Privacy Policy

Jobs and Careers Ltd ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use the Jobs and Careers platform, and describes your rights under applicable data protection law — including the UK General Data Protection Regulation ("UK GDPR"), the EU General Data Protection Regulation ("EU GDPR"), and applicable US state privacy laws including the California Consumer Privacy Act ("CCPA").

Please read this policy carefully. If you do not agree with any part of this policy, you should not use our services.

1. Who We Are

Jobs and Careers Ltd is the data controller responsible for your personal data. We are a company registered in England and Wales. Our registered address and full company details are available on request.

For any data protection queries, please contact our Data Protection Officer (DPO) at: privacy@jobsandcareers.co.

We are registered with the Information Commissioner's Office (ICO) under the UK Data Protection Act 2018.

2. What Data We Collect

Depending on how you use Jobs and Careers, we may collect:

Profile and Account Data

Your name, email address, password (stored hashed), phone number, location, professional title, biography, work history, educational history, skills, and preferences. This is data you provide directly when registering and building your profile.

CV / Résumé Data

Documents you upload (CV, cover letters, portfolios) and structured information extracted from them. This data is used for job matching and kit generation.

Identity Verification Data

If you choose to verify your identity (required for certain Trust Score levels), we collect government-issued identity document images and biometric data via our third-party verification provider. This data is processed under your explicit consent and is subject to special category data protections under UK/EU GDPR. Full details are provided at the point of verification.

Usage and Technical Data

IP address, browser type and version, operating system, referring URL, pages visited, time spent on pages, click events, and other diagnostic data. We collect this data through cookies and server logs.

Communications Data

Messages sent through our platform between candidates and employers, support queries, and your responses to surveys and feedback requests.

Payment and Billing Data

If you subscribe to a paid plan, payment is processed by Stripe. Jobs and Careers does not store full payment card details. We retain billing history, invoice records, and subscription status.

3. Why We Collect It (Legal Bases)

We process your personal data on the following legal bases:

• Contract performance: To provide you with the services you've registered for, including job matching, kit generation, and employer-candidate messaging.
• Legitimate interests: For platform security, fraud prevention, product analytics, and improving our services. We have conducted legitimate interest assessments (LIAs) for these purposes, which are available on request.
• Legal obligation: To comply with applicable law, including tax record-keeping, AML checks where required, and responding to lawful government requests.
• Consent: For identity verification data (special category data), marketing communications, and non-essential cookies. You may withdraw consent at any time without affecting lawfulness of prior processing.

4. How We Use Your Data

• Job matching: Matching your profile against live job listings based on skills, experience, preferences, and location.
• Kit generation: Enabling JAC to generate personalised application materials including company research, cover letters, and interview preparation.
• Notifications: Sending you relevant job alerts, application status updates, and platform communications.
• Analytics: Understanding how the platform is used to improve features and fix issues.
• Trust scoring: Calculating and displaying your verification and trust score to prospective employers who you apply to.
• Compliance and safety: Detecting and preventing fraud, abuse, and prohibited uses.

5. Who We Share Your Data With

We share your personal data only in the following circumstances:

Employers You Apply To

When you apply to a job on Jobs and Careers, your profile information (as configured by you), CV, application materials, and Trust Score are shared with the employer. You control which elements of your profile are visible before applying.

Verification Service Providers

Identity verification is performed by accredited third-party providers. These providers process your data as data processors under our instruction, governed by data processing agreements.

Payment Processors

Stripe processes payments on our behalf and is subject to its own privacy policy. Jobs and Careers shares only the minimum data required for payment processing.

Infrastructure and Analytics Providers

We use cloud infrastructure providers (including Supabase, Vercel) and analytics services. All providers are contractually bound as data processors under appropriate data processing agreements.

Legal Requirements

We may disclose your data to law enforcement or regulatory authorities where required by applicable law, court order, or to protect the safety of our users or the public.

We do not sell your personal data to third parties.

6. Data Retention

• Account data: Retained for as long as your account is active. Upon account deletion, personal data is deleted within 30 days, except where retention is required by law.
• Identity verification data: Retained for 2 years from verification date, after which it is permanently deleted.
• Server and access logs: Retained for 90 days.
• Billing records: Retained for 7 years for tax and legal compliance purposes.
• Communications: Messages between candidates and employers are retained for 2 years or until account deletion, whichever is earlier.

7. Your Rights

Depending on your location, you have the following rights:

UK GDPR and EU GDPR Rights

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete data.
• Right to erasure: You may request deletion of your personal data ("right to be forgotten") subject to legal retention requirements.
• Right to data portability: You may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests.
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
• Rights related to automated decision-making: You have the right not to be subject to solely automated decisions that produce significant legal or similarly significant effects.

To exercise these rights, submit a Data Subject Access Request (DSAR) to privacy@jobsandcareers.co. We will respond within 30 calendar days. See our GDPR & Data Rights page for full instructions.

UK users have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. EU users may contact their relevant national supervisory authority.

California (CCPA/CPRA) Rights

• Right to know: What categories and specific pieces of personal information we collect, use, and disclose.
• Right to delete: Request deletion of your personal information (subject to exceptions).
• Right to opt-out of sale: Jobs and Careers does not sell personal information. We do not share personal information for cross-context behavioural advertising.
• Right to non-discrimination: You will not be discriminated against for exercising your CCPA rights.

8. Cookies

We use cookies and similar tracking technologies on our platform. Cookies are small files stored on your device that help us provide and improve our service.

• Essential cookies: Required for authentication, session management, and core platform functionality. Cannot be disabled.
• Functional cookies: Remember your preferences (e.g., job alert settings, display preferences).
• Analytics cookies: Collect anonymised usage data to help us improve the platform (e.g., page views, feature usage).

You may manage your cookie preferences via our Cookie Policy page or by adjusting your browser settings. Note that disabling essential cookies will prevent you from using the platform.

9. International Transfers

Jobs and Careers is based in the United Kingdom. Some of our service providers are located in countries outside the UK and EEA, including the United States.

Where we transfer personal data outside the UK to non-adequate countries, we ensure appropriate safeguards are in place through:

• UK International Data Transfer Agreements (IDTAs) for transfers from the UK to non-adequate countries.
• EU Standard Contractual Clauses (SCCs) for transfers from the EEA to non-adequate countries, including the United States.
• Adequacy decisions where available (e.g., EEA-to-UK transfers are covered by the UK's adequacy decision).

10. Contact Us

For any privacy-related questions, data subject requests, or complaints, please contact:

This privacy policy was last updated in April 2026. We may update this policy from time to time. Material changes will be communicated to registered users via email and a notice on the platform.