Leafr Privacy Policy

Last updated: July 2026

Who we are

Leafr Ltd, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. Company number 14460176. We are the data controller for the personal data described here, and you can reach us at hello@leafr.com. We are based in the UK and comply with the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

What we collect

• From Consultants: Contact details, professional background (CV, work history, skills, qualifications, rates), application contents, payment details, ratings, feedback, and call and interview recordings (for applications to Leafr and Client projects, but not during project delivery).
• From Clients: Contact details, project briefs and requirements, billing and payment details.
• From Everyone: Technical data (IP address, device/browser information) and usage data.
• Diversity Information (Optional): Gender and ethnicity, provided strictly on a voluntary basis.

Most data comes directly from you. We also source information from public professional profiles (such as LinkedIn) and from payment and identity verification providers.

Why we use it, and our legal basis

• To perform our contract with you (Article 6(1)(b)): Running your account, delivering the platform, displaying your professional profile on our marketplace, managing engagements, processing payments, and sending service notifications.
• For our legitimate interests (Article 6(1)(f)): Vetting Consultants, recording and reviewing interview calls to assess suitability and maintain quality/training, sharing relevant profile information and interview recordings with Clients for specific engagements, promoting our platform, securing our systems, preventing fraud, and marketing similar services to existing customers (with an opt-out in every message).
• With your explicit consent (Article 6(1)(a) & Article 9(2)(a)): Electronic marketing to non-customers, non-essential cookies, and internal diversity tracking (ethnicity and gender). Diversity data is never shared, published, or used to make automated or individual selection decisions. You can decline or withdraw it at any time.
• To meet legal obligations (Article 6(1)(c)): Tax and accounting records, right-to-work checks, and lawful requests from authorities.

Who we share it with

• Clients and Consultants: Where needed for a project application or engagement, including interview recordings shared with Clients for specific roles.
• Publicly: Consultant profiles displayed on our website, platform, and marketing materials as agreed in your Consultant Terms.
• Service & Video Providers: Third-party cloud, hosting, and video conferencing providers bound by written security contracts.
• Corporate Transactions: In the event of a merger, acquisition, financing, or sale of our business, data may be shared under legitimate interests during due diligence and transferred on completion.

How we protect your data

We store your data on secure servers and use appropriate technical and organisational measures to protect it against loss, misuse, and unauthorised access or disclosure. We limit access strictly to personnel who need it to perform their jobs.

How long we keep it

• Account, engagement, and financial records: 6 years after our last dealing with you (for tax and legal claim limits).
• Call and interview recordings: 2 years (you may also request deletion earlier).
• Unsuccessful applications: 12 months.
• Website analytics: 6 months.
• Marketing data: Until you opt out.

Where your data goes

Our platform and databases are hosted in the UK. Where service providers (including video hosting tools) process data outside the UK/EEA, we rely on UK adequacy regulations, International Data Transfer Agreements (IDTA), or the UK Addendum to EU standard contractual clauses.

Cookies

We set non-essential cookies only with your consent via our banner. You can change your preferences anytime using the Cookie Settings link in our footer. See our Cookie Policy for details.

Your rights

You can request access to, correction of, or deletion of your data, object to or restrict processing, request data portability, or withdraw consent (including deleting your interview recordings or diversity data) at any time. Email hello@leafr.com and we will respond within one month.

You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or 0303 123 1113 (or your local supervisory authority in the EEA).

Changes

We will update this notice as our services and obligations change, and we will notify you before any material changes take effect.

‍

‍

‍