TOP3DEVS - Privacy Policy

We collect four kinds of data, depending on how you reach us.

Lead forms, including Facebook and Instagram lead ads. When you request our hiring cheat sheet or any other resource through an ad or a landing page, we receive the fields you submit - typically your name, work email, company and role. If you submit the form inside Facebook or Instagram, Meta pre-fills it from your profile and passes those fields to us; you can edit them before you submit, and you choose whether to submit at all.

Website and ad interactions. Pages you visit on top3devs.com, the device and browser you used, your approximate location from your IP address, and whether you clicked, viewed or converted on one of our ads.

Clients and prospects. Contact details, company information, what we discuss on calls, and our email correspondence. Discovery and sales calls may be recorded and transcribed; we tell you before recording starts and you can decline.

Candidates. If you apply or we approach you about a role: your CV, LinkedIn profile, work history, skills, salary expectations, availability, location, interview notes and evaluations, and recordings or transcripts of recruiter and technical interviews.

We do not ask for special-category data (health, religion, political views, and similar), and we ask you not to send it. We do not knowingly collect data from anyone under 18.

If you download a resource through one of our ads or landing pages, here is exactly what happens: we email you the resource, add you to our mailing list, and send you a short series of emails about hiring senior engineers. Every email has an unsubscribe link, and unsubscribing stops all marketing email immediately.

Beyond that, we use personal data to:

• answer enquiries and run discovery and sales calls
• deliver our recruiting service - sourcing, screening, interviewing and presenting candidates to clients
• share shortlisted candidate profiles with the client hiring for that role
• issue invoices, keep accounts and meet our tax and legal obligations
• measure and improve our ads, our website and our service
• protect our systems against fraud and abuse

We do not sell personal data, and we do not share it with third parties for their own marketing.

Where the GDPR or UK GDPR applies to you, we rely on these grounds.

Where we rely on consent, you can withdraw it at any time; that does not affect what we did before you withdrew it. Where we rely on legitimate interest, you can object - see Your rights.

We use cookies that are strictly necessary to run the site, as well as analytics and advertising cookies.

Our site carries the Meta Pixel. It tells us which ads lead to downloads and bookings, and it lets us show follow-up ads to people who visited the site or downloaded a resource. We also build audiences inside Meta Ads: lookalike audiences from a hashed list of our contacts, and exclusion lists so existing clients do not see our ads. Email addresses used this way are hashed before they are uploaded.

We use Google Analytics through Google Tag Manager to measure website visits. Google and Meta receive information about your device, pages visited and ad interactions.

Your browser can block or delete cookies. Meta's own use of the data it collects is governed by its privacy policy, and you can control ad personalisation in your Facebook or Instagram ad settings.

We share data with clients when we present a candidate for their role, and with the service providers below, who process it on our instructions. We also disclose data where the law requires it, and we would transfer it as part of a sale or reorganisation of the business.

If you are a candidate, your profile goes only to the client hiring for the role you are being considered for, and only after you agree to be put forward.

Data about people in the EU, the UK or elsewhere is transferred to the United States and may be processed by our team and contractors in Europe, Africa and Latin America. Where the GDPR or UK GDPR applies, those transfers rely on the European Commission's Standard Contractual Clauses (with the UK addendum where relevant), or on the EU-US Data Privacy Framework where the provider is certified. You can ask us for details of the safeguards used.

Write to hello@top3devs.com and we will answer within 30 days. We may ask you to confirm your identity first. Exercising these rights is free and we will not treat you differently for it.

If you are in the EU, the UK or Switzerland, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider in a portable format. You can also withdraw consent at any time, and you can complain to your national data protection authority.

If you are in California or another US state with a privacy law, you can ask us what personal information we hold, where it came from and who we shared it with, ask us to correct or delete it, and opt out of targeted advertising. We do not sell personal information or share it for cross-context behavioural advertising as those terms are defined in California law.

To stop marketing email, use the unsubscribe link in any message or reply "OPT-OUT". To stop ad tracking, decline non-essential cookies on our banner and adjust your ad settings on Facebook or Instagram.

We keep data in access-controlled business systems, limit access to the people who need it, require multi-factor authentication on our accounts, and put confidentiality terms in place with our contractors and providers. No system is perfectly secure, and we cannot guarantee absolute security.

If we change this policy we will update the effective date at the top.

Questions, requests or complaints: hello@top3devs.com.