Privacy Policy

This site is operated by Lyon Talent LLC, a limited liability company registered in the United States, with a mailing address at:

1234 Placeholder Ave, Suite 000, Minneapolis, MN 55401

For any privacy question (including access, deletion, or opt-out requests), contact us at careers@lyonpartners.com. We are the data controller for all information submitted through this site.

We collect three categories of personal data, each with a distinct purpose:

a. Application data

When you apply for a role through one of our Workable listings linked from this site, Workable (our applicant-tracking system) collects: your name, email, phone number, work history, education, résumé/CV, cover letter, and any voluntary information you include (e.g. portfolio links, answers to application-specific questions). That information is stored in Workable’s infrastructure and is accessible to Lyon Partners’ hiring team.

b. Contact-form data

When you submit the contact form at /contact, we collect your name, email, chosen reason, and the message body. This is delivered to our hiring inbox via Resend, our transactional-email provider.

c. Analytics + cookies

We use Meta Pixel and Google Analytics 4 to understand how candidates find and navigate the site. These tools set cookies that associate your device with anonymous identifiers, track which pages you view, and (in the case of Meta Pixel) record conversion events such as clicking “Apply”. We do not share the content of your application data with these providers; only aggregated, pseudonymous event data. If you opt out of analytics (via browser settings or via platform-level controls in Meta and Google), we respect that signal.

• Evaluating your application and communicating with you about the role you applied to or related open positions.
• Responding to inbound contact-form messages.
• Improving the careers site: which pages are most useful, which calls to action convert, where the funnel drops off.
• Measuring the performance of the paid recruiting campaigns we run on Meta and Google.
• Meeting legal, regulatory, and tax obligations (e.g. right-to-work checks for successful hires).

Under GDPR, our lawful bases are: consent (for analytics cookies), contract (to process your application), and legitimate interest (to evaluate candidates and improve the site, balanced against your rights).

We share personal data only with the following categories of recipient:

• Workable (applicant-tracking system): stores application data you submit.
• Resend (transactional email provider): delivers messages you send through the contact form.
• Meta and Google: receive analytics and advertising event data (never application content).
• Railway: our hosting provider. Receives standard server logs (IP address, user agent, request URL) as part of serving the site.
• Law enforcement or regulators if legally compelled. We would challenge unreasonable requests before complying.

We do not sell personal data. We have never sold personal data. We do not share personal data for cross-context behavioral advertising beyond the analytics uses described above.

• Application data for hired candidates: for the duration of employment plus seven years after departure, in line with US employment-records retention norms.
• Application data for candidates we don’t hire: up to 24 months from the last interaction, after which we delete from Workable. We keep it in case we have a future role that might match. If you’d rather we delete sooner, email us.
• Contact-form messages: 12 months.
• Analytics data:14 months (Google Analytics 4 default) and Meta’s standard retention window.
• Server logs: 30 days, then deleted or anonymised by our hosting provider.

Regardless of where you live, you have the right to:

• Knowwhat personal data we hold about you and how we’re using it.
• Access a copy of that data.
• Correct inaccurate or outdated data.
• Delete your data, subject to legitimate overriding interests (e.g. active application, legal obligation).
• Object to processing that relies on our legitimate interest, including analytics.
• Withdraw consent for analytics cookies at any time, by clearing your cookies or using browser privacy controls.
• Data portability: receive your data in a structured, machine-readable format.
• Lodge a complaint with your local data protection authority.

California residents (CCPA / CPRA)

California residents additionally have the right to opt out of the “sale” or “sharing” of personal information. As noted above, we do not sell personal data. To exercise any right, email careers@lyonpartners.com with “CCPA Request” in the subject. We’ll respond within 45 days.

We use industry-standard safeguards: HTTPS everywhere, encrypted data at rest in our vendors’ infrastructure, access controls scoped to the smallest team necessary, and logs on administrative actions. No system is perfectly secure; if we ever experience a breach that affects you, we will notify you without undue delay, as required by law.

This site is intended for candidates over the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data, contact us and we will delete it immediately.

Our service providers (Workable, Resend, Meta, Google, Railway) operate infrastructure in the United States and the European Union. When we transfer personal data outside of the country you reside in, we rely on standard contractual clauses or provider-certified transfer frameworks (e.g. the EU-US Data Privacy Framework).

We update this policy when our practices change. The “Last updated” date at the top reflects the most recent version. Material changes will be announced on the home page for at least 30 days before taking effect.

For any privacy question, email careers@lyonpartners.com with “Privacy Request” in the subject line. For postal requests, use the mailing address in section 1.