Privacy Notice

Who we are

Rolefit (at job-search.uk) is an independent service operated by its owner in the United Kingdom, who is the data controller for the personal data described below. For any privacy question or to exercise your rights, email [email protected].

What we collect and why

• Your CV. It may contain personal data you have chosen to include (name, contact details, work history, education, skills). We extract the text and send it to our AI provider, Google, to identify your field, role, and skills and to score how well each job matches you.
• Your search inputs. The job titles, target country, and work mode and seniority preferences you enter.
• Technical data. Your IP address and basic request information, processed by our network provider (Cloudflare) to deliver and secure the service. Operational logs record AI usage totals, not your CV.
• Cookies. Two cookies run the service; see the Cookie Policy.

Our legal basis

• Parsing your CV and producing your report: your consent (UK GDPR Article 6(1)(a)), given when you upload your CV and start a search. You can withdraw it at any time.
• Enforcing the daily usage limit and keeping the service secure: legitimate interests (Article 6(1)(f)).
• Signing you in: necessary to provide the service you asked for.

Sensitive information

We do not ask for or want sensitive information (for example health, ethnicity, or religion). Please do not include it in your CV. If it is there, by uploading you give your explicit consent (Article 9(2)(a)) for us to process it only to produce your report. You can withdraw that consent and have your data deleted at any time.

Who we share data with

• Google (Gemini API):receives your CV text and job descriptions to parse and score matches. Under its UK “Paid Services” terms this content is not used to train Google’s models; it is logged for up to 55 days to prevent misuse, then deleted. Google acts as our processor.
• Cloudflare: provides the network, delivery, and security, and processes your IP address.
• Job boards and public APIs (such as Adzuna, Reed, Indeed, LinkedIn): receive only your search terms, never your CV or identity.
• Google Analytics (only if you accept analytics cookies): anonymous, aggregated usage statistics. Your CV is never sent to it.

We do not sell your data, and we do not use advertising or cross-site tracking.

International transfers

Some providers above may process data outside the UK and EEA. Where they do, the transfer is covered by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. There is no UK adequacy decision for the United States, so we rely on these safeguards.

How long we keep data

• Your CV file: deleted within 1 hour (in memory only, never written to disk).
• Search results and match reports: deleted within 7 days. This includes a short profile summary derived from your CV and the scoring criteria for your search, stored to produce and re-serve your report.
• Operational logs (AI usage totals, no CV content): deleted within 90 days.
• Cookies: see the Cookie Policy.

Retention is enforced automatically by a scheduled housekeeping process.

Your rights

Under UK GDPR you can access your data, have it corrected or erased, restrict or object to its processing, ask for portability, and, where we rely on consent, withdraw it. To exercise any right, email [email protected]. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Attributions

City and region data used for the distance filter is from GeoNames, licensed under CC BY 4.0.