Labo
  • Home
  • Candidates
  • Company
  • How to refer
Log inJoin
  • Home
  • Candidates
  • Company
  • How to refer
Log inJoin
Privacy · Labo

Privacy policy.

At Labo, we collect personal data from professionals who join our network, and from referrers who introduce them. This page explains in plain language what we collect, why, how we use it, and how you can control it.

Labo, represented by Baudoin de Carné and Laura Abou Khalil, is the data controller. You can reach us at contact@joinlabo.com for any question relating to your personal data.

When you sign up via /join as a candidate, we collect:

  • Your full name
  • Your email address
  • Your phone number
  • Your LinkedIn URL
  • Your current role and company
  • Your career stage targeting (Seed, Series A/B/C+)
  • A short message about your career intentions

When someone in our network submits a profile to Labo, we collect:

  • The candidate's name, email address, and LinkedIn URL
  • Their current role, company, and seniority
  • Why the referrer thinks they're a strong fit
  • Optionally, a CV in PDF format
  • The referrer's own name and email
  • The referrer's consent to inform the candidate of this introduction

CVs are stored in a private, encrypted bucket. They are never publicly accessible and are only viewable by Labo and by the person who submitted them. We only ask for professional information — if your CV contains a photo, date of birth, home address, or nationality, you can ask us to replace it with a redacted version at any time.

When we speak with a candidate, we also record structured interview notes to keep track of the conversation and avoid asking the same questions twice. You can request access to these notes at any time.

Our purpose is simple: matching exceptional Sales / GTM / Revenue talent with the right companies, at the right moment. We use the data to:

  • Maintain a curated pool of candidates and referrals
  • Reach out when a relevant opportunity arises
  • Share profiles with prospective employer companies, only with the candidate's explicit prior consent

We do not sell data. We do not use it for advertising. We do not enrich it with third-party sources without your knowledge.

Under the GDPR, every use of personal data must rest on a legal basis. Here are ours:

  • For our candidate and referral network (keeping a curated pool, reaching out about relevant opportunities): our legitimate interest (Article 6.1.f) in connecting talented professionals with the right companies. We only keep the information necessary for this purpose, and you can object or request deletion at any time.
  • For sharing your profile with a prospective employer: your explicit consent (Article 6.1.a), which we request separately for each opportunity. You can refuse, and you can withdraw a consent already given at any time.
  • For people introduced through a referral: our legitimate interest (Article 6.1.f) in growing a trusted network, with strong safeguards — we inform you, and you can decline or have your data deleted before we take any action (see the dedicated section below).
  • For companies submitting a brief: our legitimate interest in operating our recruitment service and responding to your request.

Where we rely on legitimate interest, you have the right to object. Where we rely on consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.

We keep your data for two (2) years after your last active contact with us. After this period, we delete or fully anonymize it. You can ask for earlier deletion at any time.

Within Labo, your data is accessible to:

  • The founders (Baudoin de Carné, Laura Abou Khalil)
  • Internal collaborators and freelancers bound by confidentiality agreements

Outside Labo, we never share your profile with a prospective employer without your explicit prior consent. For each opportunity, we ask you first: “Can we share your profile with [Company X]?”. If you say no, your profile stays internal.

Technical service providers we use:

  • Supabase (database hosting, AWS Frankfurt, EU)
  • Vercel (website hosting, US-based provider with EU compliance)
  • Notion (internal operations, US-based provider with EU compliance)

These providers process data on our behalf and are contractually bound to GDPR-grade security standards.

Some of our providers (Vercel, Notion, Supabase) are headquartered outside the EU. They operate under GDPR-compliant Standard Contractual Clauses and similar safeguards. Personal data of EU residents is stored in EU data centers wherever possible (AWS Frankfurt for the database).

Sometimes, a friend, former colleague, or a recruiting partner in our network introduces you to Labo. If this is the case for you, you will receive an email from us introducing ourselves and giving you a chance to decline, modify, or fully delete your data before we take any action on it. This email is sent automatically when your profile enters our network, and only once.

If you believe you have been referred without your knowledge, write to contact@joinlabo.com. We will delete your data within 7 days of your request.

You have the right to:

  • Access the data we hold about you
  • Correct any inaccurate or incomplete information
  • Request deletion (“right to be forgotten”)
  • Object to processing
  • Receive your data in a portable format
  • Restrict processing (ask us to pause the use of your data while a request is being resolved) — Article 18
  • Withdraw your consent at any time, where our use of your data is based on consent, without affecting what was done before
  • File a complaint with the CNIL (cnil.fr) if you believe your rights have been violated

To exercise any of these rights, write to contact@joinlabo.com. We respond within 30 days.

This site does not currently use analytics cookies, tracking cookies, or advertising cookies. We may add a privacy-friendly analytics tool (Plausible, Fathom) in the future — if so, this page will be updated and you will be informed.

We will update this page whenever our practices change. The “last updated” date below always reflects the most recent version.

Last updated: 9 September 2026.

© 2026 Labo. Currently in registration.
Legal noticesPrivacy policy