Privacy Policy

Last updated: March 2026

1. Data Controller

The data controller responsible for your personal data is:

Headless Advisory Limited trading as Signal.Careers

Centris Business Gateway II, Level 3, Suite C, Triq is-Salib tal-Imriehel, Central Business District, Birkirkara CBD3020, Malta

Company Number: C105713

VAT Number: MT30253614

Contact: thomas@signal.careers

2. Data We Collect

In the course of providing our recruitment services, we may collect and process the following personal data:

  • Name and contact details (email address, phone number)
  • Curriculum vitae (CV) and resume
  • Employment history and professional experience
  • Professional qualifications, certifications, and skills
  • Salary information and compensation expectations
  • Any additional information you choose to provide during the recruitment process

3. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Legitimate interest: We process candidate data as necessary for the purposes of our legitimate interest in providing recruitment services, including identifying suitable candidates for job opportunities, matching candidates with employers, and managing the recruitment process.
  • Consent: Where applicable, we will seek your explicit consent before processing your data, particularly before sharing your information with prospective employers.

4. How We Use Your Data

We use your personal data to:

  • Assess your suitability for cybersecurity roles and opportunities
  • Match your profile against relevant job opportunities
  • Communicate with you about potential roles and your application status
  • Share your profile with prospective employers, only with your explicit consent
  • Improve and personalise our recruitment services

5. Sharing Your Data

We will only share your personal data with prospective employers with your explicit prior consent. We will always inform you about the identity of the prospective employer and the role before sharing your data.

We do not sell, rent, or otherwise disclose your personal data to third parties for marketing purposes.

6. Data Retention

We retain candidate personal data for a period of 24 months from the date of your last interaction with us, unless you withdraw your consent or request deletion sooner.

After this period, your data will be securely deleted or anonymised unless we have a legal obligation to retain it for a longer period.

7. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights in relation to your personal data:

  • Right of access: You may request a copy of the personal data we hold about you.
  • Right to rectification: You may request that we correct any inaccurate or incomplete personal data.
  • Right to erasure: You may request that we delete your personal data, subject to any legal obligations we may have.
  • Right to data portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances.
  • Right to object: You may object to the processing of your personal data where we are relying on legitimate interest as the legal basis.

To exercise any of these rights, please contact us at thomas@signal.careers.

8. Cookies

Our website uses minimal analytics cookies only. We do not use advertising, tracking, or third-party marketing cookies. You may configure your browser to refuse cookies if you prefer.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. We regularly review our security practices to ensure the ongoing confidentiality, integrity, and availability of your data.

10. Supervisory Authority

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority. Our supervisory authority is:

Office of the Information and Data Protection Commissioner (IDPC)
Malta

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please contact us at:

thomas@signal.careers