This Privacy Policy explains how Finploy Technologies Pte. Ltd. ("Finploy", "we", "us", "our") collects, uses, shares and protects personal data when you use finploy.co.uk (the "Website"). It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Last updated: 22 October 2026.

1. Who We Are

Finploy Technologies Pte. Ltd. is the controller of your personal data. This means that we decide how and why your personal data is used.

We are a company registered in Singapore (UEN 202548778H). Our registered office is 51 Goldhill Plaza, #07-07, Singapore 308900.

For questions about this Privacy Policy or your personal data, email support@finploy.sg with the subject line "Data Protection".

2. What Finploy Does

Finploy is an online job advertising platform for banking, insurance, fintech and finance roles. Employers post job advertisements and search candidate profiles. Candidates create profiles, upload CVs and apply for jobs. Partners can refer candidates to the platform.

Finploy is not an employment agency or a recruitment agency. We do not make hiring decisions. Each employer makes its own hiring decisions.

3. Personal Data We Collect

3.1 Candidates

• Identity and contact details: name, email address, mobile number and profile photo.
• Career details: current employer, job title, employment status, work experience, the products and departments you worked in, preferred job location, current salary and whether you have the right to work.
• Other profile details that you add, such as gender and age.
• Your CV or resume, and the information in it.
• Your job applications and their status.

3.2 Employers and their staff

• Name, email address and mobile number of each person who uses the employer account.
• Company details: company name, documents that you upload to verify your company, billing address and tax registration number.
• The job advertisements that you post.
• Purchases and payment records. Our payment provider handles your card details. We do not receive or store full card numbers.
• Platform activity. For example, when you view a candidate profile, we record your mobile number, your IP address and the date and time of the view.

3.3 Partners

• Name, email address and mobile number.
• Details of the candidates that you refer, and the status of each referral.

3.4 Everyone who uses the Website

• Login details and account settings.
• Messages that you send to us, for example through the contact form or by email.
• Technical data: IP address, browser and device type, pages visited, and the date and time of each visit.
• Cookie data (see section 11).

Please do not put sensitive information in your CV or profile (for example information about your health, ethnic origin, religious beliefs, political opinions, trade union membership or criminal record) unless you want employers to see it.

4. Where We Get Personal Data

• From you, when you register, complete your profile, upload a CV, apply for a job, post a job, buy a plan or contact us.
• From Google, when you use "Sign in with Google". We receive your name and email address.
• From a partner, when the partner refers you. The partner gives us your name and contact details.
• From employers, about their own staff who use the employer account.
• From our payment provider, which tells us whether a payment was successful.
• Automatically, when you use the Website (see sections 3.4 and 11).

5. How We Use Personal Data and Our Lawful Basis

The UK GDPR requires a lawful basis for each use of personal data. We use personal data for these purposes:

• To create and run your account and provide our services, including job advertisements, candidate profiles, job applications, referrals and customer support. Lawful basis: performance of a contract with you.
• To send your job application to the employer when you apply for a job. Lawful basis: performance of a contract with you.
• To show candidate profiles to employers. Employers with an account can search candidate profiles and see career details. Employers can pay to unlock the contact details of a candidate. This is part of the service that candidates register for. Lawful basis: performance of a contract with you. You can ask us at any time to remove your profile from employer search.
• To take payments and keep billing records. Lawful basis: performance of a contract, and legal obligation (tax and accounting records).
• To send service messages, such as one-time passcodes, account notices, application updates and payment confirmations. Lawful basis: performance of a contract.
• To send marketing messages, such as career advice, newsletters and surveys. Lawful basis: your consent, which you can withdraw at any time. We may also send business customers information about similar services where the law allows it. You can opt out at any time.
• To keep the Website secure, prevent fraud and misuse, and fix technical problems. Lawful basis: our legitimate interests in protecting our users and our platform.
• To improve the Website and understand how people use it. Lawful basis: our legitimate interests in developing our services.
• To suggest the Finploy website for your country, based on the approximate location of your IP address. Lawful basis: our legitimate interests in showing you the correct website.
• To meet legal obligations, respond to lawful requests from authorities, and establish, exercise or defend legal claims. Lawful basis: legal obligation and our legitimate interests.

When we rely on legitimate interests, we balance our interests against your rights and freedoms. You can object to this use (see section 9).

We need some information to provide our services. For example, we need your email address or mobile number to create your account. If you do not provide it, we cannot open an account for you.

6. Who Can See or Receive Your Personal Data

• Employers: when you apply for one of their jobs, and when they search candidate profiles or unlock contact details (see section 5).
• Partners: if a partner referred you, the partner can see the progress of the referral.
• Service providers that work for us and may use the data only to provide their service to us: website hosting (Amazon Web Services), email delivery (Zoho), payment processing (Stripe), sign-in (Google), and content delivery services that load fonts and page components (for example Google Fonts, Cloudflare and jsDelivr).
• Professional advisers, such as lawyers, accountants and auditors.
• Authorities, such as regulators, courts and law enforcement agencies, when the law requires it.
• A buyer or successor of all or part of our business, if we sell or reorganise it.

