Data Rights & GDPR
You own your data. We are committed to honouring your rights under UK GDPR, EU GDPR, and applicable US state privacy laws — clearly and without friction.
Our Response Commitments
- • We acknowledge all requests within 72 hours
- • We respond in full within 30 days (extendable to 90 days for complex requests with notice)
- • All requests are free of charge unless manifestly unfounded or excessive
- • We verify your identity before releasing or deleting data
Your Rights
Right of Access (SAR)
You can request a copy of all personal data we hold about you. We will respond within 30 days.
Submit Access Request →Right to Rectification
If any data we hold about you is inaccurate or incomplete, you can request we correct it immediately.
Request Correction →Right to Erasure
You can request deletion of your account and all associated personal data ("right to be forgotten").
Request Deletion →Right to Portability
You can request your data in a structured, machine-readable format (JSON or CSV) for transfer to another service.
Request Data Export →Right to Object
You can object to processing of your data for direct marketing, profiling, or legitimate interests purposes.
Submit Objection →Right to Restrict Processing
You can request we restrict how we use your data while a dispute about accuracy or lawfulness is resolved.
Request Restriction →How to Submit a Request
Send an email to privacy@jobsandcareers.co with:
- The type of request (access, deletion, export, correction, objection, restriction)
- Your full name and the email address associated with your account
- A brief description of what data is involved (if specific)
We will verify your identity before acting on any request. Verification is typically done by confirming access to your registered email address. If we cannot verify your identity, we will explain why and what alternatives are available.
Automated Decisions and Profiling
Jobs and Careers uses automated processing (including AI-driven matching and kit generation) as described in our Privacy Policy. Under Article 22 of UK/EU GDPR, you have the right to:
- Not be subject to solely automated decisions that produce significant legal effects
- Request human review of any automated decision
- Express your point of view and contest the decision
Our matching scores and kit rankings are used as decision-support tools for you and employers — final decisions are always made by humans. If you believe an automated process has unfairly impacted you, contact us and we will conduct a human review within 14 days.
Data Retention
| Data type | Retention period | Basis |
|---|---|---|
| Account & profile data | Until account deletion | Contract performance |
| CV / resume uploads | Until account deletion or explicit removal | Contract performance |
| Identity verification data | 2 years from verification | Legal obligation |
| Application history | Until account deletion | Legitimate interest |
| Payment records | 7 years | Legal obligation (tax) |
| Security & access logs | 90 days | Legitimate interest |
| Analytics events | 24 months (aggregated after 12) | Legitimate interest |
Supervisory Authority
If you are located in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
If you are located in the EU, you may contact the supervisory authority in your member state. A full list is available at edpb.europa.eu.
If you are in California, you may contact the California Privacy Protection Agency (CPPA) or submit a complaint to the Attorney General's office.
Contact Our Data Protection Contact
Privacy enquiries: privacy@jobsandcareers.co
Jobs and Careers Ltd
We aim to respond to all privacy enquiries within 72 hours on business days.
Related documents: