Privacy Policy

This Privacy Policy applies when you visit or use JobLocate, create a Candidate or Employer account, publish a profile or Job Ad, build or upload a CV, apply for a role, save a job, create an alert, communicate about recruitment or contact us.

It should be read with our Terms of Service and our Cookie Information. It does not replace an Employer's own recruitment privacy notice, employee privacy notice or other information that an Employer is legally required to give you.

In this Policy, a Candidate is a person seeking work, and an Employer is a person or organisation posting roles, searching for candidates or managing applicants.

JobLocate is the controller of personal information used to create and operate JobLocate accounts, provide the platform, secure the service, send JobLocate notifications and manage support requests. You can contact JobLocate through the Contact page.

An Employer is normally a separate controller for Candidate information it receives through an application, direct message, interview or candidate-search feature. The Employer decides its recruitment purposes, retention period and hiring process. Questions about an Employer's use of your application should be directed to that Employer as well as, where relevant, JobLocate.

Service providers that process information only on JobLocate's instructions act as processors. Some providers may also process limited information as independent controllers for matters such as account security, fraud prevention or their own legal obligations.

Depending on how you use JobLocate, we may collect:

• Account and identity information: name, email address, account ID, login method, password credentials held by our authentication provider, account type, sign-in dates and account-security information.
• Candidate profile information: preferred role, location, industry, work preferences, availability, years of experience, skills, languages, salary or rate preferences, profile summary and profile visibility.
• CV and career information: phone number, postcode, links, work history, education, qualifications, certifications, credentials, portfolio information, additional information and uploaded CV files.
• Application information: the role applied for, CV selection, cover note, answers to Employer questions, highlighted experience, application date, status and Employer responses.
• Employer and business information: contact name, company name, company profile, website, location, industry, company size, Job Ads, screening questions and applicant-management activity.
• Recruitment communications: messages, interview details, scheduling information, notes, status updates and notification preferences.
• Search and preference information: saved jobs, job alerts, keywords, locations, frequency choices and account settings.
• Support and safety information: messages sent to JobLocate, reports, complaints, evidence supplied with a report and our response.
• Technical and activity information: IP address and request information made available by hosting or security providers, browser and device information, timestamps, session information, pages or jobs viewed, application events, diagnostic information and security logs.
• Transaction information: if paid Employer services are introduced, purchase, invoice, plan, refund and payment-status information. Full card details would normally be collected directly by the payment provider rather than JobLocate.

We collect information:

• directly from you when you register, edit a profile, upload a CV, post a role, apply, communicate, create an alert or contact us;
• from another user when an Employer updates an application, sends a message or schedules an interview, or when a Candidate sends an application or message;
• from an authentication provider, such as Google, where social sign-in is enabled and you choose to use it;
• automatically from your browser, device and use of JobLocate, including essential session and security information;
• from service providers that help us host, secure, store, authenticate, monitor or send communications for the platform; and
• where legally permitted, from authorities, advisers or other parties involved in investigating misuse, fraud, security incidents or legal claims.

We do not currently obtain Candidate profiles by scraping third-party sites or buy lists of Candidate personal information.

We use personal information for the following purposes and lawful bases:

• Providing the service and taking steps at your request: creating and securing accounts, saving profiles and CVs, publishing Job Ads, transmitting applications, showing application statuses, providing messages, scheduling tools, alerts and account settings. We generally rely on performance of our contract with you or steps taken at your request.
• Operating and improving JobLocate: maintaining the platform, understanding feature use, fixing errors, developing relevant functionality and measuring job-page and application activity. We generally rely on our legitimate interests in running and improving a useful recruitment platform.
• Safety, security and fraud prevention: authenticating users, controlling access, detecting fake accounts or Job Ads, investigating reports, enforcing our Terms and protecting users. We rely on legitimate interests and, where applicable, legal obligations.
• Communications: sending service emails, security messages, application or interview updates, Employer notifications and responses to support requests. We rely on our contract, legitimate interests or legal obligations depending on the message.
• Optional marketing: sending promotional communications only where permitted, normally with consent or another lawful basis available under electronic-marketing rules. You can unsubscribe at any time.
• Legal and regulatory matters: keeping required records, responding to lawful requests, protecting legal rights and establishing, exercising or defending claims. We rely on legal obligations and legitimate interests.
• Business administration: billing, accounting, service-provider management, audits, restructuring or a sale of the business. We rely on contract, legal obligations and legitimate interests.

