Privacy Policy

1 Who we are

JobReferral is a trading name of UXNOW LTD (company number 15506811), a private limited company registered in England and Wales. We operate a private network of vetted professionals — vouched in by a member or verified by us — connecting them with employers, and are the data controller for personal data processed through this platform. Our ICO registration number is ZC194243. Our contact point for privacy matters is the contact form.

2 Data we collect

We only collect what we need to run the network:

• Identity & contact — your name, email address, phone number (optional) and country.
• Professional information — job titles, work history, skills, education, certifications, day rate or salary expectations, availability, IR35 stance and the CV or LinkedIn data you import to build your profile.
• Referral data — who invited you, references given about you, and people you invite or endorse.
• Employer data — for employer users: company details, the person registering, roles and vacancies, and hiring activity.
• Usage data — how you interact with the platform (pages, actions), captured in an anonymised/aggregated form to improve the product.
• Support & communications — messages you send us through contact forms, tickets or email.

3 How we use it

• To build and display your profile and match you to relevant roles (or, for employers, to relevant candidates).
• To operate the referral chain of trust and record references and endorsements.
• To let a matched employer request to view your profile and arrange interviews.
• To send service communications — invites, confirmations, interview requests and account/security notices.
• To keep the network safe: verification, moderation, and detecting misuse.
• To improve the platform through privacy-respecting, aggregated analytics.

4 Lawful basis

We rely on: contract (to provide the service you signed up for), legitimate interests (to run, secure and improve a trusted network, balanced against your rights), and consent (for any optional marketing communications, which you can withdraw at any time). Service/transactional messages are sent on the basis of contract, not marketing consent.

5 Sharing & anonymity

Your identity is anonymous by default. Employers first see an anonymised version of your profile and only see your name and identifying details once they accept to view you. We do not sell your data.

We share data only with:

• Employers you're matched with — anonymised first, full details on reveal, as above.
• Service providers (processors) who help us operate — currently our hosting/database provider (Cloudflare) and our transactional email provider (Resend). They act on our instructions under data-processing terms. Cloudflare, Inc. is based in the United States. Data routed through or stored on Cloudflare’s infrastructure may be processed outside the UK. This transfer is safeguarded by Standard Contractual Clauses (SCCs) approved under UK GDPR Article 46.
• Authorities where we are legally required to.

6 Retention

We retain your personal data for as long as your account is active. If you close your account, we delete or anonymise your personal data within 90 days, except where we are required to retain it longer by law. Specifically:

• Financial and transactional records are retained for 7 years to comply with HMRC requirements.
• Security and access logs are retained for 12 months.
• Support correspondence is retained for 2 years after the last contact.

You can request deletion of your data at any time via the contact form.

7 Your rights

Under UK GDPR you have the right to:

• Access — get a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Portability — receive your data in a portable, machine-readable format.
• Restriction / objection — limit or object to certain processing, including opting out of marketing.

To exercise any of these, use the contact form. We'll respond within one month.

8 Automated decision-making

Our AI matching system suggests professionals to employers based on role requirements and profile data. This matching is a recommendation tool only — no purely automated decision with legal or similarly significant effect is made without human review. You can request information about how a specific match was made via the contact form.

9 Cookies

We use essential cookies to keep you signed in and secure, and (once enabled) privacy-respecting analytics cookies to understand and improve usage. You can control these — see our Cookie Policy for detail and how to opt out.

10 Security

We protect your data with encryption in transit and at rest, access controls, and an audit trail over sensitive actions. No system is perfectly secure, but we take reasonable and appropriate measures and will notify you and the ICO of any breach where legally required.

11 Contact & complaints

Questions or requests: use the contact form. If you're unhappy with how we've handled your data you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to put things right first.

The ICO's address is: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline: 0303 123 1113.