LebSource Talents

Privacy & GDPR

Last updated: 19 August 2026

This notice explains how LebSource (“we”, “us”) collects, uses, and protects personal data when you use the talents.lebsource.com member portal (the “Portal”), and the rights you have under the EU General Data Protection Regulation (GDPR) and equivalent data protection laws. LebSource is the data controller for this Portal.

1. Who this notice covers

The Portal handles personal data about two groups of people:

  • Members — the LebSource team and paying subscribers who sign in to browse the talent network.
  • Talents — professionals whose profiles are published to the talent network. Talent records originate in and are managed through LebSource’s HR system (hr.lebsource.com); the Portal displays them read-only and never edits them.

2. Data we process

Member accounts

  • Identity and contact data: your email address and full name.
  • Account data: your role (admin or member) and membership status, start, and expiry dates.
  • Authentication data: sign-in codes/links and session cookies needed to keep you logged in.

Talent profiles

  • Professional details a talent has agreed to share for networking: name, headline, position, location, availability, education, work experience, skills, and links such as LinkedIn or a résumé, plus contact details (email, phone) where provided.
  • Only talents who have opted into the live talent network are shown; others are never surfaced by the Portal.

3. How and why we use data (lawful bases)

  • To provide the Portal — authenticate members, enforce membership, and let members browse the network. Basis: performance of a contract.
  • To operate the talent network — display profiles of talents who have chosen to be listed. Basis: consent (of the talent) and our legitimate interest in running the network.
  • To keep the Portal secure — session management, access control, and abuse prevention. Basis: legitimate interests.
  • To meet legal obligations — for example retaining records where the law requires. Basis: legal obligation.

We do not sell personal data, and we do not use it for advertising or automated decision-making that produces legal or similarly significant effects about you.

4. Cookies

The Portal uses only strictly necessary cookies to hold your authenticated session. These are required for sign-in to work and cannot be switched off through the site. We do not use analytics, advertising, or third-party tracking cookies.

5. Who we share data with

We share personal data only with processors and services that help us run the Portal, under appropriate data-processing terms:

  • Our infrastructure and database provider (Supabase) and hosting provider (Vercel).
  • Other LebSource systems, including the HR platform that is the system of record for talent profiles.
  • Authorities or advisers where we are legally required to disclose data.

Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. How long we keep data

We keep member account data for as long as your membership is active and for a reasonable period afterwards to handle renewals, disputes, and legal obligations, then delete or anonymise it. Talent profiles are retained and removed under the HR system’s policies; a talent who leaves the network is no longer shown in the Portal.

7. Your rights under the GDPR

Subject to conditions in the law, you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected (rectification);
  • have your data erased (“right to be forgotten”);
  • restrict or object to certain processing;
  • receive your data in a portable, machine-readable format (portability);
  • withdraw consent at any time, where processing is based on consent, without affecting prior processing; and
  • lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us using the details below. Talents can also manage their listing through the LebSource team that onboarded them.

8. How we protect data

Access to the Portal is gated by authentication and role-based checks, and member records are isolated so members cannot read one another’s account data. Connections are encrypted in transit, and access to underlying systems is limited to authorised personnel.

9. Contact us

For any privacy question or to exercise your rights, email us at privacy@lebsource.com. We will respond within the timeframes required by law.

10. Changes to this notice

We may update this notice from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated to members directly.