Privacy & GDPR Policy

Last updated: 2026-09-27

Jaayton Wells Limited (the "Controller") is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and equivalent international data-protection regulations.

Lawful bases for processing

• Consent — collected explicitly at registration.
• Contract — to provide the recruitment services you request.
• Legitimate interests — for fraud prevention and platform integrity.
• Legal obligation — where required by applicable law.

Data we collect

• Account: name, email, role, hashed password.
• Profile: headline, skills, experience, location, resume URL.
• Activity: applications, audit log entries, IP address.

Your rights

• Right of access — export your data from your dashboard.
• Right to rectification — edit your profile at any time.
• Right to erasure ("right to be forgotten") — request deletion.
• Right to data portability — JSON export available.
• Right to object and restrict processing.

Security measures

Aligned with ISO 27001 controls — including TLS encryption in transit, hashed credentials, role-based access control, optional two-factor authentication, audit logging and least-privilege architecture on the Cloudflare edge network.

Contact

Data Protection Officer: dpo@jaaytonwells.com.