Privacy

Who we are

DeepTechJobs (deeptechjobs.co.uk) is a discovery platform for jobs, companies, funding and analysis across the deep technology ecosystem.

• Operated by: Humand Talent Limited
• Registration: Company number 12379847, registered in England and Wales
• Registered office: 1 Abbey Street, Eynsham, Oxfordshire, OX29 4TB
• Email: hello@deeptechjobs.co.uk

Humand Talent Limited is the controller of the personal data described on this page. That means it decides why and how this data is used, and it is responsible for looking after it.

Data protection registration: Registered with the Information Commissioner's Office as a data controller, registration number ZA773588

What we collect

You can use this site without signing up or filling in a form. Like any website, it receives some technical information when you visit, such as your network (IP) address, which is personal data. This is described below. There are no visitor accounts, no public sign-up and no job alerts, and apart from the staff sign-in pages, no page asks visitors for a name, an email address or any other detail. If we add accounts or job alerts, we will update this notice before they launch.

• Hosting logs. To serve the site, Lovable, which hosts it, and Cloudflare, which provides Lovable's network and the servers the site's code runs on, receive every request your browser makes, including your network (IP) address. Lovable's request logs record your IP address and the address of the page requested. That address includes anything you type into a search box on the site, because searches are part of the address (for example ?q=quantum). Lovable has not told us where these logs are stored or for how long, and we cannot delete them. Lovable says it processes some service and log data as an independent controller, under its own privacy policy (lovable.dev/privacy) rather than on our instructions.
• Error reports. When something fails, the site writes error details to the hosting platform's server logs. They include the page path, a request identifier, the kind of failure, and the technical error message and stack trace, which can include parts of the request, such as its address and any search text in it. In the browser, a failure is also passed to the hosting platform's own error reporter where that reporter is present on the page. That report contains the error, its technical details and the page path; for a failed request, this can include the request's address, and so any search text.
• Hosting platform analytics. Lovable offers visitor analytics for the sites it hosts. It is switched off for this site. Lovable has told us that, with it switched off, the platform no longer adds its analytics script to the site's pages or collects new analytics; Lovable still receives hosting logs, as described above. While it was switched on, a script (/~flock.js) sent the page address, the referring page, your browser's user agent and language, page-load timings and a random session identifier to the platform's analytics endpoint (/~api/analytics), and the platform set visitor cookies (session-id for 30 minutes; _tccl_visitor and pvisitor for about a year). The analytics records collected while it was on are kept by Lovable and are not deleted automatically.
• Cookies and browser storage. The site's own code sets no cookie for visitors. The hosting platform sets a cookie, __dpl, which records which version of the site you are served and lasts about a day. Cloudflare, its network provider, sets a short-lived security cookie, __cf_bm, to protect the site from automated traffic. The platform also sets two visitor identifiers, _tccl_visitor and pvisitor, which last about a year. The site's code does not set or read them, and Lovable has not told us what they are used for. The platform's analytics for this site is switched off and records no visits. We are asking Lovable to explain these two cookies or to stop setting them, and will update this notice when it answers. You can delete or block them in your browser settings. The page router uses sessionStorage to keep your scroll position for the current tab and, if part of a page fails to load after an update, to remember that it has already reloaded once; the browser clears both when the tab closes. The user-interface library the site uses includes a sidebar component that would store a sidebar_state cookie (open or closed, kept for 7 days), but no page uses it. Nothing is written to localStorage unless a staff member signs in.
• Fonts. The typefaces are served by this site itself, so loading a page sends nothing to a font provider.
• Email to us. If you email us, for example at hello@deeptechjobs.co.uk or, to send us a role to list, at jobs@deeptechjobs.co.uk, we receive your email address, your name if your email shows it, and whatever your message contains.
• Staff sign-in. Sign-in is only for the people who run the site. For each staff member, the site's sign-in service and a staff profile record hold their email address and, if given, their name. The sign-in service also records the network address and browser used to sign in, and sends password-reset emails itself. While a staff member is signed in, their session is kept in the browser's localStorage.
• People named in the catalogue. Company pages can name a company's founders and their roles, and funding and investor pages name the investors in a funding round, some of whom are individuals. Funding write-ups can also name founders, executives or individual investors, and job listings reproduce the employer's published description, which can name a contact at the employer. We do not collect this from the people themselves. Founder names and roles are added by our team from the company's own public website and announcements. For some founders our records also hold a short biography from the same public source, and they can hold a photo or a link to a public profile; the site does not show any of these. Investor names come from published funding news, including Innovate UK and UKRI announcements and specialist technology and science publications. We never record private contact details. To ask us to correct or remove your details, see Your rights below.
• AI drafting of funding news. Our staff have a tool that drafts funding write-ups with an AI writing service, and they have used it. It sends the published facts of a funding round, including the names of its investors, and the text of the news report it came from, which can name founders and other people, to Lovable's AI service, which passes them to Google's Gemini model. Automatic publication is switched off, so a write-up is published only if a member of our team publishes it. The funding write-ups on the site today were built from the facts by a fixed template, not by the AI service.

