Sponto

Privacy Policy

Last updated: 10 September 2026

1. Who we are

Sponto LLC, 312 W 2nd St, Casper, WY 82601, United States and Sponto LTD, 20 Wenlock Road, London, England, N1 7GU (together, "Sponto", "we", "us") are the joint controllers of the personal data described in this policy. The company that acts as your main point of contact depends on where you are located: Sponto LTD handles privacy, data protection and data subject requests for candidates in the United Kingdom and the European Union; Sponto LLC does so for candidates elsewhere.

We operate across the United States (Wyoming), the United Kingdom (London) and Pakistan (Karachi).

For all privacy, data protection and data subject requests, email ops@sponto.co.

2. What we collect

When you apply for a role or join our talent network we collect:

  • Your name
  • Your email address
  • Your phone number, where you provide it
  • Your CV or resume file
  • LinkedIn and portfolio links, where you provide them
  • Your intro video link (for example Loom, Google Drive, YouTube or Vimeo)
  • Your answers to the role-specific questions on the application form

We do not ask for identity documents, financial details or sensitive personal data as part of an application.

3. Why we use it

We use your information to:

  • Assess your application for the role you applied to
  • Match you to other roles that fit your experience
  • Contact you about your application and about other opportunities

Our legal basis is your consent when you submit an application, and our legitimate interest in operating a recruitment service. You can withdraw consent at any time (see section 7).

4. Who we share it with

Prospective client employers. Sponto recruits on behalf of client companies. Your CV, application answers, intro video link and contact details may be shared with the hiring client for a role you have applied to, as part of the hiring process. This is the core purpose of applying through Sponto.

Infrastructure providers. We use Supabase for application hosting, database and file storage, and an email delivery provider to send you transactional email about your application. These providers process your data on our instructions only.

We do not sell your personal data, and we do not share it for advertising.

5. International transfers

Applicant data may originate in Pakistan, the United Kingdom, the European Union or elsewhere, and may be processed and stored in the United States, the United Kingdom, the European Union and Pakistan, depending on where our infrastructure providers and the hiring client operate.

Where candidate data originating in the United Kingdom or European Union is transferred to the United States or Pakistan, we rely on Standard Contractual Clauses as the transfer mechanism to protect the data in line with UK and EU data protection law.

6. How long we keep it

If your application is unsuccessful, we retain your application data for 12 months from the date of application so we can consider you for future roles, after which it is deleted.

If you opted into the talent network, we keep your details for 24 months so we can contact you about relevant opportunities, after which they are deleted.

You can ask us to delete your data earlier at any time by contacting ops@sponto.co. We will do so unless we are required to keep specific records for legal reasons.

7. Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Request erasure of your data
  • Restrict or object to our processing
  • Request portability of your data
  • Withdraw consent to our processing, including future role matching

To exercise any of these rights, email ops@sponto.co. We aim to respond within 30 days. If you are in the UK and are unhappy with our response, you have the right to complain to the Information Commissioner's Office.

8. Cookies and sessions

This site uses browser storage only to keep you signed in and to maintain your application session. We do not use advertising cookies, third-party ad networks or cross-site tracking.

9. Changes to this policy

If we make material changes we will update the "Last updated" date above. Please review this page from time to time.