Privacy Policy

    Last updated: 9 February 2026

    1. Information We Collect

    Personal Data You Provide

    When you create an account, submit a referral, or contact us, we collect: name, email address, phone number, professional information (job title, company, LinkedIn profile), and any other information you choose to provide.

    Usage Data

    We automatically collect information about your interaction with our platform, including pages viewed, features used, timestamps, IP address, browser type, and device information.

    Cookies and Tracking

    We use essential cookies for platform functionality. Analytics cookies (Google Analytics) are only activated with your explicit consent. See our Cookie Policy for details.

    2. Legal Bases for Processing

    We process your personal data under the following legal bases:

    • Consent — For analytics cookies and marketing communications. You can withdraw consent at any time.
    • Contract — To provide our trust network services, process referrals, and manage payments.
    • Legitimate Interest — To improve our platform, prevent fraud, and ensure platform security.
    • Legal Obligation — To comply with tax reporting, anti-money laundering, and other regulatory requirements.

    3. How We Use Your Information

    • Provide, maintain, and improve our trust network services
    • Process referrals, match candidates to campaigns, and facilitate hiring
    • Process payments, payouts, and invoicing via Stripe
    • Send transactional communications (referral updates, payout notifications)
    • AI-powered job matching to suggest relevant opportunities
    • Calculate trust scores to maintain platform quality
    • Comply with legal obligations

    4. Information Sharing and Recipients

    We do not sell your personal information. We share data with:

    • Hiring companies — When you are referred to a role, the company receives your name and professional details.
    • Stripe — Payment processing, Connect accounts, and payouts.
    • Google Analytics — Anonymised usage analytics (only with your consent).
    • Hosting providers — Infrastructure services for data storage and processing.
    • Legal authorities — When required by law or to protect our rights.

    5. International Data Transfers

    Your data may be transferred to and processed in countries outside the UK and EEA. Where this occurs, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs), adequacy decisions, or other approved transfer mechanisms under GDPR Article 46.

    6. Data Retention Periods

    • Account data — Retained for the duration of your account plus 2 years after deletion.
    • Referral and hiring data — Retained for 3 years after the referral is closed or hire is made.
    • Payment and invoice records — Retained for 7 years for tax and legal compliance.
    • Analytics data — Retained for 26 months (Google Analytics default).
    • Consent logs — Retained for 5 years as proof of consent under GDPR.

    7. Your Rights Under GDPR

    Under GDPR, you have the following rights:

    • Right of Access — Request a copy of your personal data. Use the "Export My Data" feature in Settings.
    • Right to Rectification — Correct inaccurate personal data via your account settings.
    • Right to Erasure — Request deletion of your account and data. Use "Delete My Account" in Settings.
    • Right to Restriction — Request we limit processing of your data in certain circumstances.
    • Right to Portability — Receive your data in a structured, machine-readable format (JSON).
    • Right to Object — Object to processing based on legitimate interests.
    • Right to Withdraw Consent — Withdraw consent for analytics cookies at any time via Cookie Settings.
    • Right to Lodge a Complaint — You may complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or your local supervisory authority.

    8. Automated Decision Making

    We use AI-powered matching to suggest relevant job opportunities based on your profile, industry, skills, and preferences. This matching is advisory only — it does not make any binding decisions about your referrals or earnings. You can view your match scores and the factors involved. You have the right to request human review of any automated decision that significantly affects you.

    9. Children's Privacy

    Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

    10. Data Protection Officer

    Our Data Protection Officer can be contacted at: dpo@linillo.com

    For any data protection queries, concerns, or to exercise your rights, please email our DPO directly.

    11. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we will also notify you via email.

    12. Contact Us

    If you have any questions about this Privacy Policy, please contact us: