Privacy statement

Who we are

KIASA Ltd, 41 Great Sutton Street, London EC1V 0DX, United Kingdom, is the controller of the personal data described here. Our studios in other countries act for KIASA Ltd under a written agreement and follow this statement.

What we collect

• What you give us: your name, email address, phone number, organization, and the message you send through a form or by email.
• When you apply for a job: your CV, your work history, interview notes and, if we make an offer, the checks the law in your country requires.
• When you use this site: the pages you view, the page that sent you here, your browser and device type, and an approximate location from your IP address, which we shorten before storing it.
• When you subscribe: the topics you chose and, only if you allow it in the Preference Center, whether you opened our emails.
• From our clients: the work contact details of the people we work with on a project.

We do not ask for sensitive data, such as information about your health, and ask you not to send it, unless a role or a reasonable adjustment at interview needs it.

Why we use it

• To answer you. Our basis is our legitimate interest in replying to questions about our work.
• To consider you for a job. Our basis is the steps you asked us to take before a contract, and for background checks, a legal obligation.
• To send you news and research. Only with your consent, which you can withdraw at any time.
• To run and protect this site: to keep it secure, fix faults and learn which pages are useful. Our basis is legitimate interest, and for analytics cookies, your consent.
• To deliver client work. Our basis is the contract with your employer.

Who we share it with

Only the service providers who host this site, send our email, run our recruitment system and keep our accounts. Each works under a contract that limits them to our instructions and requires them to keep the data secure. We do not sell personal data, share it for advertising, or use it to train AI models.

We disclose data when the law requires it, for example to a court or a regulator, and we will tell you when we are allowed to.

Where it is stored

Our systems are hosted in the United Kingdom and the European Union. When a studio elsewhere needs access, for example to consider a candidate in Singapore, the transfer is covered by standard contractual clauses or an equivalent safeguard. Ask us for a copy.

How long we keep it

• Enquiries: two years after our last exchange.
• Applications that do not lead to a job: 12 months after the decision, or longer if you ask us to keep you in mind.
• Employee records: six years after employment ends, as the law requires.
• Subscriptions: until you unsubscribe, then only a record of the unsubscribe, so we do not write again.
• Site analytics: 14 months, then only in totals that identify no one.

How we protect it

Access is limited to the people who need it, protected by single sign-on and two-factor authentication, and logged. Data is encrypted in transit and at rest. The controls an independent auditor examined in our managed services apply to our own systems too.

Your rights

• See the personal data we hold about you, and get a copy.
• Have inaccurate data corrected.
• Have your data deleted when we no longer need it.
• Object to, or ask us to limit, how we use it.
• Take your data to another organization in a common format.
• Withdraw your consent at any time, without affecting what we did before.
• Complain to the data protection authority where you live.

Changes to this statement

We review this statement every year, and whenever the way we use data changes. If a change matters, we say so at the top of this page and, if you subscribe to our emails, we tell you directly.

Contact

Data Protection Officer, KIASA Ltd, 41 Great Sutton Street, London EC1V 0DX, United Kingdom. Email privacy@kiasa.tech. This site is not meant for children under 16, and we do not knowingly collect their data.