This policy explains how yournextjob (yournextjob.co.uk) handles your personal data. Please read it alongside our cookie policy and our terms of use. If anything here is unclear, get in touch and we will explain it plainly.
Who we are and how to reach us
yournextjob is a free job-advertising platform for the United Kingdom. We list vacancies posted by employers and gathered from other sources so that people can find and apply for work across every sector.
For the personal data described in this policy, the data controller is [Registered company name], a company registered in England and Wales under company number [Company number], with its registered office at [Registered office address]. We are registered with the Information Commissioner's Office (ICO) under registration number [ICO registration number].
We are a listings platform. We are not an employment agency, an employment business, or the employer for any role advertised on the site. When you apply for a job, the employer becomes an independent controller for your application, and their own privacy notice applies to how they use it. Employers are responsible for meeting their obligations under the Conduct of Employment Agencies and Employment Businesses Regulations 2003 and the UK GDPR.
You can reach us about anything to do with your data, including data-protection questions and requests, at hello@yournextjob.co.uk. We handle personal data in line with the UK GDPR and the Data Protection Act 2018.
What data we collect and why
We only collect the data we need to run the service. Depending on how you use the site, that can include:
- Account details: your name, email address, an optional phone number, your role (jobseeker or employer), and a hashed password. We never store your password in plain text.
- Jobseeker profile: the details you choose to add, such as your headline, job title, skills, location, availability, desired salary and any CV you upload.
- CV and job applications: when you apply for a role we collect your name, email, phone number, CV and any cover note or screening answers you provide, plus the status of the application.
- Talent profile (opt-in): if you make your profile visible, the profile details you have chosen to share so employers can find you. See the talent database below.
- Messages: the content of messages you send and receive through the platform, between jobseekers and employers.
- Employer and company details: for advertisers, the company name, website, logo, contact details, wallet and billing records, and the content of the vacancies you post.
- Payment records: if an employer tops up their wallet or buys sponsored promotion, our payment processor handles the card details. We receive a record of the transaction but never your full card number.
- Job alert emails: the email address and search preferences (keywords, location, category) you give us so we can send you matching roles.
- Swipe and usage activity: when you use swipe to apply, we record which jobs you applied to, skipped or saved so the feed does not show you the same card twice. If you are not signed in, we use a random device identifier stored in a cookie rather than your name.
- Technical and log data: a small amount of technical data, including your IP address and basic request information, kept to keep the site secure and to rate-limit abuse.
We do not use advertising or tracking cookies, we do not run analytics that profile you, and our fonts are self-hosted so no third-party font network sees your visit. Full detail is in our cookie policy.
Your CV and job applications
Your CV is one of the most sensitive things you share with us, so we treat it carefully. When you upload a CV it is stored so you can reuse it across applications. We may read the text of your CV to help pre-fill an application and to suggest relevant roles, but this is to help you, not to make decisions about you.
When you apply for a job, we pass your application, which includes your name, contact details, CV and any cover note, to the specific employer or advertiser whose role you applied to. That is the point of applying, and it only happens for the roles you choose. We do not make your CV publicly searchable, and we do not sell it or share it with employers you did not apply to, except through the opt-in talent database described below. You can update or remove your CV at any time from your account, and you can ask us to delete your data entirely.
The talent database (opt-in)
The talent database lets employers search for candidates and reach out about roles. It is off by default and only works if you turn it on by making your profile visible.
- While your profile is visible, employers searching the database can see your headline, skills, location, availability and CV details, so they can decide whether to contact you.
- Your direct contact details (email and phone) are not shown up front. They are only revealed to an employer if and when you reply to a message they send you. If you do not reply, your contact details stay private.
- You can make your profile invisible again at any time from your account, which removes you from new searches.
We rely on your consent for including your profile in the talent database, and you can withdraw it at any time by turning visibility off. More detail is in the jobseeker terms.
Our lawful bases for using your data
Under the UK GDPR we must have a lawful basis for each use of your data. Ours are:
- Contract: to provide the service you asked for, such as running your account, storing your profile, passing your application to an employer, and running an employer's adverts and wallet.
- Consent: for marketing emails, job alerts, and including your profile in the opt-in talent database. You give this when you opt in, and you can withdraw it at any time, for example with the unsubscribe link in any alert email or by turning your profile off.
- Legitimate interests: to keep the site secure, prevent fraud and abuse, moderate listings, take payment for sponsored promotion, and keep minimal logs. We balance this against your rights and only keep what we need. You can object to processing based on legitimate interests.
- Legal obligation: to keep records we are required to keep, such as for accounting and tax, and to respond to lawful requests.
