Privacy Policy

Account data (for recruiters and their users): name, business/company name, email address, password (hashed), billing details, subscription and usage information.

Candidate data (uploaded by our customers): our customers upload information about job applicants - names, contact details, CVs, work history, qualifications, availability, shift preferences, location, interview notes and related records. We do not collect this directly from candidates; we store and process it on our customers' instructions. Candidates should contact the recruiter with any request about their data (see section 7).

Technical data: IP address, browser type, device information and no analytics cookies.

Communications: messages you send to support, and records of emails sent through the Service.

We use account and technical data to:

• provide, maintain and improve the Service (performance of a contract);
• process payments and subscriptions (performance of a contract and compliance with legal obligations such as tax);
• send service notifications such as trial expiry warnings and security alerts;
• respond to support requests;
• keep the Service secure and prevent abuse;
• send marketing emails only where you opt in, and you can unsubscribe at any time.

We do not use your personal data for automated decision-making or profiling with legal effects.

Where we process recruiter account data we rely on:

• contract (to provide the Service),
• legal obligation (tax and accounting records),
• legitimate interests (security, service improvement, business records) and
• consent (optional marketing).

Where we process Candidate Data, we act as a processor on our customers' instructions - the customer (the recruiter) determines the lawful basis and must inform candidates accordingly.

We use only strictly necessary cookies for the Service to function (login session, security). You can control cookies through your browser settings; blocking necessary cookies may stop the Service working.

We share personal data only with:

• our hosting and infrastructure provider (Base44);
• our payment provider (Stripe), which handles card data while we only receive confirmation of payment status;
• our email service provider;
• professional advisers or authorities where required by law; and
• a buyer of our business, if we transfer the business.

We never sell your personal data. We do not transfer personal data outside the UK unless an adequacy mechanism and equivalent safeguards are in place.

We apply appropriate technical and organisational measures, including encryption in transit, access controls, least-privilege staff access and regular backups. We retain account data while your account is active and for 7 years after (tax/accounting records) unless a shorter period applies. After account deletion or subscription expiry, Customer Data (including Candidate Data) is retained for 30 days to allow recovery/export, then securely deleted, unless we must keep it longer by law.

Under UK GDPR you have the right to:

• access your data;
• correct it;
• delete it;
• restrict or object to processing;
• data portability; and
• withdraw consent at any time.

You can exercise most of these yourself through the Service (export and delete your data), or by emailing support@letsgorecruit.co.uk. We respond within one month. If you are a candidate whose data is in the Service, your data is controlled by the recruiter who added you - please contact them directly. If you cannot identify them, contact us and we will pass your request to the relevant customer or assist you. You can complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113.

We may update this Privacy Policy; the "Last updated" date shows the current version. Material changes will be notified to account holders by email or in the Service.