Privacy Policy

Last updated: 1 May 2025

Recruitment Room ("we", "us", "our") is committed to protecting your personal data. This policy explains what we collect, how we use it, and your rights.

1. What we collect

Account data. When you register, we collect your name, email address, and password (stored as a bcrypt hash). Employers also provide a company name.

Profile data. Job seekers may provide a CV, photo, skills, experience, and location. Employers may provide a company description and logo.

Usage data. We log page visits, search queries, and application events for platform analytics and security purposes.

Communications. If you contact us, we keep a record of that correspondence.

2. How we use it

We use your data to operate the platform, match candidates with relevant roles, send notifications you have opted into, prevent fraud and abuse, and improve our service. We do not sell your personal data to third parties.

3. Who can see your profile

Job seeker profiles are visible to verified employers on the platform when you have applied to one of their listings or have set your profile to "visible to employers". You control this setting in your dashboard.

Employer profiles and job listings are publicly visible.

4. Cookies

We use a session cookie to keep you logged in and a CSRF token cookie to protect form submissions. We do not use advertising or tracking cookies.

5. Data retention

Account data is retained for as long as your account is active. You may request deletion at any time by contacting us at [email protected]. We will process deletion requests within 30 days.

6. Your rights

Depending on your location, you may have the right to access, correct, or delete your personal data; restrict or object to processing; and receive a copy of your data in a portable format. Contact us to exercise any of these rights.

7. Security

We use HTTPS for all data in transit, bcrypt for password storage, parameterised queries to prevent SQL injection, and output encoding to prevent cross-site scripting. We conduct periodic security reviews.

8. Changes to this policy

We may update this policy from time to time. We will notify registered users of significant changes via email at least 14 days before they take effect.

9. Contact

Questions about this policy? Contact us or email [email protected].