Data Sovereignty

Privacy &
Sovereignty.

We believe that your professional data is your property. This policy explains exactly how we collect, validate, and protect your information to provide you with a secure foundation for career growth.

Last Updated
March 10, 2026
Compliance
UK GDPR / ALIGNED BY DESIGN (ISO 27001)
Section 01

1. Introduction and The Data Controller

Welcome to Leap. The Leap platform is entirely owned and operated by Dendro Logic Ltd. We are committed to protecting the privacy and security of your personal information. When you use our platform, Dendro Logic Ltd acts as the Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our mission is to provide you with peace of mind. We do not harvest your data to sell to advertisers. We process your information solely to translate your complex employment history into a validated capability ledger, ensuring you can make data-driven career decisions with absolute clarity.

Section 02

2. The Data We Validate

To build an accurate picture of your professional worth, we need to collect and process specific categories of information. We practice strict data minimisation, meaning we only collect what is absolutely necessary to fulfil our service to you.

Information you provide to us:

  • Identity and Contact DataYour name, email address, and account credentials when you register for a Skills Passport.
  • Professional HistoryInformation contained within uploaded CVs, including past job titles, employer details, and duration of employment.
  • Validation DataYour responses to Skill Challenges, scenario-based quizzes, and interactions with Opal.
  • Motivational DriversYour preferences regarding work-life balance, salary expectations, and environmental needs captured during onboarding.
  • Technical and Usage DataInformation regarding your IP address, browser type, and how you navigate the Leap ecosystem.

Employer-Provided Data

If you are accessing Leap through an Enterprise Partner, your employer may provide us with your baseline employment record and training history to initiate your Capability Ledger.

Section 03

3. The Logic Behind the Processing

Under UK law, we must establish a clear lawful basis for processing your personal data. We utilise your information to ensure our matching engine remains fiercely accurate and reliable.

We process your identity, professional history, and validation data primarily to fulfil our contract with you. This enables us to build your Capability Ledger and provide the core functionalities of the Talent Portal. We also process your data based on our legitimate interests to improve the Leap ecosystem, ensuring our algorithms remain free from bias and aligned with real-world economic trends.

When we send you marketing communications or specific partnership offers, we do so only with your explicit consent, which you can withdraw at any time.

Section 04

4. Algorithmic Transparency and Profiling

Leap is built upon an advanced matching engine and our AI career guide, Opal. Because we use your data to predict your compatibility with specific roles, this constitutes automated processing and profiling under UK GDPR.

We guarantee an Explainable Decision Architecture. You have the Right to Explanation regarding any automated decision that significantly impacts you on our platform. Whenever Opal generates a match score or pathway recommendation, we provide a plain-English logic trail detailing exactly which verified skills and scenarios contributed to that result.

We maintain strict human oversight for highly contextual translations to ensure our AI acts as a helpful guide rather than a silent gatekeeper.

Section 05

5. Ecosystem Sharing and Enterprise Access

Leap is designed to connect you with opportunities. However, you remain in total control of who sees your data. Your private Capability Ledger is never exposed to the public internet.

When you choose to apply for a role or opt into the Transferable Gems feed, we share your validated capability data with licensed Recruiter and Enterprise Partners. These partners are bound by strict contractual obligations to handle your data securely and in compliance with UK GDPR.

To maintain our industrial-grade infrastructure, we also partner with secure cloud hosting and data processing providers. These technical partners act strictly as Data Processors.

Section 06

6. Data Sovereignty and the Right to Carry

We operate under a strict Right to Carry protocol. Your professional growth is an immutable personal asset. Even if your access to Leap was provided by an employer, your historical growth, verified credentials, and Mastery Maps belong entirely to you.

You are free to export your Skills Passport in a machine-readable format at any time to take to another platform or employer.

Section 07

7. Security, Incident Transparency, and Data Transfers

Your professional worth requires industrial-grade protection. We have architected Leap using Zero-Trust principles and military-grade encryption to protect your data both in transit and at rest.

All personal data is primarily processed and stored within secure, UK-based server regions to ensure absolute data sovereignty. If a specific integration requires your data to be transferred outside the UK, we enforce strict legal safeguards relying on government-approved Standard Contractual Clauses.

In the unlikely event of a data breach that poses a risk to your professional privacy, we are legally committed to notifying both you and the Information Commissioner's Office within 72 hours.

Section 08

8. Your Statutory Rights

Under the UK GDPR, you possess absolute authority over your personal information. We have built radical accessibility into our platform to ensure you can exercise these rights without unnecessary friction.

The Right to Access

Request a complete copy of the personal data we hold.

The Right to Rectification

Correct any inaccurate or incomplete professional data.

The Right to Erasure

Request the total deletion of your data via platform tools.

The Right to Restrict

Temporarily pause the processing of your data.

The Right to Portability

Download your Skills Passport in a structured format.

The Right to Object

Object to automated profiling or direct marketing.

Section 09

9. The Master Switch and Cryptographic Shredding

We believe the right to delete data should be as easy as the right to create it. You may terminate your account at any time using the Master Switch located in your user dashboard.

Upon activation, we initiate a verified de-provisioning protocol. Your personal identifiers and CV documents are subjected to cryptographic shredding within 30 days. This process destroys the encryption keys, rendering your personal data technically unrecoverable.

Section 11

11. Age Requirements and Policy Updates

Leap is an industrial-grade infrastructure designed exclusively for the active workforce. We do not knowingly collect or process data from anyone under the age of sixteen.

When we make significant changes to our processing logic, we will notify you directly via email or a prominent platform alert, ensuring you always understand how your data is handled.

Section 12

12. Contacting Our Data Integrity Team

Dendro Logic Ltd is registered with the Information Commissioner's Office (ICO). If you have any questions about this policy, please contact our dedicated Data Protection Officer.

Email:privacy@dendro-logic.com
Address:Dendro Logic Ltd (Registered UK Address)

Right to Complain

You maintain the right to lodge a formal complaint with the Information Commissioner's Office (ICO) at any time if you believe we are not handling your data in accordance with the law.

© 2026 DENDRO LOGIC LTD. ALL RIGHTS RESERVED. REGISTERED IN ENGLAND AND WALES.

Support & Enquiries

We are here to help.

Whether you are navigating a career transition, exploring our tools for enterprise, or looking to partner with us, we would love to hear from you. Drop us a message and we will get back to you.

opal@leapcareer.io

By sending this message, you agree that Leap can contact you regarding your enquiry.