Skip to main content

Privacy Policy

Last updated: April 13, 2026 — Version 2.0

1. Data Controller

GeraJobs is operated by Gera Services (registered in England and Wales), a local job marketplace. We are the data controller under the UK GDPR and Data Protection Act 2018.

Employment Data Notice: GeraJobs processes personal data in a recruitment context. This may include sensitive information relating to work history, qualifications, and career aspirations. We handle this data with particular care and discretion.

2. What Personal Data We Collect

2.1 Job Seeker Data

Full name, email address, phone number, location, CV/resume content (work history, education, skills, certifications), cover letters, job preferences, salary expectations, right-to-work status, and application history.

2.2 Employer Data

Company name, registered address, contact person details, job postings, hiring history, and payment information for paid listings.

2.3 Location Data

Job search location preferences, commute radius, and approximate location for job matching.

2.4 Transaction Data

Job posting fees, payment type and last four digits, billing history (for employers).

2.5 Usage and Technical Data

IP address, browser type, device identifiers, job search history, application clicks, session data.

3. Legal Bases for Processing

PurposeLegal Basis
Account managementContract (Art. 6(1)(b))
Matching job seekers with vacanciesContract (Art. 6(1)(b))
Sharing CV with applied employerConsent (Art. 6(1)(a)) — at point of application
Processing employer paymentsContract (Art. 6(1)(b))
Personalised job recommendationsLegitimate Interests (Art. 6(1)(f))
Fraud preventionLegitimate Interests (Art. 6(1)(f))
Marketing communicationsConsent (Art. 6(1)(a))

4. Data Retention

  • Active job seeker profiles: while account active
  • Application data: 2 years from application date (to support future references)
  • Employer data: while account active + 2 years
  • Financial records: 6 years (HMRC)
  • Analytics: 13 months rolling

You can delete your CV and profile at any time via account settings.

5. Who We Share Your Data With

We do not sell your data. We share only as necessary:

  • Employers — your CV and application materials when you apply (you control each application)
  • Job seekers — employer name, job description, and contact details as part of listings
  • Stripe — employer payment processing
  • Railway, Neon, Vercel — infrastructure
  • PostHog (EU, anonymised); Sentry (EU, errors)
  • Legal/regulatory authorities — when required by law

We do not share CVs with third parties other than employers you apply to.

6. Your Rights

Access, rectify, erase, restrict, port, or object to your data. You may delete your CV and profile at any time. Email privacy@gera.services. Complaints to the ICO.

7. Security

TLS 1.2+ in transit, AES-256 at rest, MFA on admin, regular audits. ICO notified within 72 hours of qualifying breach.

8. Cookies

Essential, functional, and (with consent) analytics cookies. See our Cookie Policy.

9. Contact