Privacy Policy

Our Privacy Policy

Last Updated: May 15, 2025.

Digital Trust is the cornerstone of our business.

At Colossus Technology Group (collectively, “Colossus,” "we," "us," or "our") respect your privacy and we are committed to protecting your Personal Data when you visit our website, communicate with us, and/or use our services or applications.

This Privacy Policy describes how Colossus Technology Group may collect, use and disclose personal data from users of our website, prospective or current candidates/employees, clients and business partners, who interact with our team in any form. We use the term "Personal Data” to refer to any information that identifies or can be used to identify you.

Unless specified otherwise in this privacy policy, Colossus Technology Group is the controller of your Personal Data which means that Colossus Technology Group decides why and how your personal data is processed. Colossus Technology Group does not knowingly collect personal data from or provide services to minors.

We are a small, Boston-based company providing personalized service at scale. While we don’t meet the data processing threshold of most privacy laws, your trust is important to us. Please contact your recruiter or our operations manager for questions about our practices or to submit a privacy rights request. Please do not provide us with any Personal Data if you do not agree with this Privacy Policy.

We may amend this privacy policy from time to time so please visit this page occasionally to ensure that you understand any amendments.

Contact Details

Full name of legal entity: Colossus Technology Group

Address: 75 Arlington St, Boston MA, Suite#500, 02116

Email address: liam@colossustg.com

Telephone number: (603) 252-0251

What Personal Data Do We Collect?

Colossus Technology Group collects Personal Data that identifies you as an individual or that can be related to you as an identifiable individual. The type of Personal Data we collect depends on the situation but usually includes your name, email address, and professional details. We source from different methods depending on whether you are a candidate, client, supplier or vendor, or website user.

Personal Data About Candidates

Candidates are individuals who apply for a client role or to deliver client managed services. You may be a prospective or past candidate, a candidate in process, or you may have participated in our recruitment, or other similar events.

How we collect your data:

You may provide Personal Data to us by email, post, telephone, during meetings (whether face-to-face or through video conferences*) or at our events, through our website, or through other onboarding and/or due diligence questionnaires that we send you; or

We may collect your data indirectly or from third parties: through referrals, networking activities, public databases, joint marketing partners, licensed databases, and social media platforms (such as LinkedIn), research companies, or client or supplier conversations; or

Colossus Technology Group may also collect personal data about you from third parties, such as from our business partners or aggregators, in the course of our business activities. This includes information that is publicly available online, including information you choose to make public through social media platforms and other public online forums. We will always seek to confirm that the third party has provided transparent information about its use of this data,

What data we collect:

The Personal Data we collect about candidates includes: first name, last name, email, mailing address, title, date of birth and gender, nationality, employment and education history, skills proficiency, references, or qualifications information contained in your resume/CV, or written records of our interviews, conversations or meetings. We may also collect your device information and website visitor history if you submit a resume via our website.

When you perform services under contract to Colossus Technology Group, we and our service providers may collect payroll, expense and benefits information, such as government identifiers such as tax ID or Social Security Number, for payment management purposes.

Personal Data You Share About Other People

If you submit any Personal Data about other people to us or to our service providers, you represent that you have the authority to do so and to permit us to use the information in accordance with this Policy.

Any Personal Data that you provide sourced through third parties is subject to the third party's privacy policy. Please be sure to check this policy before disclosing Personal Data to us.

Clients and Prospective Clients

When you are inquiring about or using our services, we collect and use information to understand your requirements, agree to role specifications, propose candidates, discuss our contract, receive your feedback on candidates and contractors, and provide training or consultancy services or to share Colossus Technology Group content which is likely to be relevant and useful to you.

How we collect your data:

You may provide Personal Data to us by email, mail, telephone, during meetings (whether face to face, over the phone, or through video conferences) or through our website; or

We may collect it from your colleagues, social media, our network of contacts, others who may know you, event delegate lists, or third-party market research; or

Colossus Technology Group may also collect personal data about you from third parties, such as from our business partners or aggregators, in the course of our business activities. This includes information that is publicly available online, including information you choose to make public through social media platforms and other public online forums. We will always seek to confirm that the third party has provided transparent information about its use of this data, including its disclosure to third parties like TRU, in compliance with applicable law.