Where we rely on legitimate interests, we consider the purpose, necessity and effect on your rights before using the information.

Candidates can choose whether their JobLocate profile is public where the visibility setting is available. A public profile may show details such as your name, preferred role, location, industry, summary, skills, availability and work preferences to Employers and visitors.

Private CV files, private contact details and application answers are not intended to appear on a public profile. Turning public visibility off prevents future public display, but it does not withdraw an application or erase information already shared directly with an Employer.

Think carefully before placing personal contact details, identification information, health information or other sensitive details in a public profile or CV. Search engines or other users may retain copies of information that was publicly available.

When you submit an application, you instruct JobLocate to make the relevant application information available to the Employer. Depending on the role, this may include your profile, contact information, CV, cover note, application answers and highlighted experience.

The Employer may review, download, record, contact you about and retain the application for its recruitment purposes. Once the Employer has received the information, it is responsible for its own processing and must comply with applicable data-protection and employment law.

Deleting your JobLocate account or changing profile visibility does not automatically delete copies already received or lawfully retained by an Employer. You may need to contact the Employer directly to exercise rights over those copies.

We use Employer contact, company and Job Ad information to verify and administer accounts, publish roles, manage applicants, send recruitment notifications, prevent misuse and provide support.

Employer profile and Job Ad information is generally intended to be public. Employers must not place unnecessary personal information in a public Job Ad and must have authority to provide company, recruiter and colleague information.

Employers must use Candidate information only for lawful recruitment and related record-keeping. JobLocate may review reports or access relevant records where reasonably necessary to investigate safety, fraud, discrimination, misuse or a breach of the Terms.

JobLocate may store recruitment messages, interview dates, meeting details, application statuses, notes and delivery records so that Candidates and Employers can manage the hiring process.

We use contact details and notification records to send account, application, interview and security emails. Email providers may process recipient, sender, subject, content, delivery, bounce and engagement information to deliver and protect those messages.

Users should not include unnecessary financial, identification, medical or other highly sensitive information in ordinary messages. JobLocate does not record calls or interviews unless a separate feature clearly tells participants and all required permissions have been obtained.

JobLocate and its providers use essential browser storage, cookies or similar technology for authentication, security, session continuity and requested account features. We may also use a temporary session key to count events such as a job view or submitted application without using it as a public profile identifier.

We do not currently use personal information for third-party behavioural advertising. If non-essential analytics, advertising or similar tools are introduced, we will provide clear information and request consent where required before those tools are used.

More information, including available controls and cookie durations, is provided in our Cookie Information.

JobLocate does not normally require special-category information or criminal-conviction information to create an account or use standard platform features. This includes information about health, disability, race or ethnicity, religion, trade-union membership, sexual orientation, biometric identification or criminal history.

An Employer must not request or process this information through JobLocate unless it has a valid legal reason, gives appropriate privacy information and applies the safeguards required by law. Candidates should avoid including such information unless it is genuinely relevant and they understand why it is requested.

Where JobLocate receives sensitive information in a support report, complaint or legal matter, we limit its use to what is necessary and rely on an applicable condition under data-protection law.

We may share personal information with:

• Candidates and Employers: where needed to publish a profile or Job Ad, submit an application, communicate or manage an interview.
• Supabase: for authentication, database services and private file storage.
• Vercel: for website hosting, delivery, request handling and platform security.
• Resend and email infrastructure providers: for service and recruitment-related email delivery.
• Google: where Google sign-in is enabled and you choose to use it.
• Future payment providers: where an Employer buys a paid service.
• Professional advisers and insurers: where reasonably necessary for legal, accounting, audit, insurance or risk-management purposes.
• Authorities and other parties: where required by law or reasonably necessary to protect rights, safety, security, investigate wrongdoing or respond to legal proceedings.
• A buyer, investor or successor: in connection with a genuine business reorganisation, financing, sale or transfer, subject to appropriate confidentiality and data-protection measures.

We do not sell Candidate or Employer personal information, and we do not permit service providers to use it for their unrelated marketing.