We do not sell your personal data to data brokers. We do not share your personal data with other companies for their own marketing.

7. International Transfers

Finploy is based in Singapore. Amazon Web Services hosts our servers in India. Some of our service providers process data in other countries, including the United States. This means that your personal data is transferred outside the UK.

Where UK law requires it, we protect these transfers with safeguards approved under UK law, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for more information about these safeguards.

8. How Long We Keep Personal Data

• Account and profile data: while your account is active. If you ask us to delete your account, we delete or anonymise your personal data, unless the law requires us to keep some of it.
• Job applications: while the account is active, so that you and the employer can see the application history.
• Payment and billing records: for as long as tax and accounting laws require.
• Messages to our support team: for as long as we need them to deal with your request and any follow-up.
• Security and technical logs: for a limited period, to protect the Website.

When we no longer need personal data, we delete or anonymise it.

9. Your Rights

Under the UK GDPR, you have the right to:

• get a copy of your personal data (right of access);
• ask us to correct personal data that is wrong or incomplete;
• ask us to delete your personal data;
• ask us to limit how we use your personal data;
• object to our use of your personal data when we rely on legitimate interests;
• object to direct marketing at any time;
• receive the personal data that you gave us in a common, machine-readable format, or ask us to send it to another organisation (data portability), where this right applies;
• withdraw your consent at any time, where we rely on consent. This does not affect our use of your data before you withdrew consent;
• not be subject to a decision based only on automated processing that has a legal or similarly significant effect on you.

To use your rights, email support@finploy.sg with the subject line "Data Protection Request". We may ask you to confirm your identity. We will reply within one month. If your request is complex, we may need up to two more months, and we will tell you why. We do not charge a fee, unless a request is clearly unfounded or excessive.

You can also update most of your profile details yourself in your account.

10. Automated Decision-Making

Finploy provides AI-assisted search and filter tools. These tools help employers and candidates find relevant job advertisements and profiles. Employers make all hiring decisions. We do not make decisions about you based only on automated processing that have a legal or similarly significant effect on you.

11. Cookies and Similar Technologies

Cookies are small files that a website saves on your device. We use these cookies:

• Session cookie (strictly necessary): keeps you signed in while you use the Website. Your browser deletes it when you close the browser.
• finploy_geo (functional): if we suggest the Finploy website for your country and you choose to stay on this Website, this cookie remembers your choice for 30 days.
• blog_access_token (functional): if you give your name and email address to read our articles, this cookie remembers you for 30 days, so that you do not need to enter them again.
• Google Sign-In: when you use "Sign in with Google", Google can set its own cookies. The Google privacy policy explains how Google uses them.

We do not use advertising cookies. At present we do not use analytics cookies. If we start to use analytics or advertising cookies, we will ask for your consent before we set them.

You can block or delete cookies in your browser settings. If you block strictly necessary cookies, some parts of the Website, such as login, will not work.

We use your approximate country, found from your IP address, to suggest the Finploy website for your country. We do not store your IP address for this purpose. IP Geolocation by DB-IP.

12. Security

We use technical and organisational measures to protect personal data. These include HTTPS encryption when data travels between your device and our servers, and access controls on our systems. No method of sending or storing data over the internet is completely secure. Keep your login details private. Tell us immediately if you think that someone else has used your account.

13. Personal Data Breaches

If a personal data breach occurs, we will act quickly to contain it. Where the law requires it, we will report the breach to the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of it. If the breach is likely to result in a high risk to you, we will also tell you without undue delay.

14. Children

Our services are for people of working age who are looking for work, and for employers. They are not intended for children. If you believe that a child has given us personal data, contact us and we will delete it.

15. Third-Party Websites and Services

The Website may contain links to other websites and services, for example employer websites, payment pages and WhatsApp. We are not responsible for their privacy practices. Please read their privacy policies before you give them personal data.

16. Complaints

If you are not satisfied with how we use your personal data, please contact us first at support@finploy.sg with the subject line "Data Protection Complaint". We will acknowledge your complaint within 30 days, investigate it, and tell you the outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection: ico.org.uk/make-a-complaint, telephone 0303 123 1113.

17. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology or legal requirements change. We will post the new version on this page and change the "Last updated" date. If we make important changes, we will tell you by email or by a notice on the Website.

18. Contact Us

Finploy Technologies Pte. Ltd.
51 Goldhill Plaza, #07-07, Singapore 308900
Email: support@finploy.sg
Subject line: "Data Protection"