You do not have to give us any information. If you email us, we need your email address to reply. Staff must give an email address to have an account.

Why we use it

The law allows us to use personal data only where we have a lawful basis. For each use, the purpose and our basis are:

• Hosting logs and error reports: to serve the site, keep it secure and find and fix faults. Our basis is our legitimate interest in running a working and secure website.
• Hosting platform analytics, while it was switched on: to see how many people visited and which pages they used. Our basis was our legitimate interest in understanding how the site was used. It is no longer collected.
• Email to us: to reply to you and, if you send us a role, to check it and list it. Our basis is our legitimate interest in answering the people who contact us and keeping the listings complete.
• Staff accounts: to let the people who run the site sign in and maintain the catalogue. Our basis is our agreement with those people (contract) for their account, and our legitimate interest in keeping the site secure for the sign-in records.
• People named in the catalogue: to give job seekers accurate information about the companies they might work for, including who founded and funded them. Our basis is our legitimate interest in helping job seekers understand who founded and funded the companies listed. We use only details the company, the employer or the funding news has already made public, and you can object at any time (see Your rights).
• AI drafting of funding news: to prepare funding write-ups more quickly from facts that are already public. Our basis is our legitimate interest in publishing timely funding news.
• Legal obligations: where the law requires us to keep or disclose information, our basis is that legal obligation.

We do not sell personal data, we do not use it for advertising, and we do not make decisions about anyone by solely automated means.

How long we keep it

Nothing on this site deletes personal data on a fixed timetable. We keep each kind of data only while we need it for the purpose above. We review the personal data we hold at least once a year, and delete or correct what we no longer need. What ends the need for each kind of data is:

• Email to us: kept until we have dealt with your message and any follow-up. After that we no longer need it, and we aim to delete it from our mailbox at our next review. Our email provider may keep copies for a time under its own terms.
• Staff accounts: kept while the person works on the site. Once they stop, we no longer need the account, and we aim to delete it then, or at the latest at our next review. Copies can remain in database backups (see below).
• People named in the catalogue: kept while the company they are connected with is listed on the site, or while a funding write-up that names them is published. When that ends, or when you make a valid objection or correction request, we aim to delete or correct the details then, or at the latest at our next review.
• Job listings, including any contact an employer names in them: shown while the role is listed. When we find that a role has closed, we take it off the site, and we keep the closed listing to count a company's past roles.
• Text sent to the AI service: we have not confirmed whether Lovable's AI service or Google keeps it, or for how long.
• Hosting logs: kept by Lovable under its own policies. Lovable has not told us for how long, and we cannot delete them.
• Error reports and database backups: held for us on Lovable's platform for as long as the platform keeps them. Lovable has not yet told us those periods; we have asked, and we will update this notice when it does. We cannot delete information from them ourselves.
• Analytics records from before the platform's analytics was switched off: kept by Lovable, and not deleted automatically. Nothing is added to them now.
• Browser storage: the scroll position and reload marker in sessionStorage until you close the tab; a staff session in localStorage until the staff member signs out or the session expires.