What data we collect:

Data we collect includes the Personal Data of individual contacts who we deal with at your organization such as: name, job title, management level, business relationships, memberships, work history, work address, telephone numbers, and email address or written records of our conversations or meetings.

Business Partners and Vendors

Partners who supply services or contract with us need are required to provide certain information so that we can validate contracts and pay for the services you provide.

How we collect your data:

You may provide Personal Data to us by email, mail, telephone, face to face, video call, or via our website; or

We may collect it from candidates, social media, from our network contacts / others who may know you, event delegate lists, or third-party market research.

What data we collect:

Colossus Technology Group may collect from its Business Partners and Vendors account manager or supplier Personal Data such as name, job title, work address, telephone numbers, email address or written records of our conversations or meetings.

Website Users

When you are using our website, which may include when you download content or contact us via our website.

How we collect your data:

You may provide Personal Data by completing online registration forms, subscribing to our newsletters, by applying for roles via our website, or when you create or update any of your marketing preferences; or

We may collect your data automatically via cookies, in line with cookie consent, server logs and other similar technologies preferences and settings in your browser.

What data we collect:

We collect the information you provide, which may include your name and contact details, email address and telephone number, and/or the resume/CV you submit to us online.

In addition, we collect a limited amount of data which we use to help us to improve your experience when using our website and to help us manage the services we provide. This includes information on how you use our website, how you navigate to our web site, the device you view our website on, and the location you view our website from (IP address).

We may collect your name, contact details, and your preferred means of communication. We may also collect your responses to survey and assessment questions.

In the course of our recruitment services, we may collect the following types of information about you as a potential candidate: name, address, telephone number, email address, resume information (employment history, education, professional credentials, memberships in professional organizations, skills, certifications, etc.), citizenship, information from former employers and other references, and additional information to the extent we have acquired or you have provided us with such information. We also use photos of you that you provide to us or that you make publicly available on the Internet (e.g., LinkedIn). As permitted by applicable laws, we may also obtain background verification information.

Where permitted by law, we may collect compensation and benefits information about you to consult with you or our clients on rewards and benefits.

Linked Websites

The Colossus website may contain links to third-party websites not controlled by Colossus Technology Group and therefore not covered by this privacy notice. Any information that you submit, post, or otherwise reveal on these third- party sites is governed by the privacy notice of those sites. We recommend that you review the terms and conditions of use and privacy policies in place on such third-party websites.

How We Use Your Personal Data

Colossus Technology Group uses the Personal Data it collects in several ways. We collect, process, or disclose your personal data for our legitimate business purposes including:

To provide our services to clients, candidates, or web users or to fulfill our contractual obligations

To maintain our business relationships

To provide candidates with HR related support and services

To market events, promotions, competitions, webinars, reports, our services, news or relevant industry updates.

To perform business development-related research, benchmarking, validation and trend analyses

To develop new products, services, and offerings, or to enhance, improve or modify our products and services

To respond to your inquiries, to verify your information, or to share information with you

To send you important administrative information

For other business purposes, including:

Law enforcement and regulatory audits,

Business Analytics such as determining the effectiveness of our promotional activities

Managing our contractual relationships

In the course of providing staffing and managed services, we may use Personal Data that we have collected to create a profile about you. This profile may be used to identify professional opportunities that we think may be of interest to you. We may use your Personal Data to send you information or marketing materials. Colossus Technology Group sends informational emails, articles, white papers, proposals, engagement letters, and information regarding our services. We may also use your personal data to conduct surveys.

Third-Party Data Access

We will not sell or rent to anyone the Personal Data provided to us or obtained by us.

In certain circumstances we will share your Personal Data with other parties such as

When we are matching candidates to a client

Trusted third parties or strategic partners who provide employment related services for us, including IT payroll and benefits, reference, qualification, and criminal background checking (where required), evaluation or skills tests

Website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users

Professional advisers acting as processors or delivering marketing and advertising services

Service providers acting as processors who provide IT and system payroll administration services, including ADP.

