GovUKJobs privacy statement

By GovUKJobs · updated 8 November 2026

Version 1, 8 November 2026. Applies to the candidate database, the employer search page, employer requests, employer accounts with their own jobs and applications to them (see 10), reviews (see 11) and job search (see 9).

1. Who is responsible

The controller is:

Sucess Sociedad Civil (trading as GovUKJobs)
NIF J76775147, Avenida Marítima 29, 38530 Candelaria, Santa Cruz de Tenerife, Spain
Contact, including privacy questions: hello@govukjobs.com

Deleting is always possible without having to e-mail anyone (see 6).

2. Which data, why, and on what legal basis

Candidate	Data: occupation or job title, region or the first part of your postcode, hours per week, available from, short text, e-mail address, the moment and version of your consent. Purpose: showing your profile to employers who search (without e-mail address), your confirmation by e-mail, and passing hiring requests from employers on to you. Your name and contact details go to an employer only after you say yes to that request; you provide your name and optional phone number yourself, only at that moment. Legal basis: your consent (Art. 6(1)(a) UK GDPR). You give it with a separate, unticked checkbox and again per request.
Employer	Data: company name, contact person, e-mail address, optional phone number, job title, hours, start date, your message and the candidate concerned; for a vacancy request also town, salary indication, description and the chosen service. Purpose: putting a hiring request to the candidate, handling a vacancy request, and recording the chosen hiring route. Legal basis: legitimate interest (Art. 6(1)(f) UK GDPR): handling your request; you can object (see 6).
Visitor	No tracking or advertising cookies and no access log with IP addresses. Only when you log in as an employer do we set one functional login cookie (see 10). Your language, theme and saved-job choices are only on your own device (localStorage) and are not sent to us. An IP address is used briefly in memory to curb abuse and is not stored. Visitor numbers: at the moment we run no visitor counter on this site. If we add one, it will be Umami on our own server, without cookies and without storing IP addresses, showing totals only (visits, pages viewed, referring site, country, browser, device type and clicks on the GOV.UK buttons), on the legal basis of legitimate interest (Art. 6(1)(f) UK GDPR). We update this statement before it goes on.

Giving consent is voluntary. Without consent you cannot create a profile; searching jobs works as normal. There is no automated decision-making or profiling: employers search themselves and we review requests manually. The candidate decides per request whether data is shared.

3. Who sees what

Employers only see occupation, region, hours, available from, the short text and the month of sign-up. Never your name or e-mail address, unless you say yes to a specific request: then only that employer receives your name and e-mail address (and phone number if you gave one). If you say no, the employer receives a polite notice without anything about you.
Processors: a hosting provider (database storage) and an e-mail service (confirmation and deletion e-mails). They only process on our instruction. We do not ask for special categories of personal data; do not put them in the short text either.
International transfers: we are established in Spain. Data about UK visitors is processed in Spain and the European Economic Area, which the UK treats as adequate. No transfer outside the UK and the EEA is planned. If the e-mail service were located elsewhere, that only happens with an appropriate safeguard (Art. 46 UK GDPR).
We do not sell your data and do not share it with anyone other than described above.

4. How long we keep data

Unconfirmed sign-up	48 hours, then automatically deleted.
Confirmed profile	12 months after you confirm, then automatically deleted. You can delete earlier at any time.
Hiring requests and vacancy requests	Without confirmation or answer 14 days, then automatically deleted. A declined request 30 days. A match or confirmed request 12 months. Gone immediately when the profile a request concerns is deleted.
After deletion	Everything is gone, including your e-mail address and the record of your consent. We keep no copy and make no backups of this database ourselves.

5. Security

The database is on our own server and readable only by the service itself. Connections are encrypted (HTTPS). Confirmation and deletion links are long random codes; we only store a derived value of them.

6. Your rights

Access, rectification, restriction, portability and objection: ask via the contact address under 1. You can change your profile by deleting it and creating it again.
Withdraw consent and erase: always, instantly and without reason, with delete my profile. Withdrawal does not affect what happened before.
Complaint: you can lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), where we are established, or in the UK with the Information Commissioner's Office (ico.org.uk).

7. Where the data comes from

Candidate data comes from you; employer data from the employer. We add nothing from other sources.

