Privacy that keeps talent data confident
JobRoles is built for sensitive hiring work. This policy explains what we collect, why we collect it, and the controls you have to shape how your data flows across the platform.
Data controller
JobRoles Ltd, UK
Registered under the UK Information Commissioner’s Office.
Regions covered
EU · UK · US
Data is stored closest to your primary operating region.
DPA & subprocessors
Transparent directory
We publish every processor change with 30-day notice.
- Name & job title
- Company & team size
- Work email & phone
- Authentication logs
- Feature adoption events
- Session metadata
- In-product feedback
- Support conversations
- Role requirements & salary bands
- Candidate notes
- Hiring preferences
- Team comments
Deliver the platform
Provision accounts, personalize dashboards, and roll out improvements.
We rely on performance of a contract to run the JobRoles experience you signed up for.
Secure accounts
Detect abuse, monitor risk signals, and keep credentials safe.
Security monitoring is processed under legitimate interest—we minimize retention windows.
Guide your team
Send product education, adoption nudges, and advisory research.
You can opt out of non-essential comms at any time from your notification center.
Stay compliant
Meet legal, regulatory, and audit requirements across jurisdictions.
We keep auditable logs and only disclose information when required by law.
Access & portability
Download a structured export of your profile, searches, and candidate data.
We respond to verified requests within 30 days.
Rectification
Update inaccurate information directly or ask us to revise it for you.
Most fields are editable in-app; our team handles the rest.
Erasure & restriction
Request deletion of non-essential data or pause processing temporarily.
We’ll guide you through impact assessments before removal.
Objection & consent
Opt out of marketing, profiling, or any processing based on consent.
Preference center lives under Settings → Notifications.
Encryption everywhere
TLS 1.3 in transit and AES-256 at rest across primary and backup stores.
Geo redundancy
EU & UK data centers with automatic failover and daily integrity testing.
Access controls
Principle of least privilege, hardware security keys, and quarterly audits.
Need a custom DPA?
We support bespoke terms for regulated teams.
Attach your preferred clauses and we’ll coordinate with legal in under five business days.
We send 30-day advance notice for policy updates and highlight critical edits directly inside the product.
Subscribe in Settings → Privacy feed
Need a signed agreement?
Our privacy team replies within one business day.
Email compliance@jobroles.co or book a review call to walk through controls, subprocessors, and bespoke terms.
Dedicated Data Protection Officer
dpo@jobroles.co
10 Finsbury Square, London EC2A 1AF