1. Who we are
Roleo ("we", "us", "our") is a job board operating in the United Kingdom. For data protection enquiries, contact privacy@roleo.co.uk.
2. Data we collect
Account information (name, email, encrypted password, phone, role), profile data (resume, work history, skills, location), employer information (company name, logo, listings), usage data (IP, browser, pages visited), and session cookies.
3. Legal basis (UK GDPR)
Contract (to provide services you signed up for), legitimate interests (to operate the platform), consent (marketing/analytics, withdrawable anytime), legal obligation (where required by UK law).
4. How we use your data
To create and manage your account, allow employers to see applications, send service emails, send job alerts you subscribed to, and prevent fraud.
5. Who we share data with
Employers when you apply for their jobs, service providers under strict data processing agreements, and law enforcement when legally required. We never sell your personal data.
6. Your rights under UK GDPR
Access, correct, delete, restrict, port your data, withdraw consent, or lodge a complaint with the ICO (ico.org.uk). Email privacy@roleo.co.uk to exercise these rights.
7. Data retention
Account data is kept while your account is active. Applications and resumes are kept 2 years after submission unless you request earlier deletion. Audit logs are kept 1 year.
8. Security
Encrypted passwords, HTTPS, prepared queries, CSRF protection, regular security updates. No system is 100% secure.
9. Cookies
Essential cookies (required for login), optional analytics cookies (with consent).
10. Changes
We will notify you of material changes by email or on-site notice.
Last updated: [DATE]
This is a template — have a UK solicitor review it before launching publicly.