Privacy Counsel

We are looking for a Privacy Counsel (Commerce) to join our Privacy — Africa & International team. This is a mid-level in-house role for a qualified legal and privacy practitioner with strong data protection experience, ideally gained within a bank, financial institution, regulated payment services provider, fintech, or similarly regulated environment. The role is designed for someone who can apply that experience in a fast-moving, multi-vertical technology business.Location: Tallinn, Estonia

About the role

As Privacy Counsel, you will focus on Bolt’s Commerce and payments-related activities, including privacy governance, data sharing, contracting, product support, vendor and partner arrangements, and regulatory-facing data protection work. You will work closely with the Senior Privacy Counsel and collaborate with Legal, Compliance, Risk, InfoSec, Product, and business stakeholders across the organisation. Beyond Commerce, you may also support other verticals, projects, and headquarters functions as business needs evolve, offering broad exposure across one of the EU’s most diverse and operationally complex privacy portfolios.

Main tasks and responsibilities:

Act as lead privacy counsel for Bolt’s Commerce function, advising on products, payments activities, and partner arrangements
Provide practical, risk-calibrated privacy advice across Product, Legal, Compliance, Risk, InfoSec, and business stakeholders
Draft, review, and negotiate data protection documentation, including DPAs, data sharing, intragroup, and international transfer agreements
Support privacy in regulated and payments environments, including third-party risk, outsourcing, ICT governance, and data governance
Advise on user journeys, customer-facing privacy materials, consent mechanisms, and data subject rights processes
Monitor legal developments and support privacy governance, our DPO’s activities, and broader privacy initiatives across the business
Main tasks and responsibilities:

About you:

You are a qualified lawyer with proven experience in privacy, data protection, technology law, or financial services regulation, ideally within a regulated environment (e.g. bank, fintech, or payments provider)
You have a strong working knowledge of GDPR and can independently analyse and apply EU data protection law in complex, real-world scenarios
You have experience advising on privacy matters across multi-stakeholder environments, including vendors, partners, systems, and data flows
You have hands-on experience drafting and negotiating data protection agreements, including DPAs, data sharing, intragroup, and international transfer documentation
You understand privacy considerations in payments, outsourcing, ICT governance, vendor management, and regulated digital services, with familiarity with frameworks such as DORA or PSD2/PSD3
You take a practical, commercially aware, and solutions-oriented approach, with strong communication skills, the ability to work independently in fast-paced environments, and interest in areas such as product launches, privacy-by-design, regulatory engagement, and AI-enabled legal operations
At Bolt, using AI daily is a baseline expectation for everyone. If there’s a faster, smarter way to do your work, we expect you to find it. You’re still responsible for the output, so the standard stays high when using AI tools. Experience is valuable, but what we really look for is drive, intelligence, and integrity — so if you don’t tick every box, apply anyway.
About you:

Apply now and join us to make cities for people, not cars.

Upload your CV
Drop files here to uploador choose from your device
Supported formats: .pdf, .docx (max. file size 5MB)
By responding, you consent to Bolt processing your disability data in accordance with our Privacy Notice.
Continue to survey

Fill in our Demographic Survey

Please help Bolt’s diversity and inclusion efforts by completing our voluntary demographic survey.
Question 1/5
Your answers are anonymous and not linked to your application. By responding, you consent to Bolt processing your demographic data in accordance with our Privacy Notice.
AI Disclaimer: We use Greenhouse's AI-powered Talent Matching tool to compare your application against our job requirements.

Become part of our Legal, Risk & Privacy team

*Some perks may differ depending on your location.

Why you’ll love it here:

The legal, Risk, and Privacy teams work with all functions to ensure Bolt complies with laws and operates with integrity. Our Legal team handles everything from local legislation and data protection to supporting expansion, product launches, and regulatory compliance.
Play a direct role in shaping the future of mobility. Impact millions of customers and partners in 600+ cities across 50+ countries. Work in fast-moving autonomous teams with some of the smartest people in the world. Accelerate your professional growth with unique career opportunities.
Get a rewarding salary and stock option package that lets you focus on doing your best work. Enjoy the flexibility of working in a hybrid mode with a minimum of 2 days in the office each week to foster strong connections and teamwork. Take care of your physical and mental health with our wellness perks.

About us

With over 200 million customers in 50+ countries, Bolt is one of the fastest-growing tech companies in Europe and Africa. And it's all thanks to our people.
We believe in creating an inclusive environment where everyone is welcome, regardless of race, colour, religion, gender identity, sexual orientation, age, or disability.
Our ultimate goal is to make cities for people, not cars, and we need your help to achieve this mission!
Bolt office building