Privacy Policy
Last updated: April 2026
Who we are
Floated is a passive job matching platform operated by Nimble Panda Ltd, based in Hertfordshire, United Kingdom. We act as a data controller for candidate data submitted to our platform.
Contact: privacy@floated.co.uk
What data we collect
Candidates: Email address, name, CV (PDF), and the structured data we extract from it (job titles, skills, experience, sectors). Preferences you set during onboarding (salary range, location, job types). Records of matches found, applications sent on your behalf, and interview requests received.
Employers: Email address, company name, company description, website. Billing information processed by Stripe (we do not store card details). Job posts you create. Credit balance and transaction history.
How we use your data
We use candidate data exclusively to match you to relevant job opportunities and submit applications on your behalf. We do not sell your data to third parties. We do not use your data for advertising.
Your CV and parsed profile are used to generate vector embeddings for semantic matching. These embeddings cannot be reversed back into your original CV.
Employer contact details are shared with candidates only when an interview is accepted. Candidate contact details are never shared with employers until the candidate explicitly accepts an interview request.
Legal basis for processing
Contract performance: Processing your CV and preferences to deliver the matching service you signed up for.
Legitimate interests: Sending applications on your behalf to publicly listed roles (as your appointed agent), and notifying you of matches.
Consent: Sending marketing emails (weekly digests). You can withdraw consent at any time.
Auto-applications
By completing onboarding, you authorise Floated to submit job applications on your behalf to publicly listed roles that match your profile. Every application includes a disclosure that it was submitted via Floated. You can withdraw this authorisation at any time by deleting your account or contacting us.
We apply to a maximum of 5 roles per day on your behalf, and only to roles with a similarity score above our quality threshold. You can review every application we've sent from your dashboard.
Data retention
We retain candidate data for as long as your account is active. If you delete your account, we delete your email, name, CV file, parsed CV data, embeddings, preferences, and match history within 30 days.
Application records (what we sent, to whom, when) are retained for 90 days after account deletion for legal compliance purposes, then permanently deleted.
Employer data is retained for as long as your subscription is active, and for 7 years thereafter for accounting purposes (required by UK law).
Third parties we use
Your rights
Under UK GDPR you have the right to:
→ Access the personal data we hold about you
→ Rectify inaccurate data
→ Erasure — delete your account and all associated data
→ Portability — receive your data in a machine-readable format
→ Object to processing based on legitimate interests
→ Withdraw consent for marketing communications at any time
To exercise any of these rights, email privacy@floated.co.uk or use the account deletion option in your dashboard. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
We use only functional cookies necessary for authentication (session tokens set by Supabase). We do not use advertising cookies or third-party tracking.
Changes to this policy
We'll notify active users by email of any material changes to this policy at least 14 days before they take effect.