Privacy Policy

Last updated: 25 May 2026

This Privacy Policy explains how Jobfloor ("we", "us", or "our") collects, uses, stores, shares, and protects your personal data when you use the Jobfloor platform: whether as a job seeker, employer, or visitor.

Please read this policy carefully. By using Jobfloor, you confirm that you have read and understood how we handle your personal data. Where we rely on your consent, you will be asked to provide it separately and explicitly.

1. Who We Are

Jobfloor is an AI-powered job matching and career management platform connecting job seekers and employers. Jobfloor operates as the data controller in respect of personal data collected directly through the platform.

For the purposes of UK GDPR and EU GDPR, the data controller is Jobfloor. Contact: support@jobfloor.ai

Note: Employers who receive candidate data through Jobfloor act as independent data controllers in respect of that data and are responsible for their own compliance with applicable data protection law.

2. What Data We Collect

A. Data you provide directly

Full name, email address, phone number
CV, resume, cover letters, and supporting documents
Employment history, qualifications, and skills
Profile information, job preferences, and career goals
Account credentials and settings
Communications sent through the platform

B. Data collected automatically

IP address and approximate location
Device type, operating system, and browser information
Usage data: pages visited, features used, time spent, and interactions
Log data, session identifiers, and timestamps
Cookies and similar tracking technologies (see our Cookie Policy)

C. Data from third parties

Employer or recruiter information submitted about candidates
Data from third-party authentication providers (e.g. Google sign-in)
Data from third-party job boards where Jobfloor distributes or receives listings
Publicly available professional data where relevant and lawful

3. How We Use Your Data

We use your personal data for the following purposes:

To create and manage your account and provide the Jobfloor platform
To match job seekers with relevant job opportunities using AI-powered matching
To enable communication between job seekers and employers
To distribute job listings to third-party job boards where authorised
To personalise your experience and improve platform relevance
To operate, maintain, and improve the platform's performance and security
To detect, investigate, and prevent fraud, abuse, and unauthorised access
To send service communications (account updates, alerts, application status)
To send marketing communications where you have given consent
To comply with our legal obligations
To train, develop, and improve Jobfloor's AI matching and recommendation systems (see Section 4)

4. AI Processing & Machine Learning

Jobfloor's core features rely on artificial intelligence and machine learning. Specifically:

We analyse your CV, profile, job applications, and platform interactions to generate match scores and job recommendations.
We use this data to train, test, and refine our AI models over time.
We may use trusted third-party AI and cloud infrastructure providers to process data for these purposes. All such providers are contractually bound to process data only on our instructions and in accordance with applicable law.

We do not guarantee the accuracy of AI-generated outputs. Match scores and recommendations are provided for guidance only and are not a substitute for human judgement.

Where our AI systems are used in ways that produce decisions with legal or similarly significant effects on individuals, we will comply with our obligations under UK GDPR Article 22, including providing meaningful human review mechanisms and the ability to contest decisions.

5. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR / EU GDPR:

Purpose	Legal Basis
Account creation and platform operation	Performance of a contract
AI matching and job recommendations	Legitimate interests / Contract
AI model training and improvement	Legitimate interests
Fraud detection and security	Legitimate interests
Marketing communications	Consent
Compliance with legal obligations	Legal obligation
Sharing data with employers on application	Performance of a contract

Where we rely on legitimate interests, we have carried out a balancing assessment and concluded that our interests do not override your rights and freedoms. You have the right to object to processing based on legitimate interests at any time (see Section 9).

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

6. How We Share Your Data

We do not sell your personal data. We may share it in the following circumstances:

A. With employers and recruiters

When you apply for a role or make your profile visible to employers, your relevant profile and application data will be shared with the employer. Once shared, the employer acts as an independent data controller for that data.

B. With service providers and processors

We engage trusted third-party providers for hosting, analytics, cloud infrastructure, AI processing, communications, and security. All processors are bound by data processing agreements and may only use your data on our instructions.

