Who we are
Yallo Talent is the enterprise workforce line of Yallo Group. We're the data controller for personal data collected through yallo.co and through our recruitment and delivery operations across the UK, Middle East and India.
You can reach the Yallo privacy team at [email protected] for any question about how we handle your data.
Data we collect
For candidates: your name, contact details, CV, employment history, references, right-to-work status, salary expectations, and any information you choose to share during interviews or screening calls.
For clients: your name, role, employer, business email, and information about the roles or programmes you brief us on.
For website visitors: standard analytics data (IP address, browser and device information, referrer, pages viewed). We use privacy-friendly analytics that don't require cross-site tracking cookies.
How we use your data
Candidate data is used to match you to open programmes, present you to clients where relevant, and manage the engagement lifecycle (contracts, payroll, EOR, ongoing employment).
Client data is used to calibrate briefs, deliver shortlists, invoice for our services, and stay in touch about ongoing programmes.
Website analytics data helps us understand which pages are useful and where the experience needs improvement, nothing more.
Our legal basis
For most candidate and client processing, we rely on legitimate interest (running our recruitment and workforce services) and, where applicable: the contract we've entered into with you.
For marketing communications, we rely on your consent, which you can withdraw at any time.
Who we share your data with
Candidate data is shared with the specific clients we're proposing you to: never sold or bulk-shared. We tell you before your CV is submitted anywhere.
We use trusted service providers for email delivery (Resend), analytics, applicant tracking, and payroll processing under Employer of Record engagements. Each is contractually bound to protect your data.
For UAE and India EOR engagements, some data is shared with statutory authorities as required by local law.
How long we keep your data
Candidate profiles: 24 months from last contact, unless you ask us to remove your record sooner.
Client contract data: 7 years after the engagement ends, in line with tax and legal record-keeping requirements.
Marketing subscriber data: until you unsubscribe.
Your rights
You have the right to access, correct, delete, restrict processing of, and port your personal data. You also have the right to object to processing and to withdraw consent at any time.
To exercise any of these rights, email [email protected]. We'll respond within 30 days.
If you're not satisfied with our response, you have the right to complain to your local supervisory authority (the ICO in the UK, the UAE Data Office in the UAE, or your equivalent).
Cookies
See our separate Cookies notice for details on how we use cookies on yallo.co.
The site assistant
yallo.co offers an in-page assistant that answers questions from this site's own published content and can help put together a brief. Conversations are recorded, including the page on our site where the conversation started, and kept for 12 months, then deleted. If a conversation results in a brief, the brief itself persists as a commercial record in the same way a brief sent through our contact form does.
Recorded conversations can be read by one named administrator at Yallo, and by nobody else. They are not used to train any model, are not shared with any third party beyond the infrastructure that stores them, and are deleted on the schedule above whether or not they have been read.
The assistant serves prospective clients only. It does not collect anything beyond what our brief form already collects, and it never asks for payment details, passwords or identity documents.