Privacy Policy

Effective Date: January 2025

GIS Career Hub ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website and services.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Password (stored securely using hashed encryption)
• Optional profile details (location, professional summary, skills)

1.2 Job Submission Data

When employers submit job listings, we collect:

• Company name
• Contact name and email
• Job listing details (title, description, requirements, location)
• Optional attachments (PDFs, images)

1.3 Analytics Data

We collect anonymised usage data to improve our services:

• Pages visited and time spent
• Browser type and operating system
• Referring URL and search terms
• Device type and screen resolution
• Approximate geographic location (country/region level)

1.4 Cookies

We use cookies and similar technologies as described in our Cookie Policy. These include essential cookies for site functionality and optional analytics cookies for usage tracking.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our job board services
• Display job listings and connect employers with candidates
• Send account-related notifications (password resets, job alerts)
• Analyse site usage and improve user experience
• Ensure platform security and prevent abuse
• Comply with legal obligations

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent — for analytics cookies and marketing communications
• Contractual necessity — to provide our services when you create an account or submit a job
• Legitimate interest — to improve our platform, ensure security, and detect fraud
• Legal obligation — to comply with applicable laws and regulations

4. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy:

After the retention period expires, data is securely deleted or anonymised.

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers — hosting (cloud infrastructure), email delivery, and analytics services that process data on our behalf under strict contractual obligations
• Legal authorities — when required by law, court order, or to protect our legal rights
• Business transfers — in the event of a merger, acquisition, or sale of assets

6. International Data Transfers

Your data may be processed in countries outside your jurisdiction. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent mechanisms.

7. Your Rights

Under GDPR and applicable privacy laws, you have the following rights:

7.1 Right of Access

You may request a copy of the personal data we hold about you. We will respond within 30 days of receiving your verified request.

7.2 Right to Rectification

You may request correction of inaccurate or incomplete personal data at any time through your account settings or by contacting us.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data. We will comply unless we have a legal obligation to retain the data. Account deletion removes your profile, saved preferences, and associated activity.

7.4 Right to Data Portability

You may request your personal data in a structured, commonly used, machine-readable format (JSON or CSV). This includes your account information, job submission history, and consent records.

7.5 Right to Restrict Processing

You may request that we limit how we process your data while a complaint or correction request is being resolved.

7.6 Right to Object

You may object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds.

7.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing. You can manage cookie preferences via the "Manage Cookie Preferences" option in the site footer.

8. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption in transit (TLS/HTTPS)
• Encrypted storage for sensitive fields
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Secure development practices

9. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Effective Date" at the top of this page. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

• Email: [email protected]
• Subject line: Privacy Request — [Your Name]

We aim to respond to all requests within 30 days.