Effective date: [DATE]. This policy explains how [COMPANY NAME] processes personal data, in line with the UK GDPR / EU GDPR and applicable data-protection law.
1. What we process
Candidates: identification and contact details, CV/profile information, work preferences, application and communication history. Employers/recruiters: business contact details and account information. Technical data: security and analytics logs.
2. Why we process it
To match candidates with published vacancies, manage the recruitment workflow, communicate about applications, and secure the platform. Legal bases: legitimate interest in recruitment (Art. 6(1)(f)), consent where you opt in (marketing, optional analytics), and contract performance for platform accounts.
3. Retention
Candidate records are kept while your profile is active and for up to 24 months after your last activity, unless you request deletion earlier.
4. Your rights
You can request access, correction, deletion, restriction or portability of your data, and object to processing. Candidates can request deletion at any time from their profile or by writing to [COMPANY EMAIL].
5. Security
We protect data with access controls, encrypted transport (HTTPS), password hashing and audit logging.
6. Contact
Data-protection requests: [COMPANY EMAIL].