Skip to main content

    Privacy Policy

    Last updated: 31 October 2026

    1. Information We Collect

    Personal Data You Provide

    When you create an account, submit an introduction, or contact us, we collect: name, email address, phone number, professional information (job title, company, LinkedIn profile), and any other information you choose to provide.

    Usage Data

    We automatically collect information about your interaction with our platform, including pages viewed, features used, timestamps, IP address, browser type, and device information.

    Cookies and Tracking

    We use essential cookies for platform functionality. Analytics cookies (Google Analytics) are only activated with your explicit consent. See our Cookie Policy for details.

    1A. If Someone Introduced You (Candidates)

    Linillo is a referral platform. If a friend or professional contact (an 'introducer') recommended you for a role, we received your details from them rather than from you. Under Article 14 of the UK GDPR, we tell you:

    • Source — the introducer who submitted your details. Their name is shown in the first message we send you.
    • Data received — your name and, where supplied, email, phone number, LinkedIn profile, current employer, and the introducer's notes on why they recommend you.
    • Purpose — to tell you about the specific role, ask whether you are interested, and, if you agree or the introducer has your permission, share your details with the hiring company.
    • Lawful basis — our legitimate interest, and the hiring company's, in facilitating relevant career opportunities through people who know you. You can object at any time.
    • Recipients — the hiring company for that role, and our service providers for hosting and email delivery.
    • Retention — if you do not respond or decline, we delete or anonymise your details within 12 months of the introduction. Hiring companies must do the same under our Terms.
    • Your choices — you can decline, object, or ask us to erase your details at any time using the 'Remove my details' link in our message, or by emailing privacy@linillo.com. The link removes your details straight away, including from the hiring company's view on Linillo; email requests are handled within one month.

    We send this information at the latest when we first contact you, and in any case within one month of receiving your details.

    2. Legal Bases for Processing

    We process your personal data under the following legal bases:

    • Consent — For analytics cookies and marketing communications. You can withdraw consent at any time.
    • Contract — To provide our trust network services, process introductions, and manage payments.
    • Legitimate Interest — To improve our platform, prevent fraud, and ensure platform security.
    • Legal Obligation — To comply with tax reporting, anti-money laundering, and other regulatory requirements.

    3. How We Use Your Information

    • Provide, maintain, and improve our trust network services
    • Process introductions, match candidates to roles, and facilitate hiring
    • Process payments, payouts, and invoicing via Stripe
    • Send transactional communications (introduction updates, payout notifications)
    • AI-powered job matching to suggest relevant opportunities
    • Calculate trust scores to maintain platform quality
    • Produce de-identified, aggregate insights about how introductions perform (for example, how often introductions lead to interviews or hires by role type or sector)
    • Comply with legal obligations

    Aggregate insights. We rely on our legitimate interest to analyse introduction activity in combined, de-identified form so we can improve Linillo and understand what makes introductions successful. These insights never name or single out an individual, a hiring company or a candidate, are only reported for groups large enough to prevent re-identification, and are never used to make automated decisions about individual candidates. You can object at any time.

    Separation between companies. Information a hiring company provides or creates on Linillo — its roles, candidate pipeline, stages and notes — is only visible to that company's authorised team and is never shared with other companies.

    What we do not do. We do not scrape third-party sites to build profiles, and we only record relationship details that an introducer or candidate chooses to give us.

    4. Information Sharing and Recipients

    We do not sell your personal information. We share data with:

    • Hiring companies — When you are referred to a role, the company receives your name and professional details. Each hiring company is an independent controller and is bound by the Data Sharing Schedule in our Terms.
    • Stripe — Payment processing, Connect accounts, and payouts.
    • Google Analytics — Anonymised usage analytics (only with your consent).
    • Postmark — Transactional email delivery.
    • Hosting providers — Infrastructure services for data storage and processing.
    • Legal authorities — When required by law or to protect our rights.

    5. International Data Transfers

    Your data may be transferred to and processed in countries outside the UK and EEA. Where this occurs, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs), adequacy decisions, or other approved transfer mechanisms under GDPR Article 46.

    6. Data Retention Periods

    • Account data — Retained for the duration of your account plus 2 years after deletion.
    • Introduction and hiring data — Retained for 3 years after the introduction is closed or hire is made.
    • Payment and invoice records — Retained for 7 years for tax and legal compliance.
    • Analytics data — Retained for 26 months (Google Analytics default).
    • Consent logs — Retained for 5 years as proof of consent under GDPR.

    7. Your Rights Under GDPR

    Under GDPR, you have the following rights:

    • Right of Access — Request a copy of your personal data. Use the "Export My Data" feature in Settings.
    • Right to Rectification — Correct inaccurate personal data via your account settings.
    • Right to Erasure — Request deletion of your account and data. Use "Delete My Account" in Settings. Where an introduction is still within its attribution period, we delete your contact details but keep a minimal, non-readable reference and dates so the introduction can still be honoured fairly.
    • Right to Restriction — Request we limit processing of your data in certain circumstances.
    • Right to Portability — Receive your data in a structured, machine-readable format (JSON).
    • Right to Object — Object to processing based on legitimate interests.
    • Right to Withdraw Consent — Withdraw consent for analytics cookies at any time via Cookie Settings.
    • Right to Lodge a Complaint — You may complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or your local supervisory authority.

    8. Automated Decision Making

    We use AI-powered matching to suggest relevant job opportunities based on your profile, industry, skills, and preferences. This matching is advisory only — it does not make any binding decisions about your introductions or earnings. You can view your match scores and the factors involved. You have the right to request human review of any automated decision that significantly affects you.

    9. Children's Privacy

    Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

    10. Data Protection Officer

    Our Data Protection Officer can be contacted at: dpo@linillo.com

    For any data protection queries, concerns, or to exercise your rights, please email our DPO directly.

    11. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we will also notify you via email.

    12. Contact Us

    If you have any questions about this Privacy Policy, please contact us: