Privacy Policy | UK Sponsor Jobs

1. Who We Are

UKSponsorJobs.co.uk (“we”, “us”, “our”) is a job directory service that aggregates UK visa sponsorship vacancies from publicly available sources. We are the data controller for personal data processed through this website.

2. Data We Collect

We collect the following categories of personal data:

Account data: email address (required for sign-in), Telegram chat ID (optional, for alerts).
Usage data: IP addresses are cryptographically hashed (SHA-256 with a per-deployment salt) before storage. We never store raw IP addresses.
Preference data: alert preferences (keywords, locations, salary thresholds, delivery channel).
Application tracking: which jobs you save and their status on your personal Kanban board.

3. Legal Basis for Processing

We process your data under the following lawful bases (UK GDPR):

Contract performance (Art. 6(1)(b)): providing the job directory, saved jobs, and alert notification services you requested.
Legitimate interests (Art. 6(1)(f)): preventing abuse (rate limiting, hashed IP deduplication for job reports), improving our service.

4. How We Use Your Data

To authenticate you via magic link email
To send job alert notifications via your chosen channel (email/Telegram)
To store your saved jobs and application tracking status
To enforce rate limits and prevent abuse (using hashed IPs)
To deduplicate job reports (using hashed IPs)

5. Data Sharing

We share personal data only with the following processors, solely to deliver the services described above:

Resend: transactional email delivery (magic links and alert digests).
Telegram Bot API: instant alert delivery (only if you opt in).
Stripe: subscription payment processing (if you upgrade to a paid plan).
Upstash: rate limiting counters (hashed IP only, no personal data).

We do not sell, rent, or trade your personal data to any third party.

6. Data Retention

Account data: retained until you delete your account.
Hashed IPs: retained in rate-limit stores for up to 24 hours; in job report records indefinitely (but non-reversible).
Magic link tokens: expire after 15 minutes and are marked as used.

7. Your Rights (UK GDPR)

You have the right to:

Access: request a copy of the personal data we hold about you.
Rectification: correct inaccurate data.
Erasure: delete your account and all associated data. You can do this instantly from your dashboard.
Portability: receive your data in a structured format.
Object: object to processing based on legitimate interests.

To exercise any right, email privacy@uksponsorjobs.co.uk.

8. Account Deletion

When you delete your account from the dashboard, we execute a database function (soft_delete_user) that:

Marks your account as deleted and clears your email
Removes all alert preferences
Removes all saved jobs
Clears your authentication session

9. Cookies

We use a single essential, HttpOnly session cookie (uksj_session) for authentication. We do not use tracking cookies, analytics cookies, or any third-party advertising cookies.

10. Contact

For privacy enquiries, contact privacy@uksponsorjobs.co.uk.