How we handle your details

Last updated 28 July 2026. This is the plain-English version, and it is the whole policy — there isn't a longer one hidden somewhere.

Who we are

FlowGT Talent, Christchurch, New Zealand. We're a recruitment agency for AI and engineering roles. We're the "agency" responsible for your personal information under the Privacy Act 2020.

Questions, or want your information deleted? Email [email protected] and a human replies within one business day.

What we collect, and why

• If you drop a CV (AI Studio or email): your CV and the contact details in it. We use it to give you a read on where you fit, to email you that read, and to match you to roles.
• If you drop a job description: the JD, your email, and any company details you give us. We use it to prepare a market read and to contact you about the role.
• If you fill in the contact form: your name, email, company and message — used to reply to you.
• If we contact you first: your name, role and work email, taken from a page your company published — a job advertisement or your website. We record where we found it and when. We do not guess email addresses and we do not buy contact lists.
• Basic technical data: a one-way hash of your IP address, used to stop abuse of the free tools. We can't reverse it back to you.

We only ask for what's relevant to the role or the enquiry. We don't ask for your age, ethnicity, marital status, health or anything else that has nothing to do with the work.

Who sees it

The FlowGT consulting team, and nobody else — except:

• An employer, only after you say yes. We never send your CV or your name to a client without asking you first, every time.
• Our infrastructure providers, who store or transmit the data on our behalf: Cloudflare (hosting, database, the AI that reads your document) and Resend (email delivery).

We never sell your information. We never use your CV or JD to train AI models. The AI read is generated for you, on the spot, and the model does not learn from it.

How long we keep it

• CVs: we keep yours on file so we can match you to future roles. That's the point of leaving it with us. Ask us to delete it and it's gone — no reason needed, no questions asked.
• Job descriptions and enquiries: kept while we're working with you, then for as long as we reasonably need for our records.
• If you tell us to stop: we keep only your email address, on a suppression list, so we can be sure we never contact you again. Nothing else.

Your rights

Under the Privacy Act 2020 you can ask us for a copy of everything we hold about you, and ask us to correct anything that's wrong. Email [email protected]. We'll respond within 20 working days, which is what the Act requires, and usually a lot sooner.

If you're not happy with how we've handled it, you can complain to the Office of the Privacy Commissioner.

If we emailed you out of the blue

We'll have told you in that email exactly where we found your address — it will have been on a job ad or a page your company published, in a business capacity. Every email we send includes a way to stop them permanently, it's free, and we action it within two working days. That applies across everything we'd ever send you, not just the one message.

We don't use address-harvesting software, we don't buy lists, and we don't scrape LinkedIn.

Candidates never pay

We charge employers, never candidates. Charging a candidate a fee for getting them work is illegal in New Zealand (Wages Protection Act 1983, s 12A). If anyone claiming to be us ever asks you for money, it isn't us — please tell us.

Security, and being straight with you

Your data sits on Cloudflare's infrastructure with access limited to the FlowGT team. If we ever have a privacy breach that could cause you serious harm, we'll tell you and the Privacy Commissioner, as the Act requires.

If we change this policy we'll update the date at the top. We won't quietly start using your information for something you didn't agree to.