Who we are
IR35Careers is responsible for the personal information processed through this website and contractor workspace. In data-protection terms, IR35Careers acts as the controller for account, profile, CV, application-workspace and support information.
You can contact us using the contact form. Choose a privacy or data-rights enquiry and include the email address linked to your account so we can verify and respond securely.
Information we use
- Account information: email address, authentication identifiers, sign-in events and account preferences.
- Contractor profile information: skills, work preferences, availability and optional limited-company details you choose to provide.
- CV and application-workspace information: uploaded CV text, edits, role-specific scores, approved versions, screening-answer drafts and application-tracking records.
- Search and alert information: queries, filters, saved contracts and alert preferences.
- Communications: enquiries, feedback and recruiter messages routed through enabled workspace features.
- Technical and security information: device/browser information, IP-derived security signals, timestamps, error logs and essential storage identifiers.
- Job listing information: role data obtained from employers, authorised feeds, job boards and public applicant-tracking-system endpoints. This normally concerns organisations and vacancies rather than site users.
Purposes and lawful bases
| Purpose | Typical lawful basis |
|---|---|
| Create and secure your account; provide saved jobs, CV tools and workspace functions | Performance of our contract with you |
| Operate, protect, debug and improve the service; prevent abuse; keep accurate source links | Legitimate interests in running a safe, useful contractor platform |
| Respond to enquiries and data-rights requests | Legitimate interests, contract steps or legal obligation, depending on the request |
| Send optional marketing or activate non-essential analytics if introduced | Consent, which can be withdrawn |
Providing an email address and password is necessary to create an account. Other profile and CV fields are optional, but some workspace features cannot work without the information they analyse or save.
CV analysis, scoring and automated processing
IR35Careers can compare CV text with a job description, calculate an advisory match score, identify missing terms and suggest truth-preserving edits. The score is based on role keywords, evidence strength, CV structure and clarity. Missing experience is not automatically added.
- The tool supports your own preparation; it does not decide whether you receive an interview or a job.
- No application is submitted and no suggestion is accepted without your action.
- You can review, reject and edit suggestions side by side and download the version you approve.
- You may ask us to explain the scoring approach or raise an accuracy or bias concern through the contact form.
IR35Careers does not currently use solely automated processing to make decisions that produce legal or similarly significant effects about you.
Sharing, processors and international transfers
We do not sell personal information. We disclose only what is needed to operate the service, meet legal obligations or act on your instructions.
- Supabase: authentication, database and account-session services.
- Vercel: website hosting, delivery, operational logs and security.
- Authentication providers: for example Google, only when you choose that sign-in method.
- Professional advisers, regulators or authorities: where reasonably necessary or legally required.
- Original job websites: when you choose an Apply or source link, that independent website receives information from your visit under its own notice.
Some providers may process information outside the UK. Where required, we rely on an adequacy regulation or appropriate contractual safeguards and provider security commitments. Contact us if you want information about safeguards relevant to your data.
Retention and security
We keep personal information only for as long as it is needed for the purpose described, your active account, dispute handling, security and legal obligations. The criteria include account activity, whether you still use a workspace record, source freshness, the nature of an enquiry and applicable limitation periods. When information is no longer needed, it is deleted or anonymised; provider backups expire on their managed schedules.
We use row-level access controls, authenticated sessions, encrypted transport, restricted administrative access and provider security controls. No internet service can guarantee absolute security, so please use a unique password and tell us promptly if you suspect account misuse.
Your rights
Depending on the purpose and lawful basis, you may have rights to be informed, access your data, correct it, erase it, restrict processing, object, receive portable data and withdraw consent. You also have the right to object to direct marketing at any time.
Signed-in users can download a portable account export and permanently delete their account and private CV files in Settings. You can also read the account deletion instructions.
We may ask for proportionate information to verify identity before disclosing or changing account data. Rights are not absolute, and we will explain any lawful reason why a request cannot be completed in full.
Contact and complaints
Submit a request through our contact page. If you remain concerned, you can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.
We may update this notice when the service, providers or law changes. Material changes will be highlighted in the product or at account entry.