How we use your data
We use your data to run and improve the service, in particular to:
- create and manage your account, and keep you signed in;
- show you relevant jobs, power search and swipe to apply, and send job alerts you asked for;
- pass your applications to the employers whose roles you apply to, and carry messages between you and them;
- let opted-in candidates be found in the talent database, and let employers manage applicants and campaigns;
- take and record payment for employer wallet top-ups and sponsored promotion;
- keep the site secure, prevent and investigate fraud and abuse, and moderate content;
- respond to your enquiries and support requests, and meet our legal obligations.
Who we share your data with
We do not sell your personal data, and we do not share it for advertising. We share it only in these ways:
- Employers you apply to. When you apply for a role, your application goes to that specific employer or advertiser, so they can consider you and get in touch. They then control that data as an independent controller.
- Employers who find you in the talent database. If you have opted in by making your profile visible, employers searching the database can see your profile. Your contact details are only shared with an employer once you reply to their message.
- Our service providers (processors). We use a small number of trusted providers to run the site, including hosting, email delivery and payment processing. They only receive the data they need, act on our instructions, and are bound by contracts that require them to protect it. Our payment processor handles card details directly, so we never see or store your full card number.
- Where the law requires it. We may disclose data to comply with the law, respond to lawful requests, enforce our terms, or protect the site and its users from fraud, abuse or harm.
- Business transfers. If the business is reorganised, sold or transferred, data may pass to the new operator, who must continue to protect it under this policy.
How long we keep your data
- Accounts and profiles: kept while your account is active. If your account is inactive for an extended period, we may delete it after telling you. You can ask us to delete it at any time.
- Job applications and CVs: kept while your account is active and for a reasonable period after an application so it can be processed, then deleted. You can remove your CV yourself at any time. Once an employer receives your application, they keep it under their own retention rules.
- Messages: kept while your account is active so your conversations stay available, and cleared when you delete your account.
- Job alerts: kept until you unsubscribe, which you can do from any alert email.
- Swipe and usage activity: kept so the feed stays useful to you, and cleared when you delete your account.
- Employer wallet and payment records: kept as long as we need them for accounting and tax, typically at least six years, as required by law.
- Server and security logs: kept only as long as needed for security and abuse prevention, then deleted or anonymised.
You can ask us to delete your data at any time, and we will do so unless we have a legal reason to keep it.
International transfers
Your data is stored and processed in the UK or the European Economic Area wherever we can. Some of our service providers may process data outside these areas. Where that happens, we rely on the safeguards allowed under UK data protection law, such as approved standard contractual clauses and adequacy decisions, so your data keeps an equivalent level of protection.
Automated decisions and matching
We use matching to suggest jobs that may suit you and to help employers find relevant candidates. This is assistive only. It helps surface roles and profiles, but it does not make a decision that has a legal or similarly significant effect on you, and it never automatically rejects you from a job. The decision to shortlist, interview, offer or hire is always made by a person at the employer. We do not carry out profiling that produces legal effects, and we do not sell profiling data.
Cookies
We use only essential first-party cookies and storage, such as the cookie that keeps you signed in, the token that protects forms against cross-site request forgery, a referral attribution cookie, the flag that remembers you have seen our cookie notice, and a device identifier used by swipe to apply. We do not set advertising, analytics or tracking cookies, and we do not set third-party cookies of our own. Full details, including names and expiry, are in our cookie policy.
How we keep your data secure
We take reasonable technical and organisational measures to protect your data. These include hashing passwords, serving the site over HTTPS, protecting forms against cross-site request forgery, rate-limiting to block abuse, scoping access so people only see the data they are entitled to, and limiting who can access personal data. No online service can be completely secure, but we work to keep the risk low.
Your rights
Under the UK GDPR you have the right to:
- Access the personal data we hold about you;
- Rectification: have inaccurate or incomplete data corrected;
- Erasure: have your data deleted where there is no good reason for us to keep it;
- Restriction: ask us to limit how we use your data in certain cases;
- Portability: receive the data you gave us in a portable, machine-readable format;
- Object to processing based on our legitimate interests, and to direct marketing at any time;
- Withdraw consent, where we rely on it, at any time, without affecting processing already carried out.
To exercise any of these, email hello@yournextjob.co.uk or use our contact page. We will respond within one month, and there is normally no charge. We may ask you to confirm your identity so we do not disclose your data to the wrong person.
Children
yournextjob is intended for people who are legally able to work in the UK, and it is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has given us their data, please contact us and we will remove it.
Changes to this policy
We may update this policy from time to time. When we do, we will change the "last updated" date at the top of the page. If a change is significant we will make it clear on the site.
How to complain
If you have a concern about how we handle your data, please contact us first at hello@yournextjob.co.uk so we can try to put it right. You also have the right to complain to the ICO, the UK regulator for data protection, at ico.org.uk, or by calling their helpline. We would appreciate the chance to resolve it with you first.
Contact us
For anything to do with your privacy or this policy, email hello@yournextjob.co.uk or use our contact page. yournextjob is operated by [Registered company name], company number [Company number], registered office [Registered office address].