Privacy Policy

Last Updated: 24 March 2026

TalentReady (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA), as amended by the Personal Data Protection (Amendment) Act 2020.

1. Data Controller

TalentReady operates as the data controller for personal data collected through this Platform. Our designated Data Protection Officer (DPO) can be reached at the contact details in Section 15.

2. Information We Collect

  • Account Information: Name, email address, phone number (including country code), and password (stored in hashed form).
  • Professional Profile (Talent users): Resume/CV, employment history, educational qualifications, skills, salary expectations, availability, and profile photograph if provided.
  • AI-Derived Insights: Profile insights and match scores generated by our AI systems based on your profile data.
  • Employer Information: Company name, UEN (Unique Entity Number), business details, and authorised representative information.
  • Usage Data: Log data, pages visited, job views, application history, session timestamps, and device/browser information.
  • Communications: Records of messages and notifications sent via the Platform.

3. How We Use Your Data

We process your personal data for the following purposes:

  • Recruitment Facilitation: To match Talent profiles with relevant job opportunities and present profiles to Employers who have purchased access.
  • AI Matching & Profiling: Our AI analyses your profile to generate compatibility scores for job postings. This is used to rank and surface profiles to Employers. See Section 6 for your rights regarding automated processing.
  • Communications: To send job alerts, interview invitations, application updates, and essential account notices.
  • Verification: To verify UEN details against ACRA records and confirm user identity.
  • Platform Security & Fraud Prevention: To detect and prevent unauthorised access, abuse, or fraudulent activity.
  • Legal Compliance: To comply with applicable Singapore law and respond to lawful requests from public authorities.

4. Legal Basis for Processing

Under the PDPA, we rely on the following bases for processing:

  • Consent: Where you have given consent during registration or as specifically requested.
  • Contractual Necessity: Processing required to provide the Platform services you have signed up for.
  • Legitimate Interests: To improve the Platform, maintain security, and prevent fraud, where these interests are not overridden by your rights.
  • Legal Obligation: Where processing is required by Singapore law.

5. Disclosure of Information

We do not sell your personal data. We share it only in the following circumstances:

  • To Employers: When you apply for a job or an Employer unlocks your profile, your profile details are shared with that Employer. You consent to this sharing by maintaining an active profile on the Platform.
  • Service Providers (Data Processors): We engage third-party vendors to operate our infrastructure. These include cloud database and authentication services, transactional email delivery providers, and payment processors. All service providers are engaged under contractual data protection obligations consistent with PDPA requirements.
  • AI Service Providers: We use AI services provided by established third-party technology companies, including OpenAI and Google, to power features such as profile matching and resume analysis. Profile data submitted for AI processing is handled by these providers under their respective data processing agreements. We have taken reasonable contractual steps to ensure these providers maintain appropriate data protection standards, and we remain accountable for ensuring those protections are in place before any data is transferred. Data processed by these services may also be subject to the providers’ own privacy policies.
  • Legal Compliance: If required by a court order, regulatory authority, or applicable Singapore law, or to protect the rights, property, or safety of TalentReady, our users, or the public.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to equivalent data protection obligations.

6. Automated Decision-Making & AI Profiling

Our Platform uses automated AI systems to compute match scores between Talent profiles and job postings. These scores influence whether your profile is surfaced to Employers and constitute automated processing that may significantly affect your visibility on the Platform.

You have the right to:

  • Be informed about this automated processing (which this section fulfils).
  • Request human review of AI-generated outputs that affect you.
  • Request correction of inaccurate profile data that feeds into AI calculations.

AI scores are indicative only and do not constitute employment assessments, background checks, or any form of professional evaluation.

7. Cross-Border Data Transfers

Our service providers, including AI service providers and cloud infrastructure operators, may process your personal data on servers located outside Singapore. We take steps to ensure that such transfers comply with PDPA Part IX (Transfer Limitation Obligation) by ensuring receiving parties are bound by legally enforceable data protection obligations comparable to the PDPA standard.

8. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter to fulfil the purposes described in this policy. In general:

  • Active account data: Retained for the duration of your account plus 3 years after closure.
  • Job application records: Retained for 2 years from the date of the application outcome.
  • Payment and credit transaction records: Retained for 7 years in accordance with Singapore’s accounting and tax record requirements.
  • AI-derived insights: Deleted or anonymised when your account is closed.

When data is no longer required, it is securely deleted or anonymised.

9. Cookies & Tracking Technologies

We use essential cookies and session tokens to operate the Platform (e.g., to maintain your login state). We may use analytics tools to understand Platform usage in aggregate. We do not use third-party advertising cookies. You may disable cookies in your browser settings, but this may affect Platform functionality.

10. Data Security

We implement industry-standard security measures including TLS/SSL encryption in transit, hashed password storage, database-level access controls, and role-based permissions. We limit access to personal data to authorised personnel only. However, no method of transmission or storage over the Internet is completely secure, and we cannot guarantee absolute security.

In the event of a data breach that is likely to result in significant harm, we will notify affected individuals and the Personal Data Protection Commission (PDPC) as required under the PDPA mandatory breach notification obligation within the prescribed timeframes.

11. Your Rights Under the PDPA

You have the right to:

  • Access: Request details of personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Withdrawal of Consent: Withdraw consent for optional processing at any time, without affecting the lawfulness of prior processing.
  • Data Portability: Request your personal data in a commonly used, machine-readable format where technically feasible (as provided under the 2021 PDPA amendments).
  • Erasure / Account Closure: Request deletion of your account and associated personal data, subject to our legal retention obligations.
  • Objection to Automated Processing: Request human review of decisions based solely on automated processing that significantly affect you.

To exercise any of these rights, contact our DPO (see Section 15). We will respond within 30 calendar days. We may ask you to verify your identity before processing the request.

12. Children’s Data

This Platform is not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on the Platform before the changes take effect. The “Last Updated” date at the top of this page will always reflect the most current version.

14. Regulatory Authority

If you have concerns about our data practices that we have not resolved to your satisfaction, you may lodge a complaint with Singapore’s Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.

15. Contact & Data Protection Officer

For questions about this Privacy Policy, to exercise your rights, or to report a data concern, please contact our Data Protection Officer at: [email protected]