We require all third parties to respect the security of your Personal Data and to treat it in accordance with applicable laws. We do not allow our third-party service providers to use your Personal Data for their own purposes and only permit them to process your Personal Data for specified purposes and in accordance with our instructions.

Third-Party Payment Processing

Colossus Technology Group utilizes a third-party payment processing service to allow our valued customers to make payments online. Payment processors operate securely and independently under their own Privacy Policy.

Please note that Colossus Technology Group does not store or have access to candidate or client credit card information, or any other sensitive payment data. Our systems are designed so that this type of information is processed securely by our third-party payment processor.

Contact and Inquiries

If you have any questions or concerns about our third-party payment processing practices, please do not hesitate to contact us info@colossustg.com.

We are committed to ensuring that your experience with Colossus Technology Group is secure and transparent.

Data Retention

Colossus is a new company. Where we collect your Personal Data, the length of time for which we retain it depends on the type of data, the purpose for which we use that data and our accounting, regulatory, and legal data retention obligations. We do not retain Personal data in an identifiable format for longer than:

The period necessary for the relevant activity or services;

Any retention period that is required by law or contract; or

The period in which litigation or investigations might arise in respect of the relevant activity or services after which, it is likely your Personal Data will no longer be relevant for the purposes for which it was collected, and we will delete or destroy it.

In some circumstances we may anonymize your Personal Data (so that it can no longer be associated with you) for research, marketing or statistical purposes in which case we may use this information indefinitely without further notice to you.

Your Choices

Providing us with your Personal Data is voluntary, although if you do not provide certain Personal Data you may not be able to participate in our services.

ask questions about how we handle your personal information,

withdraw your consent to our use of your personal information,

object to our use of your personal information for our legitimate business interests, or

request an electronic copy of your personal information for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law),

request to review, correct, update, suppress or restrict the use of your personal information,

review, correct, update, suppress or restrict the use of your personal information, please include all relevant information, including email addresses as well as the names of any Colossus Technology Group or related websites, products, or services you may have accessed in your communications with us. Although we strive to maintain accurate Personal Data, if it is determined the Personal Data is not accurate, we will work quickly to correct it.

Information we require when you make a privacy rights request:

When contacting us about a privacy rights request, please include your name, email address and the dates of your engagement with us, if known. Colossus Technology Group will only use this information to respond to your request. Please note that most Colossus Technology Group does not meet the applicability requirements of most privacy law due to our small size but will make reasonable efforts to locate and respond.

If you would like to opt-out of receiving marketing communications from us, please contact us at info@colossustg.com to have your contact information removed from our marketing databases or unsubscribe at any time from any HTML formatted marketing email you receive.

If you request to have your information removed from our marketing databases through an email request, please include "Remove User" in the subject line of the email, and include your full name, email address, and telephone number in the body of the email message.

You can also forward a copy of the email or marketing communications from which you want to opt out.

We will respond to your request consistent with applicable law. We may decline to process requests that in our reasonable opinion may jeopardize the privacy of others or put our intellectual property at risk.

For your protection, we may only implement requests with respect to the personal data associated with the email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will comply with your request as soon as reasonably practical and may need to contact you to be sure that we understand your request.

We also may need to retain certain Personal Data about you such as your email address to honor opt-out or similar requests. Please keep in mind that this residual personal information will remain within Colossus Technology Group databases, access logs, and other records, which may or may not contain identifiable Personal Data about you. The residual Personal Data will not be used for commercial purposes. However, Colossus Technology Group reserves the right, from time to time, to recontact former users of its Services as appropriate.

Consent and Changes to Privacy Policy

By using this website, you acknowledge and consent to the privacy practices described in this privacy notice, including the collection and use of your personal information as described herein. Colossus Technology Group may change this privacy notice from time to time due to changes in relevant law or TRU's business practices. If we decide to make changes to this privacy notice, we will post the changes on this website, and your continued usage after such changes are posted constitutes acceptance of each revised privacy notice.