C. With third-party job boards

Where employers opt to distribute listings through Jobfloor to third-party platforms (e.g. Indeed, LinkedIn, Reed), relevant listing data will be shared with those platforms. Each platform operates under its own terms and privacy policy.

D. With legal and regulatory authorities

We may disclose personal data where required by law, court order, or regulatory authority, or where necessary to protect the rights, property, or safety of Jobfloor, its users, or the public.

E. In a business transfer

In the event of a merger, acquisition, or sale of all or part of Jobfloor's business, personal data may be transferred as part of that transaction. We will notify affected users in advance where required by law.

7. International Data Transfers

Jobfloor is a global platform and your data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home country.

Safeguards for UK / EEA transfers

UK International Data Transfer Agreements (IDTAs) or EU Standard Contractual Clauses (SCCs)
Transfers to countries with adequacy decisions recognised by the UK ICO or European Commission
Other lawful transfer mechanisms as required

Jurisdiction-specific frameworks

Nigeria (NDPR): We comply with the Nigeria Data Protection Regulation and process Nigerian users' data in accordance with NITDA guidance.
South Africa (POPIA): We comply with the Protection of Personal Information Act 2013.
Brazil (LGPD): We comply with the Lei Geral de Proteção de Dados Pessoais.
Canada (PIPEDA): We comply with the Personal Information Protection and Electronic Documents Act.
United States: We comply with applicable US state privacy laws, including the California Consumer Privacy Act (CCPA) where applicable.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

Maintaining your active account and providing our services
Complying with legal, regulatory, tax, and accounting obligations
Resolving disputes and enforcing our agreements
Supporting AI model integrity and audit requirements

When your data is no longer needed, it will be securely deleted or anonymised. You may request deletion of your account and data at any time (subject to legal retention obligations; see Section 9).

9. Your Rights

Depending on your location, you may have the following rights in relation to your personal data:

Right of access: to obtain a copy of the personal data we hold about you
Right to rectification: to correct inaccurate or incomplete data
Right to erasure: to request deletion of your data ("right to be forgotten")
Right to restrict processing: to limit how we use your data in certain circumstances
Right to data portability: to receive your data in a structured, machine-readable format
Right to object: to object to processing based on legitimate interests or for direct marketing
Right not to be subject to automated decision-making: to request human review of decisions made solely by automated means that significantly affect you

To exercise any of these rights, contact us at: support@jobfloor.ai

We will respond within 30 days (or sooner where required by law). We will not charge a fee for reasonable requests. We may need to verify your identity before processing your request.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at www.ico.org.uk.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures include encryption in transit and at rest, access controls, regular security assessments, and staff data protection training.

However, no system is completely secure. In the event of a personal data breach, we will take immediate steps to contain and assess the breach. Where required by law, including where a breach is likely to result in a risk to individuals' rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected users without undue delay.

11. Cookies

Jobfloor uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage, and support our AI systems. You can manage your cookie preferences via your browser settings or our cookie consent tool.

A full Cookie Policy is available on the Jobfloor website.

12. Children's Privacy

Jobfloor is not intended for individuals under the age of 18 (or the legal working age in your jurisdiction, if higher). We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it promptly. If you believe a child has registered on our platform, please contact us at legal@jobfloor.com.

Note: The original policy set the age threshold at 16. Given that Jobfloor is a job platform and legal working age in the UK is 16 with restrictions, we have raised this to 18 for clarity and consistency with the Terms & Conditions.

13. Third-Party Links

The Jobfloor platform may contain links to third-party websites, services, or job boards. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. Where changes are material, we will notify you via the platform or by email with reasonable notice before the changes take effect. Continued use of the platform after that date constitutes acceptance of the updated policy.

Previous versions of this policy are available on request.

15. Contact & Data Protection Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:

Jobfloor Legal & Data Protection Email: support@jobfloor.ai Website: www.jobfloor.ai

If you are located in a jurisdiction that requires a designated Data Protection Officer (DPO) or local representative, please contact us at the above address and we will direct your enquiry appropriately.