflare’s privacy policy (opens in a new tab) covers what it does with those signals.

How we use what we collect

• To reply to your enquiry and run the search you asked for.
• To put together a shortlist, which means our recruiters see your role requirements.
• To follow up if you started the form and did not finish it.
• To measure which adverts and pages produce real enquiries, and to fix the parts of the site that lose people.
• To work out which businesses are reading the site, and to decide which of them to approach, including businesses that never contacted us. See working out which company you are from.
• To keep records we need for accounting, and to meet legal obligations.

We do not use your information to make automated decisions that have a legal or similarly significant effect on you.

Who else sees it

We do not sell your personal information for money. We do pass it to the services that run the business:

• Go High Level: the CRM where every enquiry lands, and from which our follow-up email is sent.
• Our own database and hosting: we keep an independent record of each enquiry on infrastructure we control, so a CRM outage or migration cannot lose it.
• Google (Analytics and Ads) and Meta (advertising), as described above.
• HubSpot: marketing software whose tracking script runs on this site, and which also owns Clearbit, one of the two company-lookup services below.
• Clearbit Reveal and Leadsy.ai: the IP-to-company lookups described in working out which company you are from. They receive your IP address on every visit.
• Cloudflare: content delivery and bot protection for the whole site.
• Our own team, including recruiters and operations staff working outside the United States. See where your information goes.

We will also disclose information where the law requires it, and to a buyer if the business is ever sold, in which case this policy travels with it.

Where your information goes

Bionic Talent recruits from Philippines, Pakistan, South Africa, Kenya, Colombia, Peru, Mexico, Costa Rica, Venezuela and Argentina, and our recruiting and operations staff work from those countries. Your enquiry is accessible to them, which means your information is processed outside the United States. Data protection law in those countries is not identical to US state law. We require our staff and contractors to keep client information confidential regardless of where they sit.

How long we keep it

Enquiries are kept for as long as we might reasonably do business with you, and after that for as long as we need them for accounts and legal records. Analytics and advertising data ages out on the retention schedules those platforms set. If you ask us to delete your information we will, except where we are required to keep a record. We will tell you if that is the case rather than going quiet.

Your California privacy rights

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what we have collected about you, to get a copy of it, to correct it, to delete it, and to opt out of the sale or sharing of your personal information. We will not treat you differently for exercising any of them.

To opt out of sharing for cross-context behavioural advertising, which covers the click-ID and conversion transfers to Google and Meta described above and the IP-to-company lookups in working out which company you are from, do any one of the following:

• Email us. Write to [email protected] with “Do not sell or share my personal information” in the subject line. We will action it by hand and confirm by reply. This is the route that covers everything on this page, including the parts a browser setting cannot reach.
• Turn on Global Privacy Controlin a browser or extension that supports it. When we see a GPC signal, this site withholds consent for advertising storage, advertising data and ad personalisation before any tag loads. Google’s tags act on that automatically. We are being precise on purpose: the other tools on this site do not currently read that signal, and neither does the offline conversion upload we send after you become a client. Use the email route for those.
• Block advertising cookies in your browser, which stops the browser-side half of the advertising tags. It stops none of the IP-based company lookups.

To make any other request, email the same address with what you want. We verify requests by corresponding with the email address we already hold, and we will respond within the timeframe the law requires. An authorised agent can act for you if they provide written permission signed by you.

We do not knowingly collect the sensitive personal information categories the CPRA defines, and we do not use or disclose personal information for purposes beyond those listed on this page.

Other US state privacy rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states with comprehensive privacy laws have comparable rights of access, correction, deletion, portability, and opt-out of targeted advertising. Use the same address and the same process as above. We do not run a separate queue by state. Where your state gives you a right to appeal a refused request, reply to our response and a different person will review it.

Security

The site is served over HTTPS, credentials for our CRM and database are held server-side and never sent to your browser, and access to enquiry records is limited to staff who need it. No system is perfect, and we would rather say that than claim otherwise.

If you are looking for a job

This site is for employers. Candidate applications are handled on careers.bionictalent.com (opens in a new tab), which runs on a separate applicant tracking system with its own privacy notice. This policy does not cover it. Do not send us a CV through the hiring enquiry form. It goes to a sales pipeline, not to a recruiter’s candidate list.

Children

This is a business-to-business site and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe we have, tell us and we will delete it.

Changes to this policy

When what we do changes, this page changes with it and the date at the top moves. If a change materially affects how we use information you have already given us, we will contact you about it rather than relying on you to re-read the page.

Contact us

Privacy questions, access requests and opt-outs all go to [email protected].