Privacy Policy
Last updated: 2026-04-21
JobLabs ("we", "us") respects your privacy. This policy explains what personal data we collect, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and EU GDPR.
Who we are
JobLabs is a career-insights publication at joblabs.ai. The data controller is reachable at privacy@joblabs.ai.
What we collect
- Analytics data: pages visited, device type, approximate location (country-level), referral source. Collected via Google Analytics and/or Plausible.
- Contact form submissions: name, email address, and your message — only when you voluntarily submit a form.
- CV and candidate profile data: if you opt into our candidate-matching service, we collect your CV, contact information, role preferences, and location. Full details in the "Candidate data" section below.
- Newsletter signups: email address.
- Cookies: see our Cookie Policy.
Candidate data (if you upload a CV)
If you submit your CV through our candidate-matching service, we store and process your CV for the purpose of matching you to suitable employers and recruitment agencies. Your lawful basis for processing is your explicit consent, given at the point of upload.
- We share your CV only with employers and agencies you've specifically consented to share with.
- You can request deletion of your CV at any time by emailing privacy@joblabs.ai.
- We retain candidate data for 24 months from last activity unless you request earlier deletion.
- We do not sell candidate data.
Why we collect it (lawful basis)
- Legitimate interest: to understand how the site is used and improve it.
- Consent: for newsletter signups, candidate CV uploads, and non-essential cookies.
- Contract: to fulfill services you've requested (e.g., candidate-employer matching).
Who we share data with
- Supabase (data hosting) — EU-region instance.
- Netlify (web hosting).
- Google (AdSense, Analytics) — only if you've consented to non-essential cookies.
- Employers and agencies — only with your explicit consent for candidate matching.
We do not sell personal data to third parties.
Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Object to processing or withdraw consent.
- Port your data to another service.
- Lodge a complaint with a supervisory authority (e.g., the UK Information Commissioner's Office).
To exercise any of these rights, email privacy@joblabs.ai. We respond within 30 days.
Data retention
- Analytics data: 26 months.
- Contact form messages: 2 years.
- Newsletter subscriptions: until you unsubscribe.
- Candidate CVs: 24 months from last activity or until you request deletion.
Changes to this policy
We'll update this page when our practices change. The "last updated" date at the top reflects the most recent revision.