Privacy notice

HUMAND TALENT LIMITED, company number 12379847, registered office 1 Abbey Street, Eynsham, England, OX29 4TB, is the data controller.

For anything about your data, contact admin@humand.co.uk.

Every route we do have is listed on our contact page.

Only from people who apply. TopGrads collects nothing about you when you browse; you can read every opportunity on the site without telling us anything. What the platforms hosting and protecting the site set in your browser is listed under cookies below.

Your CV is stored privately. It is not published, it is not reachable from any public address, and there is no link to it that works without an authorisation check. Only you and the TopGrads review team can open it.

We accept PDF and DOCX only, up to 5 MB, and we check that an uploaded file genuinely is one of those formats. We do not scan files for malware. TopGrads has no scanning infrastructure, and we would rather tell you that than let you assume otherwise.

Nobody outside TopGrads. No employer can see applicant data today — there is no employer route to it, and the database refuses one. Employer discoverability is something we intend to build, and when we do we will explain exactly what would be shared and ask you before any of it is.

We do not sell your data, and we do not share it with advertisers or data brokers.

These periods are enforced by the system, not just written here. When a period runs out the account and everything attached to it — application, CV, status history and consent records — is deleted.

• While your application is with us, and while you are a member: for as long as that remains true.
• Waitlisted: 24 months from the decision.
• Not accepted: 24 months from the decision. We keep it this long deliberately — the account exists so that someone turned down in their penultimate year can apply again in their final year without starting over.
• Started but never submitted: 6 months.

You do not have to wait for any of these. You can delete everything at any time from your membership page.

TopGrads runs no analytics, no advertising and no third-party trackers of any kind. What we store ourselves is either needed to make the site work or put there by something you did.

Some of the items below are not ours. They are cookies set by the platforms that host and protect the site, on the page response itself, before any TopGrads code runs. They are listed with what can actually be evidenced about each one: what sets it, what it holds and how long it lasts. Whether they need your permission is under legal review — we would rather say so than claim an exemption we have not had confirmed.

• Supabase session (browser storage, set by TopGrads, until you sign out or clear your browser storage) — Keeps you signed in between pages. Set only once you sign in.
• topgrads.application (browser storage, set by TopGrads, until you submit it or clear your browser storage) — Your part-finished application, so you can stop and come back. Never sent to TopGrads until you submit.
• topgrads.saved-jobs (browser storage, set by TopGrads, until you clear your browser storage) — Opportunities you have saved. Held in this browser only.
• __dpl (cookie, set by Hosting platform, 24 hours) — Holds the identifier of the deployment currently serving the site. Its value is the same as the x-deployment-id header on the same response.
• __cf_bm (cookie, set by Cloudflare, about 30 minutes of inactivity) — Cloudflare's bot protection. Cloudflare documents it as needed by its Bot Management and Bot Fight Mode products, generated separately for each site, and not corresponding to any application user ID.

Clearing your browser storage removes all of it. Doing so signs you out and discards any part-finished application, but does not touch anything you have already submitted.

All of this is available to every account holder, whatever your membership status. Four of the seven statuses describe people who are not members, and it would be a strange kind of right that only applied to the people we said yes to.

• See what we hold. Download everything, as a file, from your membership page.
• Correct it. Change your name directly; everything else is corrected by updating your application.
• Delete it. One action removes your account, your applications, your CV, your status history and your consent records. There is no waiting period and you do not have to give a reason.
• Change your mind about marketing. It is a separate choice from having your application processed, it is off unless you turn it on, and turning it off never affects your application.

Go to your membership page to do any of it.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first, but you do not have to.