Privacy
Protocol.

We collect information you provide directly when creating an account, submitting a project brief, or applying for a position. This includes name, email address, professional history, portfolio materials, and payment details.

We also collect usage data automatically — pages visited, features used, and interaction patterns — to improve the platform. This data is anonymised and aggregated where possible.

We do not collect data we do not need. If a data point is not necessary for the operation of a specific feature, we do not request it.

Profile data is used to match clients with appropriate specialists. Our matching engine processes skill, experience, and availability data algorithmically — no human recruiter reads your profile during the matching phase.

Contact information is used to communicate project updates, billing notifications, and platform announcements. We do not send marketing communications without explicit opt-in.

Payment data is processed by our PCI-DSS Level 1 certified payment processor. We do not store full card numbers on our servers.

We do not sell personal data to third parties. We do not share personal data with advertisers.

Client project briefs are shared with matched specialists only after both parties have signed an NDA through the platform. The content of project communications remains confidential.

We share data with sub-processors (hosting providers, payment processors, analytics tools) only to the extent necessary to operate the platform. All sub-processors are contractually bound to our data protection standards.

Active account data is retained for the duration of your relationship with the platform. Closed accounts are retained for 36 months to satisfy legal and audit obligations, then permanently deleted.

Project data including deliverables, communication logs, and payment records are retained for 7 years in line with standard commercial record-keeping requirements.

You may request deletion of your personal data at any time. Deletion requests are processed within 30 days, subject to legal retention obligations.

Under GDPR and applicable data protection laws, you have the right to access, correct, delete, and port your personal data. You also have the right to object to certain processing activities and to withdraw consent where processing is consent-based.

To exercise any of these rights, contact privacy@outsource.online. We will acknowledge your request within 48 hours and respond in full within 30 days.

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

We use strictly necessary cookies for session management and platform operation. These cannot be disabled without preventing the platform from functioning.

We use analytics cookies to understand aggregate usage patterns. These can be disabled through your account settings or browser controls without affecting platform functionality.

We do not use advertising or tracking cookies. We do not participate in cross-site tracking networks.

We may update this policy to reflect changes in our practices or applicable law. Material changes will be notified via email to registered users at least 30 days before they take effect.

The current version of this policy is always available at outsource.online/privacy. The effective date is noted at the top of the document.