Privacy Policy
Last Updated: March 12, 2026
1. Who We Are
This website, chichester-jobs.uk, is operated by MonakTech, based in Chichester, West Sussex, United Kingdom ("we", "us", "our").
We are the data controller for personal data collected through this site. If you have any questions about how we handle your data, contact us at privacy@chichester-jobs.uk.
Data Controller
chichester-jobs.uk is a trading name of Paul Jacobs
Trading Address: 43 Saint Johns Road, Newport, Isle of Wight, PO30 1LW
Email: privacy@chichester-jobs.uk
2. Data We Collect and Why
We only collect personal data that is necessary for us to provide our services. The table below explains what we collect, why, and our lawful basis under UK GDPR Article 6.
| Data | Purpose | Lawful Basis | Retention |
|---|---|---|---|
| Name, email address | Account registration, login, communications | Contract (Art. 6(1)(b)) | Duration of account + 12 months |
| Google profile picture (if Google login used) | Profile display | Consent (Art. 6(1)(a)) | Duration of account |
| Company name, job posting content | Publishing job listings on the site | Contract (Art. 6(1)(b)) | Duration of listing + 30 days |
| Payment information (card details) | Processing job posting fees | Contract (Art. 6(1)(b)) / Legal obligation (Art. 6(1)(c)) | We do not store card data. Stripe handles this. Payment records retained for 6 years to comply with HMRC record-keeping requirements (Finance Act 1998). |
| IP address, browser type, page views | Security logging, fraud prevention | Legitimate interests (Art. 6(1)(f)) | 30 days |
| Job listing content (title, description, company name) | Automated content moderation screening before publication | Legitimate interests (Art. 6(1)(f)) — to prevent fraudulent or harmful content | Processed at point of submission; no separate moderation copy is retained |
| IP address of listing reporter, report reason and details | Processing public "Report this listing" submissions; rate-limiting to prevent abuse | Legitimate interests (Art. 6(1)(f)) — to maintain platform integrity | Duration of the associated job listing + 30 days |
3. Third-Party Sub-Processors
We share personal data with the following trusted third parties, only to the extent necessary to provide our services:
- Stripe Inc. — Processes payment card transactions. Stripe is certified to PCI DSS Level 1. Data may be transferred to the United States under Stripe's standard contractual clauses. Stripe Privacy Policy.
- Google LLC — Provides optional OAuth sign-in ("Sign in with Google") and Google Fonts. Use of Google sign-in is entirely optional. Data may be transferred to the United States under Google's standard contractual clauses. Google Privacy Policy.
- Fasthosts Internet Ltd — Our UK-based web hosting provider. Your data is stored on servers in the United Kingdom.
We do not sell your personal data to any third party. We do not use your data for advertising or profiling.
4. International Transfers
Stripe and Google are US-based companies. When you use these services, your data may be transferred to and processed in the United States. These transfers are protected by Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO), providing an appropriate level of protection equivalent to UK GDPR.
5. Cookies
We use only essential cookies. See our full Cookie Policy for details of every cookie we set, its purpose, and duration.
6. Your Rights Under UK GDPR
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:
Right of Access
Request a copy of all personal data we hold about you (Subject Access Request).
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten"), subject to legal obligations.
Right to Restriction
Request that we limit how we use your data while a dispute is resolved.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests, including direct marketing.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw it at any time.
Rights re. Automated Decisions
We use automated keyword screening on job listing content before publication. A positive match does not result in automatic rejection — it triggers human admin review. You may request a human review of any moderation decision by emailing us.
To exercise any of these rights, email privacy@chichester-jobs.uk. We will respond within one calendar month as required by law.
7. How We Protect Your Data
- All connections are encrypted via HTTPS (TLS)
- Passwords are hashed using bcrypt (cost factor 12) — we never store plaintext passwords
- CSRF tokens protect all form submissions
- Access to personal data is limited to authorised team members only
- Payment card data is never stored on our servers — handled entirely by Stripe
8. Content Moderation and Listing Reports
To protect job seekers and maintain a safe, trustworthy platform, we operate an automated content moderation system and a public reporting feature. This section explains how personal data is used in those processes.
Automated Keyword Screening
When you submit a job listing, the title, description, and company name are automatically checked against a blocklist of terms associated with fraud, adult content, illegal work, and spam. This processing is carried out on the basis of our legitimate interests (UK GDPR Art. 6(1)(f)) to prevent harmful or unlawful content being published on the Site.
- The screen is run at point of submission and post-payment. No separate copy of your listing is stored for moderation purposes beyond the listing record itself.
- A positive keyword match does not automatically reject your listing. It places the listing into a pending review state and triggers a manual review by an administrator.
- You will be informed that your listing is under review and cannot proceed to payment until the review is complete.
"Report this Listing" Feature
Any visitor to the Site may submit a report about a live job listing. When a report is submitted, we collect:
- The reason category and any free-text details provided by the reporter
- The reporter's IP address, used solely to prevent duplicate or abusive reports (rate-limiting)
This data is processed on the basis of our legitimate interests (UK GDPR Art. 6(1)(f)) to maintain the integrity of the platform. Reports are reviewed by administrators only and are never shared with the employer whose listing has been reported.
Report data is retained for the duration of the associated job listing plus 30 days, after which it is deleted.
Your Rights in Relation to Moderation Decisions
If your listing has been placed under review or rejected and you believe this was in error, you may request a human review by emailing hello@chichester-jobs.uk. We will respond within one business day.
9. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.
10. Changes to This Policy
We may update this privacy policy from time to time. When we make significant changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
11. Right to Complain
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint
We would, however, appreciate the chance to address your concerns before you contact the ICO. Please email us at privacy@chichester-jobs.uk first.