MarketMapr Privacy Policy

Last updated 9 October 2026

1. Who we are and what this policy covers

MarketMapr is a recruitment-intelligence platform operated by MarketMapr Ltd, a company registered in England and Wales, company number 15426945. This policy explains how we collect, use and share personal data, and the rights you have, whether you are: a customer or user of our platform; a professional whose information appears in our dataset (even though you have never dealt with us directly); or a visitor to our websites (marketmapr.com, app.marketmapr.com).

For data protection purposes, the controller is MarketMapr Limited. Contact: alex@marketmapr.com.

2. Our two roles: controller and processor

We act in two different capacities, and your rights route differently depending on which applies:

• We are the controller for: the professional dataset we source and license (sections 3–4); customer account, billing and usage data (section 5); and our websites and marketing.
• We are a processor for data our customers upload to the platform — their own candidate lists, notes, tags and files ("Customer Content"). The customer is the controller of Customer Content, our Data Processing Addendum governs that processing, and requests about Customer Content should go to the customer concerned. If you contact us about data a customer holds, we will refer your request to them and assist as their processor.

3. Professional data we source

To provide the platform, we license a dataset of professional profiles and company records from third-party data providers, who compile it from publicly available professional sources — principally public professional networking profiles, company websites and public registers. If you are a professional, the dataset may include: your name; current and past job titles, employers and employment dates; professional headline and summary; skills, languages and certifications; education history; general location (city/region level); a link to your public professional profile; a profile photograph where publicly displayed; and, where published, business contact details. Company records include firmographics such as industry, headcount, founding year, locations and website.

We do not source or hold in this dataset: special category data (such as health, religion or political opinions), financial data, identity documents, or data about people's private lives — and we do not permit the dataset to be used for purposes other than professional recruitment and business development (our Terms of Service prohibit customers from reselling or redistributing it).

4. Why we process sourced professional data

We process the sourced dataset on the basis of legitimate interests (UK GDPR Article 6(1)(f)): ours and our customers' interests in connecting professionals with relevant career opportunities and in business-to-business market intelligence. In reaching this position we have balanced those interests against professionals' rights, taking into account that the data is professional (not private) in nature, drawn from sources where individuals have chosen a professional audience, limited to recruitment and business-development use, and subject to the rights in section 11 — including an unconditional right to opt out. Our Legitimate Interests Assessment is available on request.

Purposes: enabling customers to search and identify relevant professionals; keeping records accurate via periodic refresh from our providers; enrichment and change monitoring our customers initiate; and platform analytics in aggregated form.

5. Data we collect from customers and visitors

If you use our platform or websites we collect: account data (name, work email, organisation, password hash); billing data (plan, invoices, payment method handled by our payment processor — we do not store full card numbers); usage data (features used, searches run, exports made — which we also use to enforce licence limits); support communications; and technical data (IP address, browser, device). Lawful bases: performance of our contract with you; legitimate interests in securing, operating and improving the Services and enforcing our terms; and legal obligations (e.g. accounting). Marketing to business contacts is on a legitimate-interests or consent basis as required, always with an opt-out.

6. Cookies

Our websites use essential cookies (sign-in, security, preferences) and, with your consent where required, other cookies. You can manage non-essential cookies through our cookie banner and your browser settings. See our Cookie Policy for the full table of cookies and storage in use.

7. Who we share personal data with

We share personal data with: service providers who process it for us under contract — hosting and infrastructure, database and analytics services, payment processing, email delivery and support tooling (the current list is in our Data Processing Addendum); data providers we license the dataset from, to the extent needed to operate the feed, handle removals and meet audit obligations; our customers, who can view and export sourced professional records for recruitment and business-development use under terms that prohibit resale and redistribution; third-party products a customer connects (such as their own ATS or CRM) — that sharing happens at the customer's direction and under the customer's responsibility; and authorities or advisers where required by law or to establish or defend legal claims. We do not sell personal data to data brokers and do not permit our customers to resell it.

8. International transfers

We are UK-based, but some of our service providers and data providers process data outside the UK (including in the United States and the EEA). Where personal data leaves the UK, we rely on UK adequacy regulations or appropriate safeguards — the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses — together with additional measures where needed. Details of transfer mechanisms per provider are available on request.

9. How long we keep personal data

Sourced professional records are retained while they remain in our providers' active datasets and are refreshed or removed as the feed updates; records removed at source or on objection are deleted from the platform and do not reappear. Customer account data is kept for the life of the account and then for up to six years where needed for legal and accounting purposes. Customer Content is retained per our customer's instructions and deleted following account closure as described in our Terms of Service. Backups are retained on a short rolling cycle (currently three days) before being overwritten.

10. Security

We maintain administrative, technical and physical safeguards appropriate to the data we hold, including encryption in transit, access controls and authentication, segregation of customer workspaces, logging, and vendor due diligence. No system is perfectly secure; if a personal data breach occurs we will act in accordance with our incident response process and applicable notification duties, including notifying the ICO and affected individuals where required.

11. Your rights

Under UK GDPR you have rights of access, rectification, erasure, restriction, portability (where applicable) and objection, and the right not to be subject to solely automated decisions with legal or similarly significant effect — the platform does not make such decisions about you.

If you are a professional in our sourced dataset, you can object to our processing or ask to be removed at any time by emailing alex@marketmapr.com with enough information to identify your record (for example your public profile link). We honour opt-outs without requiring justification. On removal we will: delete your record from the platform; suppress it so it does not reappear in future data feeds; notify our data provider of the objection where you ask us to or where needed to make the removal effective; and instruct customers who exported your record to delete their copies, as our terms require.

We respond to rights requests within one month (extendable as the law allows for complex requests) and may need to verify your identity. Exercising your rights is free.

12. Children

The Services are for business use and are not directed at children. Our sourced dataset is compiled from professional sources and is not intended to include anyone under 18; if we learn that it does, we will remove the record.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version with a revised date, and for material changes affecting how we use personal data we will give more prominent notice (for example by email to account holders or an in-platform notice).

14. Contact and complaints

Questions, requests and complaints: alex@marketmapr.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk), though we would welcome the chance to address your concern first. If you are in the EEA, you may also contact your local supervisory authority.