Privacy Policy
What personal data HandsFreeApply collects, why, how long we keep it and the rights you have over it.
Draft for review. This document is a structural placeholder and must be completed by a qualified legal adviser before launch.
Who we are
[Legal entity name], operating as HandsFreeApply, is the data controller for personal data processed through handsfreeapply.com. [Registered address and company number to be added.]
Our data protection contact is privacy@handsfreeapply.com.
Data we collect
Account details: name, email address, phone number and location.
Job search information: your CV and cover letters, target roles, salary expectations, locations, work authorisation and sponsorship status, and any instructions you give us.
Application records: the roles we apply to on your behalf, answers submitted, proof of submission and outcomes.
Payment information: handled by Stripe. We receive a customer reference, the last four digits and expiry of your card, and your billing history — never your full card number.
Usage data: basic logs and device information used to keep the service secure and protect account access.
Why we use it (lawful bases)
To provide the service you've asked for — searching for and submitting job applications (contract).
To take payments and keep financial records (contract and legal obligation).
To prevent fraud and unauthorised account access (legitimate interests).
To send marketing emails, only if you opt in (consent). You can withdraw consent at any time in Settings.
Special category and sensitive data
Some employers ask optional equal-opportunities questions. We only answer these if you've explicitly provided answers and asked us to. [Approach to be confirmed with legal counsel.]
Who we share data with
Employers and their recruitment platforms, when we submit an application you've authorised.
Service providers acting on our behalf: Supabase (database and file storage), Stripe (payments), and our email provider.
We do not sell your personal data.
International transfers
Where data is transferred outside the UK or EEA — for example to employers in other countries you target — we rely on appropriate safeguards. [Mechanisms to be confirmed.]
How long we keep it
While your account is open, and for [period to be confirmed] afterwards for legal and accounting purposes. You can ask us to delete your data sooner.
Your rights
Under UK GDPR and EU GDPR you may have rights to access, correct, delete, restrict or object to processing of your data, and to data portability. You can export or delete your data from Settings, or contact privacy@handsfreeapply.com.
You can complain to the Information Commissioner's Office (ICO) or your local supervisory authority.
Last updated: [date]