Legal

Privacy notice

Last updated 21 October 2026. This notice explains how FoundWorker handles personal data under the UK GDPR and EU GDPR.

Who we are

FoundWorker is operated by FoundWorker.com Ltd, registered in England & Wales under company number 17462660, registered office 10 Western Road, Romford, Essex, England, RM1 3JT. Our entry on the public register is available at Companies House.

FoundWorker operates a worldwide candidate database. For candidate profiles we act as the data controller. Recruitment agencies that search the database and contact candidates act as separate controllers for what they do with the data afterwards.

What we collect

  • Account data: name, email, password hash, account type, company name.
  • Profile data: job role, sectors, skills, qualifications, licences and certificates, availability, notice period, pay expectations, location and travel radius, languages, right-to-work status.
  • Uploaded documents you attach to a credential (stored privately).
  • Contact details, revealed to an agency only when they unlock your profile.
  • Usage data: agency searches, unlocks, outreach and response times.
  • Billing data: plan, status, billing period. Card details are handled by Stripe, never by us.

Why we use it and our legal bases

  • Contract: running your account, publishing your profile, taking payment.
  • Consent: making your profile visible to agencies, and any marketing email.
  • Legitimate interests: platform security, fraud prevention, service improvement.
  • Legal obligation: accounting and tax records.

Who sees your data

Your profile is hidden until you publish it and hold an active trial or visibility plan. Once visible, subscribing agencies can see your professional details anonymously; your contact details are released only when an agency spends an unlock. Processors we rely on: Supabase (hosting and database), Stripe (payments), and our email delivery provider.

How long we keep it

Profile data is kept while your account is open. Delete your account and we remove your profile, documents and contact details; billing records are retained for six years where tax law requires it.

Your rights

You have the right of access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You can download everything we hold and permanently delete your account from your account settings. You can also complain to the ICO (ico.org.uk).

Cookies and advertising measurement

We set essential cookies for sign-in and payment. Optional analytics cookies are only set if you accept them in the cookie banner; you can change your mind by clearing site data.

If you accept, we also use Google Ads measurement: when someone who clicked one of our adverts creates an account, Google receives a measurement signal (a cookie or similar identifier and the fact a sign-up happened) so we can tell which adverts work. Visitors in the UK, EEA and Switzerland stay unmeasured until they accept in the banner; rejecting limits this to anonymised, cookieless counts. See how Google handles this data.

International transfers

As a worldwide platform, agencies outside the UK/EEA may view visible profiles. Transfers rely on adequacy regulations or standard contractual clauses.