Careers at
Shield - Home
Shield - Home

Privacy Policy

Shield Technology Partners: Candidate Privacy Notice
Last Updated: January 2026

Shield Technology Partners (“we”, “us”), including all "Partners" that make up Shield, are committed to protecting and respecting your privacy. This Privacy Notice sets out the basis on which the personal data collected from you, or that you provide to us, will be processed in connection with our recruitment processes.

1. General Data Protection Regulation (GDPR) & UK GDPR

For the purpose of applicable data protection laws, the Data Controller is Shield Technology Partners.

Lawful Basis for Processing

We rely on Legitimate Interest as the primary lawful basis for processing your data, which is the recruitment of qualified staff for our business. In certain circumstances, such as when conducting background checks where legally required, we may process data based on Legal Obligation or your explicit Consent.

Data Processor

We use Pinpoint (The Infuse Group Ltd) as a data processor to assist with our recruitment. They process your data only under our strict instructions.

2. California Privacy Notice at Collection (CCPA/CPRA)

This section applies solely to job applicants who reside in the State of California.

Information We Collect

In the preceding 12 months, we may have collected the following categories of personal information:

  • Identifiers: Name, alias, postal address, email, SSN (if provided for checks).

  • Professional/Employment Info: Resume, job history, references.

  • Education Information: Transcripts, degrees, and certifications.

  • Protected Classifications: Age, gender, or disability status (if voluntarily provided for DEI monitoring).

  • Internet Activity: Interactions with our careers website via Pinpoint.

Purpose of Collection

We use this information to evaluate your candidacy, verify your identity, perform background checks, and comply with employment laws.

Retention & Selling

  • Retention: We retain candidate data for 48 months (as detailed in Section 5).

  • Selling/Sharing: We do not sell your personal information or share it with third parties for cross-context behavioral advertising.

3. Massachusetts Lie Detector Law Notice

Applicable to all Massachusetts-based roles:

NOTICE: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Acknowledgment: By submitting your application for a position based in Massachusetts, you acknowledge that you have read and understood this notice.

4. Personal Information We Collect

  • From You: Information provided via online applications, emails, or interviews (Name, contact details, experience, skills).

  • From Other Sources: Pinpoint’s technology allows us to link your data with publicly available information (e.g., LinkedIn) or search databases to find potential candidates.

  • Automated Decision Making: We use Pinpoint to help filter candidates based on specific criteria. However, all final hiring decisions are made by our human recruitment team.

5. Storage, Security, and Retention

Security

We limit access to your data to those with a genuine business need. We have procedures to handle suspected data breaches and will notify you and regulators where legally required.

Where We Store Your Data

Data is stored in Amsterdam (Netherlands) and may be synced to London (United Kingdom) for backup. When data is transferred outside the EEA/UK, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.

Retention Policy

We retain candidate data for 48 months from the time of application to consider you for future roles, unless:

  1. You delete your information via the Manage Your Data tool.

  2. You submit a written request for erasure.

6. Your Rights

Depending on your location (UK, EU, or California), you have the following rights:

  • Right to Access: Request a copy of the data we hold.

  • Right to Rectification: Correct inaccurate data.

  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data.

  • Right to Restrict/Object: Limit how we process your data or object to "Legitimate Interest" processing.

  • Right to Data Portability: Receive your data in a machine-readable format.

  • Right to Non-Discrimination: (California) We will not discriminate against you for exercising your privacy rights.

7. How to Exercise Your Rights or Complain

To exercise your rights, please:

  1. Use the Manage Your Data tool provided in your application confirmation.

  2. Contact us directly at HR@shieldtp.com

If you are unsatisfied with our response, you have the right to lodge a complaint with a supervisory authority (e.g., the ICO in the UK or your local EU Data Protection Authority).