Draft: this text has not yet been reviewed by a solicitor.
Privacy notice
What we hold about you, why, how long we keep it, and how to get it or delete it. Last updated 2 November 2026.
Who is responsible
The data controller is [Company name] Ltd, company number [00000000], [registered address], ICO registration [ICO number]. Contact [support@domain] for anything in this notice.
Browsing without an account
You can search and read every listing without telling us who you are. Our web server keeps short-lived access logs for security. Analytics are cookieless: we count page views per path per day and store nothing about individual visitors, and only when you choose “Allow analytics” in the cookie notice.
The data we hold and why
| Data | Why | Lawful basis | Kept for |
|---|---|---|---|
| Email address, verification time, sign-in times, active sessions | To run your account and sign you in by emailed link | Contract (providing the account you asked for) | Until you delete the account, then 30 days in backups |
| Reveals (unlocks): which jobs you revealed and how | To show you what you have access to and apply the free allowance | Contract | Life of the account |
| Purchases and subscription status, Stripe customer and payment ids, amounts, refunds, your consent to immediate access | To take payment, give access, handle refunds and keep accounts | Contract; legal obligation for financial records | 6 years after the transaction (HMRC record keeping) |
| Redirect logs: job, time, a hashed IP address, browser user agent, your account id if signed in, outcome | To detect abuse of apply links, to prove a link was working or dead for automatic refunds, and to count clicks per listing | Legitimate interests (security, refunds); contract for refunds | 90 days, then deleted. The IP hash is salted per day and cannot be reversed |
| Emails we send you (sign-in links, receipts, renewal reminders) in an outbox | To deliver and troubleshoot transactional email | Contract | 30 days |
| Reports, takedown requests and promotion enquiries you submit, with the email you give | To act on them and reply | Legitimate interests (running an accurate service); contract for enquiries | 2 years |
| Marketing preference | Only if you opt in; we send nothing promotional otherwise | Consent, withdrawable any time | Until withdrawn |
Who else sees it
- Stripe processes payments as our processor and as an independent controller for fraud and regulatory purposes. We never see or store card numbers. Stripe's notice is at stripe.com/privacy.
- Our email provider ([SMTP provider]) delivers sign-in links and receipts.
- Our hosting provider ([hosting provider, UK or EU region]) stores the database and backups.
- Employers and job boards you click through to see only what you choose to tell them on their own site. Nothing you type there passes through ukdevjobs.
We do not sell personal data and we do not use advertising networks.
International transfers
Data is stored in the UK or the EU. Where a provider processes data outside the UK (for example Stripe), transfers rely on the UK adequacy regulations or the UK International Data Transfer Addendum.
Your rights
You can ask for a copy of your data, have it corrected or deleted, object to or restrict processing, and take your data elsewhere. Two of these are self-service on your account page: Export my data gives you a file of everything we hold against your account, and Delete my account removes it (financial records are retained for the legal period but detached from your email). For anything else, email [support@domain]; we respond within one month. You can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
We set one essential cookie, dr_session, only after you sign in, to keep you signed in for 30 days. It is strictly necessary and needs no consent. We set no analytics, advertising or third-party cookies; analytics are cookieless and aggregated and run only if you allow them. Your choice is stored in your browser's local storage, not in a cookie. Details are on the cookies page.
Children
The site is for people looking for work and is not directed at children under 16. We do not knowingly hold data about them.
Changes
We will update this notice when our processing changes and email account holders about material changes.