8. Costs for candidates and employers

Candidates never pay. Searching and making a request are free; terms for employers are agreed in writing beforehand. Payment never goes through the app or the site, so we collect no payment data here.

9. Job search

When you search jobs in the app, your search term and place go to our job server. It fetches matching listings from external job sources: Teaching Vacancies (Department for Education), NHS Jobs and Careerjet, a job search engine. For Teaching Vacancies and NHS Jobs we send only your search term and place, never your IP address or browser details. Careerjet requires us to send the IP address and browser details (user agent) of your device with every search; we do that and nothing more. What Careerjet does with them is described in Careerjet's privacy policy. If you tap a listing, you go to the original advertisement on the source or employer site, where their own privacy policy applies. Teaching Vacancies listings contain public sector information licensed under the Open Government Licence v3.0. Your name, town and saved jobs stay on your device. We do not store your IP address and do not build a profile of you, except the profile you create yourself as described above.

Benefits, Universal Credit and Jobcentre services are not handled here. The GOV.UK buttons open the GOV.UK pages in a new tab; from that moment GOV.UK's own privacy notice applies.

10. Employer account, own jobs and applications

Employer account	Data: company name, contact person's name, business e-mail address, optional company registration number, language choice, the moment and version of your consent, and the moment of your last login. Purpose: letting you log in with a link in your e-mail (no password), showing your jobs and forwarding applications to you. Legal basis: your consent (Art. 6(1)(a) UK GDPR) and performing what you request from us (point b).
Job and photo	Title, town, hours, salary, contract type, description and an optional photo are public while the job is open, together with your company name. Your e-mail address and name are not public. We shrink a photo and strip location and camera data (EXIF). Do not show recognisable people in a photo without their consent.
Applicant	Data: name, e-mail address, your motivation and the job you apply to. Purpose: sending your application by e-mail to that one employer (with your address as reply-to), sending you a confirmation, and showing the application in the employer's account. Legal basis: your consent (Art. 6(1)(a) UK GDPR), with a separate, unticked checkbox. What the employer does with your application afterwards falls under that employer's privacy statement.
Login cookie	After you log in we set one cookie (werk_wg) that is only sent for the employer portal. It contains a random code, no personal data; we only store a derived value. It is strictly necessary to stay logged in, expires after 30 days and is gone as soon as you log out.

Unconfirmed employer account	48 hours, then automatically deleted.
Employer account	Until you delete it (instantly, under Account), or 12 months after your last login; then we delete it automatically with all jobs, photos and applications.
Job	Public until 60 days after posting or until you close it; then visible only in your own account for 30 more days, then deleted with the photo.
Application	90 days with us, then automatically deleted (earlier if the employer deletes their account or the job). The e-mail the employer received then falls under the employer.

Access, rectification or erasure of an application: ask via the contact address under 1. Employers change or delete their own data themselves under Account.

11. Reviews

Review	Data: the number of stars, your text, your language choice and, only if you fill it in yourself, your first name. We do not ask for an e-mail address and do not store an IP address. Purpose: reading your review and, if we approve it, showing it unchanged with your first name (or "Anonymous") and the date on /rate. A copy goes by e-mail to our own mailbox so we can read it. Legal basis: your consent (Art. 6(1)(a) UK GDPR): you send in the review yourself to have it shown. You can withdraw at any time via the contact address under 1; we then delete it. Do not put other people's data in your text.
Retention	Approved: as long as the review is on the site, until you ask us to delete it. Rejected: 30 days after our decision, then automatically deleted. Not yet reviewed: automatically deleted after 90 days.

Review

Data: the number of stars, your text, your language choice and, only if you fill it in yourself, your first name. We do not ask for an e-mail address and do not store an IP address.
Purpose: reading your review and, if we approve it, showing it unchanged with your first name (or "Anonymous") and the date on /rate. A copy goes by e-mail to our own mailbox so we can read it.
Legal basis: your consent (Art. 6(1)(a) UK GDPR): you send in the review yourself to have it shown. You can withdraw at any time via the contact address under 1; we then delete it. Do not put other people's data in your text.

Retention

Approved: as long as the review is on the site, until you ask us to delete it. Rejected: 30 days after our decision, then automatically deleted. Not yet reviewed: automatically deleted after 90 days.