Privacy notice

FoundWorker operates a worldwide candidate database. For candidate profiles we act as the data controller. Recruitment agencies that search the database and contact candidates act as separate controllers for what they do with the data afterwards.

• Account data: name, email, password hash, account type, company name.
• Profile data: job role, sectors, skills, qualifications, licences and certificates, availability, notice period, pay expectations, location and travel radius, languages, right-to-work status.
• Uploaded documents you attach to a credential (stored privately).
• Contact details, revealed to an agency only when they unlock your profile.
• Usage data: agency searches, unlocks, outreach and response times.
• Billing data: plan, status, billing period. Card details are handled by Stripe, never by us.

• Contract: running your account, publishing your profile, taking payment.
• Consent: making your profile visible to agencies, and any marketing email.
• Legitimate interests: platform security, fraud prevention, service improvement.
• Legal obligation: accounting and tax records.

Your profile is hidden until you publish it and hold an active trial or visibility plan. Once visible, subscribing agencies can see your professional details anonymously; your contact details are released only when an agency spends an unlock. Processors we rely on: Supabase (hosting and database), Stripe (payments), and our email delivery provider.

Profile data is kept while your account is open. Delete your account and we remove your profile, documents and contact details; billing records are retained for six years where tax law requires it.

You have the right of access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You can download everything we hold and permanently delete your account from your account settings. You can also complain to the ICO (ico.org.uk).

We set essential cookies for sign-in and payment. Optional analytics cookies are only set if you accept them in the cookie banner; you can change your mind by clearing site data.

As a worldwide platform, agencies outside the UK/EEA may view visible profiles. Transfers rely on adequacy regulations or standard contractual clauses.