Last updated: 20 July 2026

1. Introduction and About Us

We are committed to safeguarding your privacy and personal data. This Privacy Notice (the "Notice") explains how we collect, use, and protect your personal data when you visit our website at https://talent-nest.com/ (the "Website") or use our services (the "Services"). Please review it thoroughly.

ADVIRAT LTD acts as the data controller under the EU General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (including the "UK GDPR"). This means we determine the purposes and means of processing your personal data and are responsible for protecting it.

If you have any questions or concerns about this Notice or our privacy practices, please contact us using the details below:

Company Name: ADVIRAT LTD

Company Registration Number: 17327895

Registered Address: 167 - 169 Great Portland Street, 5th Floor, London, England, W1W 5PF

Email Address: info@talent-nest.com

2. The Personal Data We Collect

We may collect, use, store, and process the following types of personal data:

• User Account Information: including login credentials, username, user activity logs, settings, and profile information;
• Contact Details: including phone number, email address, country of residence, and postal address;
• Identity Verification Data: including full name, government-issued identification, authentication details, and ID document details;
• Communication Records: including phone conversations, chat logs, and email correspondence;
• Transaction Information: including order and purchase history, and account balance;
• Payment Data: including payment history, preferred payment methods, and bank account or payment card details;
• Technical Information: including device details, IP address, operating system, browser type, and settings;
• Customer Support Data: including issues reported and resolution details;
• Compliance Data: including data related to Anti-Money Laundering and Counter-Terrorist Financing (AML/CFT) activities, Know Your Customer (KYC) procedures, and other legal compliance;
• Marketing and Communications Data: including your preferences regarding marketing communications and participation in loyalty programs.

3. How and Why We Use Your Personal Data

We utilize personal data for the following purposes, each supported by a lawful basis under data protection law:

• Account Management: To create and manage your account (Lawful Basis: Performance of a contract);
• Service Provision: To provide the Services you request (Lawful Basis: Performance of a contract);
• Identity Verification: To verify and authenticate user identities (Lawful Basis: Compliance with a legal obligation, and our legitimate interests in securing our platform);
• User Communication: To communicate with you and provide customer support (Lawful Basis: Performance of a contract, and our legitimate interests in maintaining customer relationships);
• Order Fulfilment: To process and manage orders (Lawful Basis: Performance of a contract);
• Transaction Management: To execute and manage transactions (Lawful Basis: Performance of a contract, and our legitimate interests in financial oversight);
• Legal Compliance: To comply with legal and regulatory requirements (Lawful Basis: Compliance with a legal obligation);
• Risk Management: To manage business risks and make informed decisions (Lawful Basis: Our legitimate interests in protecting our business, and compliance with legal obligations);
• Marketing Activities: To send marketing materials and personalized content (Lawful Basis: Consent where required by law, or otherwise our legitimate interests in promoting our Services);
• Fraud Prevention: To prevent fraud and misuse of our services (Lawful Basis: Compliance with a legal obligation, and our legitimate interests in preventing financial crime);
• Technical Support: To address technical issues and troubleshoot problems (Lawful Basis: Performance of a contract);
• Security Measures: To ensure the security of our information and assets (Lawful Basis: Compliance with a legal obligation, and our legitimate interests in network and information security);
• Dispute Resolution: To address claims and resolve disputes (Lawful Basis: Compliance with a legal obligation, and our legitimate interests in defending legal claims);
• Service Improvement: To improve and develop our services (Lawful Basis: Our legitimate interests in developing our business and improving user experience).

4. How We Collect Your Personal Data

We collect personal data through the following methods:

• Direct Interactions: Data provided by you directly through forms, subscriptions, or when you contact us;
• Automated Technologies: Data collected automatically via cookies and similar technologies when you interact with our Website (please see our Cookie Notice for further details);
• Third-Party Sources: Data received from our service partners, government institutions, or publicly available sources.

All collected data is adequate, relevant, and limited to what is necessary for the specified purposes.

5. Mandatory and Optional Information

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with our Services). In this case, we may have to cancel a Service you have with us, but we will notify you if this is the case at the time.

Conversely, provision of certain other data is optional. While not required, sharing this additional data can help us to enhance your experience and offer more personalized services. We will clearly indicate which data is mandatory and which is optional at the point of collection.

6. Sharing Your Personal Data

We share your personal data only with trusted third parties if necessary for the provision of our Services, and with law enforcement or regulatory authorities when legally required. These third parties include payment processors, IT service providers, identity verification agencies, and professional advisers. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not sell your personal data.

7. International Data Transfers

There may be instances where your personal data needs to be transferred outside the European Economic Area (EEA) and the United Kingdom (UK). When such transfers occur, we ensure your data remains secure and protected by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
• Where we use certain service providers, we may use specific contracts approved for use in the UK and EEA, such as the International Data Transfer Agreement (IDTA) or the European Commission's Standard Contractual Clauses (SCCs) along with the UK Addendum, in accordance with the GDPR and UK GDPR requirements.

8. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. These measures include:

• Encryption: We use encryption technologies to secure your data both in transit and at rest;
• Access Controls: We implement strict access controls so that only authorised personnel have access to your data, utilising multi-factor authentication and role-based access permissions;
• Regular Training: Our staff undergo regular training on data protection and privacy best practices;
• Security Audits: We conduct regular security audits and assessments to identify and address potential vulnerabilities;
• Data Minimisation: We follow the principle of data minimisation, collecting only the data necessary for our purposes;
• Incident Response: We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

9. How Long We Keep Your Personal Data

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

In some instances, legal requirements dictate the retention period (for example, data related to Anti-Money Laundering (AML) purposes is generally retained for up to five (5) years). In other scenarios, we determine the retention period based on the statutory limitation period for potential claims (for instance, up to six (6) years under UK contract law, or up to ten (10) years in certain European jurisdictions).

Once the appropriate retention period has elapsed, we ensure that your data is either securely deleted or anonymised so that it can no longer be associated with you.

10. Your Legal Rights

Under certain circumstances, you have the following rights under data protection laws in relation to your personal data:

• Request access to your personal data;
• Request correction of inaccurate or incomplete data;
• Request deletion (erasure) of your data;
• Request restriction of the processing of your data;
• Object to processing of your data (including direct marketing);
• Request portability (to receive your data in a structured, commonly used format); and
• Withdraw consent at any time where we are relying on consent.

If you wish to exercise any of these rights, please contact us at info@talent-nest.com. We will respond to all legitimate requests within one month. We do not charge a fee for exercising your rights, but we may need to verify your identity to protect your security.

11. Children's Privacy

Our Services are intended for users aged eighteen (18) and older. We do not knowingly collect personal data relating to individuals under eighteen (18). If we discover that we have collected data from a child under eighteen (18) without verification of parental consent, we will delete it promptly. Contact us if you believe a child has provided personal data without appropriate consent.

12. Automated Decision-Making

We do not engage in solely automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

13. How to Complain

If you have any concerns about how we handle your data, we would appreciate the opportunity to address them directly before you approach the regulator. However, you have the right to file a complaint at any time with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO).

The ICO's contact details are: Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline number: 0303 123 1113 Website: https://www.ico.org.uk/make-a-complaint

14. Changes to This Privacy Notice

We may update this Notice periodically to reflect changes in our practices or for legal reasons. Please revisit this Notice regularly. Significant changes will be communicated via our Website or by direct notification to you.