Who receives it

• Lovable: hosts and serves the site, and holds the site's database, error reports and database backups for us. It also provides the AI service our staff use to draft funding write-ups. We use Lovable on the standard terms of our current plan. There is no separate data processing agreement between us and Lovable yet. Lovable says it processes some service and log data as an independent controller, under its own privacy policy (lovable.dev/privacy).
• Cloudflare: provides Lovable's network and the servers the site's code runs on. It handles every request to the site. Cloudflare's own privacy policy is at cloudflare.com/privacypolicy.
• Supabase: provides the site's database and staff sign-in as part of Lovable's hosting service. It holds the catalogue and staff account details, and sends staff password-reset emails.
• Google: provides the Gemini model that Lovable's AI service uses. It receives the text our staff send for drafting.
• GitHub: hosts the site's source code in a private repository. Some of the catalogue's starting data, including a few founders' names and roles, is stored there.
• Our email provider: stores the email you send us in our mailbox.
• Authorities and others where the law requires us to disclose information.

Lovable Labs Sweden AB, which runs Lovable, is based in Sweden. These providers operate internationally, so information they handle may be processed outside the UK. We have not yet confirmed where the information Lovable and Supabase hold for us (the database, error reports and backups), or the text sent to the AI service, is stored or processed, and we have not identified a transfer safeguard that applies to it. Lovable has not told us where its hosting logs are stored. For the service and log data it handles as an independent controller, Lovable is responsible for the safeguards that apply to its own transfers. If you want to know where your data is held, email us and we will tell you what we know.

Your rights

Under UK data protection law you can ask us:

• for access to the personal data we hold about you;
• for rectification of data that is wrong;
• for erasure of your data;
• to restrict how we use it;
• for data portability, where that right applies.

Some information, such as hosting logs and backups, is held by Lovable under its own policies, and we cannot delete it ourselves. If you ask, we will tell you what we hold, delete what we can, and tell you how to contact Lovable about the rest.

Your right to object

Where we rely on our legitimate interests, which is every use described on this page except legal obligations and the part of staff accounts that rests on our agreement with staff, you have the right to object. This includes a catalogue entry about you. If you object, we will stop using your data for that purpose unless we have compelling legitimate grounds that override your interests, or we need it for a legal claim.

How to make a request

To make a request, email hello@deeptechjobs.co.uk. We reply within one month, and we may ask you to confirm your identity first. If a request is complex, we may take up to two further months and will tell you why within the first month. Making a request is free.

If you are unhappy with how we have used your data, you can complain to us at hello@deeptechjobs.co.uk. We will acknowledge your complaint within 30 days and tell you the outcome. You can also complain to the Information Commissioner's Office (ico.org.uk), the UK data protection regulator.

Other websites

Job listings, company pages, funding pages and investor pages link to the sites of employers, companies, investors and news publishers, and the site links to our LinkedIn page. When you follow one of those links, the other site's privacy notice applies, not this one. We do not receive anything you give to an employer when you apply. Some roles listed on the site may be ones Humand Talent Limited is recruiting for. If you apply for one of those through Humand Talent Limited's own recruitment process, the information you give is handled under the privacy notice for that service (humand.co.uk/legal/privacy), not this one. DeepTechJobs itself collects no applications.

Changes to this notice

If what we collect or why we use it changes, we will update this page before the change takes effect and show the date of the new version here. Earlier versions are available on request.

Version 1, in effect from 4 November 2026. This is the first published version of this notice.

Contact

Email hello@deeptechjobs.co.uk with any question about this page or to exercise a right above.

Post: Humand Talent Limited, 1 Abbey Street, Eynsham, Oxfordshire, OX29 4TB