Sigmentix Privacy Policy

1. Who we are

Sigmentix ("Sigmentix", "we", "us", "our") provides a platform where professionals own and manage their career record. This policy explains what personal information we collect about you, how we use it, and the rights you have.

Sigmentix is the data controller for the information described here. You can contact us about privacy at DPO@sigmentix.com, Sigmentix.

2. The information we collect

We only collect what we need to give you a working professional profile and to run the platform. This includes:

• Profile information: your first name, last name, and location (city and country); your work history (roles, employers and dates); your education; your skills, certifications and qualifications; your languages; and professional accomplishments such as publications, projects, honours, courses and organisations.
• Account and contact information: the email address and any contact details you give us when you sign up, and your account settings.
• Regulatory register information: where relevant, the regulated roles associated with your name in publicly available regulatory registers (see section 4).
• Usage and technical information: basic information about how you use the platform and the device you use, which helps us keep it secure and working. Our Cookie Policy explains the cookies involved.

3. How we collect it

We collect your information in the ways you choose when you sign up:

• Directly from you, when you enter your details, upload your CV or your own LinkedIn data export, or contact us.
• From LinkedIn, where you authorise LinkedIn to share a copy of your data with us through its data portability service under the EU Digital Markets Act. You authorise this with LinkedIn directly, and we receive the data only after you have done so. This route is available to LinkedIn members in the EEA.
• From public regulatory registers, as described in section 4.

We do not build your profile by scraping websites or by buying your information from data brokers.

4. What we take from your LinkedIn import, and what we do not

Where you import from LinkedIn, LinkedIn's service can technically make far more data available than we need, including your private messages, searches, connections, contacts, and advertising data. We do not request or retain any of that.

We take only the profile items listed in section 2: your name and location, work history, education, skills, certifications and qualifications, languages, and professional accomplishments.

5. Cross-referencing public regulatory registers

To help build an accurate record, we may compare the roles and dates you give us with publicly available regulatory registers, such as the register maintained by the Central Bank of Ireland. For example, if you tell us you were Head of Compliance at a firm during a period when that firm held a licence, we may ask you to confirm the regulated role you held, or whether you were involved in that process.

We only ask. We do not add anything to your profile from this unless you confirm it, and we do not use these registers to gather wider information about you.

6. Why we use your information and our legal basis

You can withdraw your consent at any time by editing or deleting your profile, or by contacting us. Withdrawing consent does not affect anything we did before you withdrew it.

7. Who we share it with

You decide how you take part in Sigmentix, and firms and partners do not get open access to your profile.

We may share your information with:

• Firms and partners, only through the options you have opted into, and only to the extent you have chosen.
• Service providers who help us run the platform, such as hosting and technical providers. They act on our instructions and are bound to protect your information.
• Authorities or advisers, where we are required to by law, or to protect our rights or the safety of others.

We do not sell your personal information.

8. Anonymised and aggregated insights

We may combine information across the platform to produce anonymised and aggregated insights, for example trends in roles, skills or markets. These insights are designed so that no individual can be identified from them, and they are not personal information about you.

9. Where your information is held

We host and process your information within the EU. If we ever need to transfer it outside the EU or EEA, we will make sure appropriate safeguards are in place as required by law.

10. How long we keep it

We keep your profile for as long as your account is active. If you do not log in for two years, we treat your account as inactive. Before we delete anything, we will contact you so you can keep your profile if you still want it. If you do not respond, we delete your information, except anything we are required to keep by law or need to keep to resolve a dispute, for a limited period.

You can also delete your profile yourself at any time, and we will delete your information on the same basis.

11. Your rights

You have the right to:

• access the information we hold about you;
• correct anything that is wrong or out of date;
• delete your information;
• restrict or object to certain uses;
• withdraw consent at any time;
• port your information, by receiving it in a usable format; and
• complain to a data protection authority.

To use any of these, contact us at DPO@sigmentix.com. If you are in Ireland, you also have the right to complain to the Data Protection Commission (www.dataprotection.ie).

12. How we protect your information

We use appropriate technical and organisational measures to protect your information, including secure hosting and access controls. No system is completely secure, but we work to keep your information safe and to respond quickly if anything goes wrong.

13. Children

Sigmentix is for professionals and is not intended for anyone under 18. We do not knowingly collect information about children.

14. Changes to this policy

We may update this policy from time to time. If we make a significant change, we will let you know. The date at the top shows when it was last updated.

15. Contact

For any questions about this policy or your information, contact us at DPO@sigmentix.com, Sigmentix.