Legal
Privacy Policy
Effective August 5, 2026
1. Who We Are
Thimble Talent is a boutique executive search and recruitment firm based in Scottsdale, Arizona, serving candidates and employers across the United States. This policy explains what personal information we collect, how we use it, who we share it with, and the privacy rights available to residents of every US state. It applies to this website, our candidate and client communications, and our applicant tracking workflows.
2. Information We Collect
2.1 Information You Provide
- Identifiers: name, email address, telephone number, mailing address.
- Professional information: resume or CV, work history, education, licenses and certifications, references, compensation expectations and work authorization status.
- Hiring-need information supplied by client employers.
- Correspondence, interview notes and newsletter subscription details.
2.2 Information Collected Automatically
Standard server and analytics data such as IP address, browser type, pages viewed and referring URL. We use only essential and basic analytics cookies; we do not run cross-site advertising trackers.
2.3 Sensitive Information
We ask for sensitive information only where a role or law requires it (for example professional licensure verification or voluntary EEO data). We never sell sensitive personal information and we do not use it to infer characteristics about you.
3. How We Use Information
- Matching candidates with open searches and presenting profiles to clients.
- Communicating about roles, interviews, offers and search progress.
- Maintaining our applicant tracking records and talent network.
- Sending insights or newsletters where you have opted in.
- Meeting legal, tax, audit and recordkeeping obligations.
We do not make hiring decisions through automated profiling. Human recruiters review every candidate submission.
4. How We Share Information
We share candidate information with prospective employers only with your knowledge and for the roles you are being considered for. We also use vetted service providers for hosting, applicant tracking, email and analytics, who are contractually limited to processing data on our instructions. We may disclose information when required by law or to protect legal rights.
We do not sell your personal information and we do not share it for cross-context behavioral advertising.
5. Resume Submissions and Applicant Tracking
When you submit a resume or apply for a role through this site, the information you provide is collected and processed for recruitment purposes. This includes your resume or CV, contact details, work history, education, professional licenses, compensation expectations, and any other details you choose to share.
How your resume is handled
Your submission is first received by Thimble Talent and then securely transmitted to our applicant tracking system (ATS), which is provided by Rec-Intelligence. The ATS stores your profile, matches it against live and upcoming searches, and helps our recruiters coordinate interviews, feedback, and offers. We do not manually forward every resume; instead, the integration passes your application directly into the ATS so it is recorded against the role you applied for and searchable for future relevant opportunities.
What data is shared with the ATS
- Identity and contact details: name, email address, phone number, and location.
- Professional information: resume or CV, work history, education, skills, certifications, and references.
- Application details: the role applied for, cover letter, compensation expectations, availability, and work authorization status.
- Optional attachments: any additional files you upload, such as portfolios, writing samples, or certification documents.
Retention of resume data
We retain your resume and profile information for as long as necessary to consider you for current and future opportunities, maintain our talent network, and comply with employment and tax recordkeeping obligations. If you are placed in a role, your information may be retained for the duration of any guarantee period and for the legal recordkeeping period required afterward. You may request deletion of your resume and profile at any time using our Privacy Rights Request form.
Security and access controls
Resume uploads are transmitted over HTTPS and stored within access-controlled systems. Only Thimble Talent recruiters and authorized service providers operating the ATS have access to your submission. We review access permissions regularly and require that any third-party processor handle your data only on our instructions and under appropriate confidentiality and security obligations.
Withdrawing or updating your resume
You can ask us to update your contact information, remove your resume from active consideration, or delete your candidate profile entirely by emailing privacy@thimbletalent.com or submitting a request through the Privacy Rights Request form. We will process your request within 45 days, or sooner where possible.
6. Retention and Security
Candidate records are retained for as long as needed to support your search activity and our talent network, and for the periods required by employment and tax recordkeeping rules. You may ask us to delete your record at any time. We maintain administrative, technical and physical safeguards including encryption in transit, access controls and least-privilege permissions.
7. Your Privacy Rights by State
Privacy rights differ by state. We honor the rights below for residents of the states listed and, as a matter of policy, extend equivalent rights to residents of every other state. We will not discriminate against you for exercising a privacy right.
California
CCPA / CPRA
Rights to know, access, delete, correct, opt out of sale/sharing and limit use of sensitive personal information, plus notice at collection for job applicants and independent contractors. We do not sell personal information and do not share it for cross-context behavioral advertising.
Virginia
VCDPA
Rights to access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale and certain profiling, with a right to appeal a denied request.
Colorado
CPA
Access, correction, deletion, portability, opt-out of targeted advertising, sale and profiling, including recognition of universal opt-out signals.
Connecticut
CTDPA
Access, correction, deletion, portability and opt-out rights, plus consent requirements for sensitive data.
Utah
UCPA
Access, deletion, portability and opt-out of targeted advertising and sale.
Texas
TDPSA
Access, correction, deletion, portability and opt-out rights, with universal opt-out signal recognition.
Oregon
OCPA
Access (including a list of specific third parties that received your data), correction, deletion, portability and opt-out rights.
Montana
MTCDPA
Access, correction, deletion, portability and opt-out rights.
Florida
FDBR
Access, correction, deletion, portability and opt-out rights for consumers covered by the Florida Digital Bill of Rights.
Delaware, Iowa, Nebraska, New Hampshire, New Jersey
State consumer data privacy acts
Access, correction, deletion, portability and opt-out of targeted advertising, sale and profiling, with appeal rights where provided.
Indiana, Kentucky, Maryland, Minnesota, Rhode Island, Tennessee
State consumer data privacy acts
Access, correction, deletion, portability and opt-out rights as those statutes take effect. Maryland and Minnesota add strict data-minimization and profiling-transparency requirements we apply nationwide.
Illinois
BIPA / AI Video Interview Act
We do not collect biometric identifiers and do not use AI to analyze video interviews. If that ever changes, we will obtain written consent first.
New York
NYC Local Law 144 / SHIELD Act
We do not use automated employment decision tools to screen candidates for New York City roles, and we maintain reasonable safeguards required by the SHIELD Act.
Washington & Nevada
My Health My Data / SB 370
We do not collect consumer health data for advertising purposes and do not sell any health-related information.
All other states
Uniform practice
Where your state has not yet enacted a comprehensive privacy law, we voluntarily extend the same access, correction, deletion, portability and opt-out rights described above to every US resident.
8. How to Exercise Your Rights
The fastest route is our Privacy Rights Request form, which issues a reference code you can use to track your request at any time.
Email privacy@thimbletalent.com or call (480) 555-0142 with the words "Privacy Request" and tell us which right you wish to exercise. We verify requests using information already in our records and respond within 45 days, extendable once where the law allows.
Authorized Agents
An authorized agent may submit a request on your behalf with written permission; we may still contact you to confirm the request.
Appeals
If we decline a request, you may appeal by replying to our decision. We will respond within 45 days and tell you how to contact your state attorney general if you disagree with the outcome.
Opt-Out Signals
We honor Global Privacy Control and similar universal opt-out preference signals sent by your browser.
9. Children and Additional Notices
Our services are intended for working professionals. We do not knowingly collect information from anyone under 16. Personal information is stored and processed in the United States.
Changes to This Policy
We will post any update here and revise the effective date above. Material changes will be communicated to active candidates and clients by email.
Questions
Reach the Thimble Talent privacy team at privacy@thimbletalent.com or through our contact page.
