Data protection

JobPilot operates under UK GDPR and the Data Protection Act 2018. Our data-protection posture is documented in detail below; this page is a public-facing summary.

Lawful basis

Candidate data is processed on the basis of contract (delivering the platform you signed up to) and legitimate interest (operating the matching service that connects you to employers). Sensitive data (DOB, gender, ethnicity, languages) is processed only when you have explicitly opted in.

Where your data lives

UK and EEA datacentres only. No transfers outside the UK/EEA without an adequacy decision or equivalent safeguards.

Retention

Active profiles are retained while the account is open. After account closure, personal data is deleted within 30 days. Aggregate, anonymised analytics may be retained for service- quality purposes.

Your rights

Access, rectification, erasure, restriction, portability, objection. Exercise any of these by contacting dpo@jobpilot.example. We will respond within 30 days.

Complaints

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.