Privacy Policy

1. Who we are

The data controller responsible for your personal data is:

Abroader connects independent recruiters (Abroaders), job seekers (Candidates), and employers (Clients) for international recruitment. Because our controller is based in the EU and users may be located across the EEA and internationally, we design our processing with GDPR requirements in mind.

2. What personal data we collect

The personal data we collect depends on how you use the Platform. Select your role below to see the types of data involved:

We do not intentionally collect more data than is reasonably necessary for the purposes described in this Policy. You should not submit special category data (such as health information) unless it is genuinely required for a recruitment process and you have a lawful basis to provide it.

3. How we collect personal data

We collect personal data through:

• Direct submission — when you register as an Abroader, apply for a role as a Candidate, or provide business details as a Client.
• Abroader landing pages and vacancy listings — when Candidates submit applications or CVs through an Abroader’s branded page or live vacancy on the Platform.
• Application and contact forms — when you communicate with us or request information through forms on abroader.io.
• Platform use — when Abroaders use the workspace, commission tracker, and related tools.
• Cookies and similar technologies — when you browse abroader.io (see Section 10).
• Third parties where permitted — for example, an Abroader may introduce Candidate information into the Platform as part of a recruitment process, or a Client may provide vacancy and contact details.

4. Legal basis for processing (GDPR)

We process personal data only where we have a valid legal basis under Article 6 GDPR (and, where relevant, Article 9 for special category data). The main bases we rely on are:

5. How we use personal data

We use personal data for the following processing activities:

We also use data to provide support, maintain accounts, monitor Platform security, enforce our Terms of Service, and analyse site usage where permitted by law and your cookie preferences.

6. Who we share data with

We share personal data only where necessary and with appropriate safeguards. Recipients may include:

• Abroaders — Candidate and vacancy information needed to manage applications and placements; commission and performance data relating to their own account.
• Other Abroaders — where sourcing and placement roles are split under the commission structure, limited Candidate data may be shared between the relevant Abroaders.
• Clients and prospective Clients — Candidate profiles and recruitment information for hiring decisions, and relevant vacancy or billing details.
• Payment, invoicing, and finance providers — to process commission payouts to Abroaders and Client invoicing.
• Analytics and infrastructure providers — to host the Platform, send service emails, and measure site performance (subject to your cookie choices where applicable).
• Professional advisers and authorities — where required by law, regulation, or to protect legal rights.

We use sub-processors that process data on our behalf:

We require processors to protect personal data under written agreements consistent with GDPR. A list of sub-processors may be provided on request to admin@abroader.io.

7. International data transfers

Abroader supports international recruitment. Personal data may therefore be transferred to countries outside the European Economic Area (EEA), including where Candidates, Clients, or Abroaders are located abroad or where a sub-processor stores data outside the EEA.

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as:

• an adequacy decision by the European Commission, where available;
• the EU Standard Contractual Clauses (SCCs), supplemented by additional measures where required; or
• another lawful transfer mechanism under Chapter V GDPR.

You may request more information about transfers relevant to your data by contacting admin@abroader.io.

8. Data retention

We keep personal data only for as long as necessary for the purposes described in this Policy, unless a longer period is required by law.

When data is no longer needed, we delete or anonymise it securely, subject to legal holds or audit requirements.

9. Your rights under GDPR

Depending on your location and the nature of processing, you may have the following rights:

To exercise your rights, contact us at admin@abroader.io. We may need to verify your identity before responding. We aim to respond within one month, as required by GDPR.

If you are a Candidate, note that some requests may be limited where we must retain data for an active recruitment process, a Client decision, or legal compliance — for example, commission or invoicing records.

10. Cookies and tracking technologies

We use cookies and similar technologies on abroader.io. Essential cookies are required for the Platform to work. Other cookies are used only where permitted by law and, where required, with your consent.

You can manage cookie preferences through your browser settings and, where available, our cookie consent tool. Blocking essential cookies may affect Platform functionality.

11. Security measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures include access controls, secure hosting, and staff confidentiality obligations. No method of transmission or storage is completely secure; we cannot guarantee absolute security, but we work to maintain safeguards proportionate to the data we process.

12. Children’s data

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact admin@abroader.io and we will take steps to delete it.

13. Changes to this policy

1. We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and version number at the top of this page and, where appropriate, notify you by email or through the Platform.
2. We encourage you to review this page periodically. Continued use of the Platform after changes take effect means you acknowledge the updated Policy, subject to your rights under GDPR.

14. Contact and complaints

For privacy questions, data subject requests, or concerns about how we handle personal data, contact:

You also have the right to lodge a complaint with a supervisory authority. In Estonia, the relevant authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). If you live in another EU/EEA country, you may also complain to your local data protection authority.