Privacy Policy

Controller

english-jobs.com is operated by Breakout Consultancy Private Limited, a private limited company incorporated in India and registered with the Ministry of Corporate Affairs, India under CIN U70200UT2024PTC017145.

Registered office:

Breakout Consultancy Private Limited
AGM-49 Galla Mandi
Rudrapur, Udham Singh Nagar
Uttarakhand 263153
India

Privacy contact: privacy@english-jobs.com
Phone: +49 15168583271

EU representative

For people in the European Union, Kapil Mittal acts as EU representative under GDPR Art. 27.

Kapil Mittal
c/o english-jobs.com
Neue Rothofstrasse 13-19
60313 Frankfurt am Main
Germany

Email: privacy@english-jobs.com

What this policy covers

This Privacy Policy provides the information required by GDPR Art. 13 and explains how we process personal data when you visit english-jobs.com, create an account, request job alerts, join the newsletter, use matching or application-support features, upload a CV, contact us, submit a Data Subject Request, or buy a paid digital service.

Personal data we collect

Category	Examples	Source
Account data	Name, email address, authentication identifiers, account settings	You, Clerk
Profile and matching data	Target roles, location preferences, visa status, urgency, salary expectations, skills, CV metadata	You
CV data	Uploaded PDF, DOC, or DOCX files stored in the private candidate-cvs bucket	You
Job alert and newsletter data	Email address, consent status, double opt-in status, unsubscribe state, campaign and UTM data	You, website forms
Service and support data	Messages, concierge requests, employer intake details, privacy requests	You
Billing data	Name, billing address, plan, transaction identifiers, tax information where required	Stripe
Usage and security data	Pages viewed, searches, outbound job clicks, IP address, device/browser information, referrer URLs, anti-abuse signals	Website logs and infrastructure providers

Purposes and lawful bases

Purpose	Lawful basis where GDPR applies
Provide accounts, saved preferences, checkout, paid plans, job matching, and requested support	Contract, GDPR Art. 6(1)(b)
Send service messages, receipts, security notices, and privacy-request responses	Contract and legal obligation, GDPR Art. 6(1)(b) and 6(1)(c)
Send job alerts, newsletters, or other marketing emails	Consent, GDPR Art. 6(1)(a); emails are sent only after double opt-in
Process uploaded CVs for profile setup and concierge support	Explicit consent and contract, GDPR Art. 6(1)(a) and 6(1)(b)
Use CV or profile text for AI matching	Separate explicit AI matching consent, GDPR Art. 6(1)(a)
Store consent audit records and unsubscribe suppression records	Legal obligation and legitimate interests, GDPR Art. 6(1)(c) and 6(1)(f)
Secure the service, prevent abuse, and maintain operational logs	Legitimate interests, GDPR Art. 6(1)(f)
Keep billing, tax, accounting, and compliance records	Legal obligation, GDPR Art. 6(1)(c)

You can withdraw consent at any time. Withdrawal does not affect processing that happened before withdrawal.

CV upload and AI matching

CV upload is optional. If you upload a CV, the file is stored in the private Supabase Storage bucket candidate-cvs. We require separate, unticked checkboxes before upload for:

• acknowledgement that CVs may contain sensitive details and should not include unnecessary special-category data;
• CV processing consent;
• AI matching consent;
• acknowledgement that inactive CVs are deleted after 90 days.

We do not send CV content to a large language model unless AI matching consent is recorded, PII stripping safeguards are enabled, and the read is logged in the privacy event audit table. We do not use AI matching to make legally binding employment, credit, housing, immigration, or similar decisions about you.

Email lifecycle

Job alerts and newsletters require marketing consent and double opt-in confirmation before any marketing email is sent. Every marketing email includes a one-click unsubscribe link. If you unsubscribe, we keep a suppression record so we do not send further marketing emails to that address.

Transactional emails, such as account, billing, security, or privacy-request messages, may still be sent when needed to provide the service or meet legal obligations.

Cookies

At launch, english-jobs.com uses strictly necessary cookies and consent-state storage for authentication, checkout, security, and remembering cookie preferences. Optional analytics and marketing cookies are disabled unless you actively consent.

See the Cookie Policy for the current cookie inventory and the persistent Cookie settings control.

Processors

Processor	Purpose	Location / transfer safeguard
Vercel	Hosting, serverless execution, logs, deployment infrastructure	International processing with contractual safeguards
Supabase	Database and private CV storage	International processing with contractual safeguards
Clerk	Authentication and account management	International processing with contractual safeguards
Stripe	Checkout, subscriptions, tax, invoicing, payment security	International processing with contractual safeguards
Resend	Transactional and double opt-in email delivery	International processing with contractual safeguards
Google Workspace	Disabled for waitlist sync unless a signed DPA is in place and listed here before use	Not active at launch
AI model providers	Disabled for CV-to-LLM processing until explicit AI consent, PII stripping, and logging controls are active	Not active for CVs at launch

International transfers

Because the controller is based in India and some processors may operate outside the European Economic Area, personal data may be transferred internationally. Where GDPR requires a transfer safeguard, we rely on adequacy decisions, Standard Contractual Clauses, processor data protection agreements, and supplementary technical and organizational measures where appropriate.

Retention

Data	Retention period
Account and profile data	While the account is active, then deleted or anonymized within 30 days after account deletion unless legal retention applies
CV files in candidate-cvs	Until deleted by the user, or after 90 days of inactivity, plus up to 30 days for backup cleanup
CV metadata and privacy events	36 months for compliance audit records
Job alert and newsletter leads	Until unsubscribe or erasure request, with suppression records retained as long as needed to honor opt-outs
Waitlist leads without confirmation or activity	12 months
Lead events and campaign attribution	24 months
Outbound job click logs	12 months
Employer intake rows	24 months unless a business relationship requires longer retention
Privacy requests	Request file retained for 36 months after completion
Billing, tax, and accounting records	Statutory retention period required by applicable law
Security logs	Up to 12 months unless needed longer for incident investigation

Your rights

Where GDPR or similar privacy laws apply, you may have the right to:

• access your personal data;
• correct inaccurate data;
• delete your data;
• restrict processing;
• receive a portable copy of your data;
• object to certain processing;
• withdraw consent;
• lodge a complaint with a supervisory authority.

Submit requests at /privacy/request. We will respond without undue delay and, where GDPR applies, within one month unless a lawful extension applies.

Security

We use technical and organizational measures designed to protect personal data, including private storage for uploaded CV files, server-side access controls, retention routines, and privacy event logging for high-risk processing actions.

No internet service can be guaranteed to be completely secure. Use a strong password, protect your account credentials, and contact us if you suspect unauthorized access.

Children

english-jobs.com is not intended for children under 16. We do not knowingly collect personal data from children.

Changes

We may update this policy when our service, vendors, or legal obligations change. The "Last updated" date shows when this policy was last revised.