Some technology and email providers may process or store information outside the United Kingdom. Data-protection standards in another country may differ from those in the UK.

Where a transfer is restricted by UK data-protection law, JobLocate will rely on an applicable UK adequacy regulation or put appropriate safeguards in place, such as the UK International Data Transfer Agreement or the UK Addendum to approved contractual clauses, together with any assessment or additional protection required by law.

You can contact us for more information about the safeguards relevant to a particular transfer.

We retain personal information only for as long as reasonably necessary for the purpose collected, including providing the service, maintaining security, resolving disputes and meeting legal obligations. The period depends on the type of information and how the account is used.

• Accounts and profiles: generally while the account remains active and for a limited period after closure so that deletion, recovery, fraud prevention and legal requests can be handled.
• CV files and CV-builder information: until you remove them, close the account or they are no longer needed for the service, subject to temporary backups and legal holds.
• Applications and hiring communications: generally while needed for account history and recruitment, and normally no longer than 24 months after the relevant recruitment activity unless a user deletes them earlier or a longer period is required for a dispute, safeguarding or legal obligation.
• Job Ads and Employer records: while active and for a reasonable period afterwards for administration, reporting, fraud prevention and dispute handling.
• Security, support and notification records: for a period proportionate to the risk and purpose, normally between 12 and 24 months unless an incident or legal matter requires longer retention.
• Payment and tax records: if paid services are offered, for the period required by tax, accounting and financial law, which may be up to six years or longer where legally required.
• Backups: deleted information may remain in protected backups for a limited period before being overwritten and is not ordinarily restored except for disaster recovery, security or legal reasons.

We may retain anonymised or aggregated information that no longer identifies an individual.

JobLocate uses technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration or disclosure. These include authenticated access, role and ownership controls, private CV storage, time-limited file links where appropriate, provider access controls, secure hosting and monitoring.

No online service can guarantee complete security. You are responsible for using a strong password, protecting your login method and telling us promptly if you suspect unauthorised access. Do not send passwords or unnecessary identity documents through JobLocate messages.

JobLocate may use rules, filters, search ranking and profile or job attributes to display relevant roles, candidates, alerts and application information. We may also use automated checks to detect spam, duplicate content, suspicious activity or possible breaches of the Terms.

JobLocate does not currently make solely automated hiring decisions that produce legal or similarly significant effects. Employers remain responsible for screening, interview, offer and hiring decisions.

We do not currently use private CVs or applications to train a public artificial-intelligence model. If materially different automated or AI processing is introduced, this Policy and any required notice or choice will be updated before that processing begins.

Depending on the circumstances and applicable law, you may have the right to:

• ask for access to personal information and a copy of it;
• correct inaccurate or incomplete information;
• request deletion of information;
• restrict how information is used;
• object to processing based on legitimate interests or to direct marketing;
• receive certain information in a portable format;
• withdraw consent where processing relies on consent, without affecting earlier lawful processing; and
• challenge certain solely automated decisions and request human involvement where the law provides that right.

Some rights are limited and may not apply where information must be retained for security, legal obligations, claims or the rights of other people. We may ask for information needed to verify your identity and locate the relevant records.

You can update many profile and account details directly in Account Settings. Other requests can be submitted through the JobLocate Contact page. We aim to respond within the period required by law, normally one month after verifying a valid request, subject to any lawful extension.

Candidate accounts are not intended for children under 16. A person controlling an Employer account must be at least 18 and authorised to act for the Employer.

Users aged 16 or 17 should avoid publishing unnecessary contact or sensitive information and may wish to discuss public profile choices with a parent, guardian or trusted adult. Contact us if you believe an account has been created in breach of these age rules.

We may update this Policy to reflect changes to JobLocate, our providers or the law. The latest version and date will be published on this page. Where a change materially affects how existing personal information is used, we will provide an appropriate notice through the website, account or email before the change takes effect where required.

Privacy questions, rights requests and complaints can be submitted through the JobLocate Contact page. Include the email address connected to your account and enough detail for us to understand the request, but do not send passwords or unnecessary identification documents in the first message.

We will try to resolve privacy concerns directly. You also have the right to complain to the UK Information Commissioner's Office or, where applicable, another data-protection supervisory authority. Making a complaint does not affect any other legal rights available to you.