The People Nook ("we", "us", "our") is a boutique recruiting agency based in Argentina. This Privacy Policy explains how we collect, use, store, share and protect personal data of candidates, clients, website visitors and our own team. We comply with Argentina's Personal Data Protection Act (Ley 25.326) and, for people located in the European Economic Area or the UK, we apply the principles of the GDPR.
This site hosts both our public website and Talent Atelier, the private workspace our team uses for sourcing and recruiting operations. The private area is invite-only and is not accessible to candidates or visitors.
Who is the data controller
The People Nook is the data controller for the information described in this policy. You can contact us at any time at hello@thepeoplenook.com.
What data we collect
When you apply to one of our open positions through the application form, we collect:
- Full name
- Email address
- Country / location
- LinkedIn profile URL
- CV / resume and any attached documents
- Professional background, experience and any additional information you voluntarily provide in the form
If you write to us through the contact form on this site, we store your name, email, company (if provided) and the content of your message so we can reply.
We also collect professional information from public sources — mainly public LinkedIn profiles — when we identify someone who may be a fit for a search. In that case we typically record name, public profile URL, current role, location and publicly stated skills or experience. See "Data collected without prior contact" below.
When you browse the site we also process minimal technical data (see our Cookie Policy).
Purpose and legal basis
We use your personal data to:
- Evaluate your application for the role you applied to.
- Consider you for other current or future searches that match your profile.
- Share your profile with our clients (mainly US-based startups and scaleups) when relevant to a hiring process.
- Contact you about the recruiting process.
- Reply to messages you send us.
- Comply with legal and tax obligations.
The legal basis is your consent when you submit an application or a message, and our legitimate interest in operating a recruiting agency when we contact professionals about relevant opportunities. We record which legal basis applies to each candidate record.
Data collected without prior contact
Recruiting involves reaching out to people who have not applied to us. When we do this, we only use information that is already public and professional in nature, we rely on legitimate interest as our legal basis, and we tell you where we found your details the first time we contact you. You can ask us to stop contacting you and to delete your data at any time, and we will do it — no explanation needed. Records created this way are deleted after 24 months at the latest if no meaningful interaction takes place.
Use of artificial intelligence
We use AI tools to speed up manual, repetitive work. Concretely:
- Reading a CV, a public profile or an email you sent us and turning it into structured fields in our records.
- Drafting internal notes and summaries of information you have already provided.
AI is only an assistant: every record is reviewed and confirmed by a person before it is saved, and our tools are configured not to infer or invent information that is not explicitly stated in the source. We do not make automated decisions with legal or similarly significant effects about you, and no hiring decision is taken by an algorithm. AI processing is performed by our infrastructure providers under contract; your data is not used to train third-party models.
Browser extension used by our team
Our recruiters use an internal browser extension that lets them copy information from a public professional profile they are already viewing into our recruiting records, instead of retyping it. The extension only works for logged-in team members, only sends data to our own systems, and does not collect data in the background or from candidates' devices.
Where we store your data
Candidate information is stored in Notion (our applicant tracking system) and in our own database, hosted on managed cloud infrastructure (Supabase and Cloudflare). These providers process data on servers located in the United States and the European Union. We rely on our providers' security measures and on standard contractual clauses for international transfers. Email correspondence is managed through standard email providers.
Who we share your data with
- Our clients — mainly US-based startups and scaleups in tech, crypto, Web3, infrastructure and AI, when your profile matches an active search.
- Service providers — Notion (ATS), our cloud hosting and database providers, AI processing providers and email providers, strictly to operate our services.
- Authorities — when required by applicable law.
We never sell your personal data.
Our team's data
Team members with access to the private workspace have an account with their name, email, role, time zone, working availability, time-off requests and signed agreements. This data is used only to run our internal operations, is protected by per-user access rules, and is deleted when a person leaves, except for records we must keep for legal or tax reasons.
How long we keep your data
We retain candidate data for as long as it remains potentially useful for current or future searches, and for a maximum of 24 months after our last meaningful interaction with you, unless you ask us to delete it earlier or a longer retention period is required by law. Contact messages are kept for up to 24 months.
Your rights
Under Argentina's Law 25.326, and under the GDPR where it applies, you have the right to:
- Access the personal data we hold about you.
- Request rectification of inaccurate or incomplete data.
- Request deletion of your data ("right to be forgotten").
- Object to or restrict certain processing, including outreach based on legitimate interest.
- Request a copy of your data in a portable format.
- Withdraw consent at any time.
- File a complaint with the Argentine Agency for Access to Public Information (AAIP) or, in the EEA/UK, with your local data protection authority.
To exercise any of these rights, email us at hello@thepeoplenook.com. We handle requests manually and respond within 30 days at the latest. We may ask for minimal information to confirm your identity before acting on a request.
Security
We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss or disclosure: encrypted connections, per-user access rules on our database, private storage for documents and invite-only access to the internal workspace. No system is 100% secure, but we work with reputable providers and limit access to personal data to people who need it. You can read more on our Trust Center.
Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be communicated through the website.