Legal
Privacy Policy
Last updated April 2026. Saiyō is the data controller for personal data collected through this website and during recruitment engagements.
Who we are
Saiyō is a subscription headhunting partner for SaaS scale-ups, headquartered in the United Kingdom. For any privacy-related question, contact us at privacy@saiyo.io.
What we collect
- Website visitors: aggregate, anonymous analytics (page views, country, referrer). No cross-site tracking. No advertising cookies.
- Prospects and clients: name, work email, company, role, and any information you share when booking a call or contacting us.
- Candidates: CV, employment history, contact details, salary expectations, interview notes, references, and right-to-work confirmations, shared with our client only with your explicit consent.
Lawful basis
We process candidate data on the basis of legitimate interest for initial outreach and consent for client introduction and onward processing. Client data is processed under contract. Website analytics rely on legitimate interest with a privacy-first, cookieless tool.
How long we keep data
- Candidate records: 24 months from last meaningful contact, then deleted or anonymised.
- Client records: duration of engagement plus 7 years for tax and compliance.
- Website analytics: 12 months, fully aggregated.
Your rights
You can request access, correction, deletion, restriction or portability of your personal data at any time by emailing privacy@saiyo.io. You can also lodge a complaint with the UK Information Commissioner's Office (ICO).
Sub-processors
We use a small set of audited sub-processors for hosting, email, scheduling, ATS integration and analytics. A current list is available on request and detailed in our Security & Trust page.
Changes
We will post material changes to this policy on this page with an updated revision date. Continued use of the site after changes constitutes acceptance.