Privacy notice

Status: alpha. This page describes the current product honestly. The exact retention periods, transfer inventory and lawful basis assessments are tracked in our internal records and may change before public opening.

Who we are

Jobs.it.com is operated by No Stress Limited, company number 12629117, registered office 38 Portside View, Chatham, ME4 4FY, United Kingdom.

What we collect

• For job seekers (no account required): standard web server logs (IP, user agent, requested URL, response code) and any email you send to [email protected] or the report address.
• For job seeker accounts (optional): your email address, an optional name, a password hash, account state, the jobs you save and the job alerts you create (keyword, location, workplace type and frequency). We do not ask for your address.
• Candidate CV (optional): if you choose to add one, the CV you build (name, headline, city and country, optional phone number, optional LinkedIn and website links, summary, work experience, education, skills, languages, certifications, projects and additional information) an optional PDF file and an optional photo. Employers cannot view or search your CV. An employer receives a copy only if you apply to their job through jobs.it.com (see the next point). Your photo appears on your CV only if you choose to show it. Every PDF is scanned for malware on our server before it is stored.
• Applications through jobs.it.com (optional): some employers choose to receive applications through jobs.it.com. When you apply to one of their jobs, we store and send to that employer only what you choose: a copy of your jobs.it.com CV as it is at that moment (without your photo), a copy of your uploaded PDF, or both, plus an optional cover note of up to 2,000 characters. Your name and email address are included so the employer can contact you. Later changes to your CV, or deleting it, do not change an application you have already sent. The employer can mark your application as New, Reviewed, Shortlisted or Not progressing, and you can see that status in your account. Other employers cannot see your application, and applications are not searchable.
• Job statistics: we count job page views and clicks on "Apply" as daily totals per job, shown to the employer who posted the job and to the operator. To avoid counting the same visit twice, a one-way keyed hash of your IP address and browser identifier is held in our server cache for up to 30 minutes and then discarded. The totals contain no personal data.
• For employer accounts (optional): the contact name, claimed company name, email address, password hash and account state. We do not require a real name, phone number, CV, photo, address or LinkedIn profile.
• For submitted job drafts: the role, hiring company name, location, workplace arrangement, employment type, optional salary information, description and either a single HTTPS application destination that you are authorised to use or your choice to receive applications through jobs.it.com. The submission is editable by you until you submit it; after submission the facts are frozen and a private operator draft is created on acceptance.
• For operator accounts: a contact email, a password hash, the actions taken (with timestamp and minimal context) and the audit log.

What we do not collect

We do not require a CV. Adding one is optional, and it is shared only with the employers you apply to through jobs.it.com. We do not collect candidate addresses, dates of birth, references, payment card data or precise geolocation. CV details such as work history or a LinkedIn link are only stored if you add them yourself. Photos are re-encoded when uploaded, which removes hidden data such as camera location, and are never used for facial recognition or any automated assessment. We do not set advertising cookies or third-party analytics cookies on this site. We do not embed third-party JavaScript on the public pages.

How we use what we collect

To present the job board, to enable employer self-service and manual operator review, to send you the email notifications you trigger (verification, password reset, employer accept/reject notifications, and the job alert emails you set up), to deliver the applications you choose to send through jobs.it.com to the employer of that job, to email that employer a notice of each new application (the notice contains only the job title and a sign-in link, no candidate details), to prevent abuse and to comply with our legal obligations. We do not sell or rent your data. We do not run advertising or remarketing.

Who we share with

• Postal relay: the only outbound mail path is pigeon.hostmaria.com:587, sender [email protected], using authenticated, certificate-verified STARTTLS. We do not use any other third-party mail provider.
• Hosting: a single virtual private server hosts the application, the database, a full-disk backup pipeline and a TLS reverse proxy. The host is not part of any public cloud account under our control.
• Employers you apply to: when you apply to a job through jobs.it.com, the employer account that posted that job can read your application (the CV copy, the PDF copy and the cover note you chose to send, with your name and email address) in its private employer workspace, and can download the PDF copy. Each employer sees only the applications for its own jobs. Once an employer has read or downloaded your application, that employer is responsible for its own use of it under the data protection law that applies to it.
• Regulators and law enforcement: only when a valid legal obligation compels disclosure.

International transfers

The application data is held in the United Kingdom. The Postal relay is hosted by a third party; the email content you receive from us transits that infrastructure. We do not currently transfer other personal data outside the United Kingdom. Foreign office locations shown on this site are not used to host personal data.

Retention

Specific retention periods for each record category are being finalised. The current defaults are:

• Web server logs: short, rotating.
• Employer account records: until you delete the account or after two years of inactivity.
• Job seeker accounts, saved jobs and job alerts: until you delete the account or after two years of inactivity. Deleting a job alert removes it immediately.
• Visit de-duplication hashes for job statistics: up to 30 minutes.
• Candidate CVs: until you delete them or your account. After 11 months without signing in we email you a reminder, and after 12 months without signing in the CV is deleted. Encrypted backups can keep a deleted CV for up to about 6 months before it is removed from them.
• Applications through jobs.it.com, with the CV and PDF copies sent with them: deleted automatically 6 months after the job closes (when it is archived or taken down, or when its expiry date passes). You can withdraw and delete an application at any time from Your account, and deleting your account deletes all your applications. Encrypted backups can keep a deleted application for up to about 6 months before it is removed from them.
• Operator audit log entries: long term, as required for the legal basis of the audit.
• Email sent through the Postal relay: not held by us once delivery is acknowledged.

Your rights

You can ask us to confirm whether we hold personal data about you, to provide a copy, to correct inaccurate data, to delete data where the legal basis no longer applies, and to restrict or object to certain processing. The practical way to exercise these is the contact route on the contact page. We will respond within one calendar month.

Account deletion

Job seekers can delete their CV separately, withdraw any application, or delete their whole account with CV, applications, saved jobs and alerts, at any time from Your account. Every job alert email contains a link that switches the alert off without signing in. Employer accounts can request deletion from the account deletion page. Operator accounts are managed by the operator; please contact us through the contact page.

Report a problem

To report a problem with a published job, a fake job, an unsafe application destination or any other concern, use the report a job page or email the address listed on the contact page.

Cookies

Session cookies are essential to the operation of the operator, employer and job seeker account areas. We do not set any non-essential cookies, and no cookie is used for job statistics.

Changes to this notice

We will update this page when material changes occur. The most recent update date is the document timestamp at the bottom of this page.

Contact · Terms of use · Report a job · Home