Privacy Policy
Last updated: 26/11/2025
1. Who We Are (Data Controller)
Hire Remote ("we", "us", "our") is the data controller for this website. We are responsible for how your personal data is collected and used.
Contact Information:
Email: [email protected]
Website: https://hire-remote.com
2. What Data We Collect
We collect the following types of personal data:
Account Information
- Name and email address
- Password (encrypted)
- Profile picture and bio
- Location and timezone
- Skills and experience
Job Applications
- Cover letter and resume/CV
- Application answers
- Eligibility information
- Work authorization status
Payment Information
- Billing address
- Payment amount and date
- Payment confirmation (via Stripe)
Usage Data
- IP address and browser information
- Pages visited and actions taken
- Device and operating system
- Session cookies and analytics
3. How We Use Your Data
We use your personal data for the following purposes:
| Purpose | Legal Basis | Retention Period |
|---|---|---|
| Job applications | Contract performance | 12 months, then auto-anonymised |
| User account management | Contract performance | Until account deletion |
| Payment processing | Contract performance | 6 years (tax compliance) |
| Marketing communications | Consent | Until consent withdrawn |
| Website analytics | Legitimate interest | 14 months |
4. Third-Party Services
We share your data with the following third parties:
Stripe (Payment Processing)
We use Stripe to process payments. They receive your payment information but never share your full card details with us.
Render (Hosting)
Our website is hosted on Render. They process data on our behalf.
5. Data Security
- All data is transmitted over HTTPS (encrypted connection)
- Passwords are hashed using Argon2id algorithm
- CVs and sensitive documents are stored with AES-256 encryption
- We implement strict access controls for sensitive data
- Regular security audits and monitoring
- Staff training on data protection
6. Your Rights
Under GDPR, you have the right to:
- Access: Request a copy of all data we hold about you
- Rectification: Correct inaccurate information
- Erasure: Request deletion of your data ("right to be forgotten")
- Restrict processing: Limit how we use your data
- Data portability: Receive your data in a structured format
- Object: Object to processing based on legitimate interests
- Withdraw consent: Unsubscribe from marketing communications
To exercise these rights, contact us at:
7. Data Retention
| Data Type | Retention Period | Action After Expiry |
|---|---|---|
| Job applications | 12 months | Auto-anonymise candidate data |
| Employer accounts | Until deletion request | Hard delete on request |
| Payment records | 6 years | Required by UK tax law |
| Analytics data | 14 months | Auto-expiry in analytics platform |
8. International Data Transfers
Your data may be transferred to and processed in countries outside the EU/UK (e.g., USA for hosting on Render, payment processing via Stripe). We ensure appropriate safeguards are in place through Standard Contractual Clauses (SCCs) and UK International Data Transfer Agreement (IDTA).
9. Complaints
If you have concerns about how we handle your data, you can:
- Contact our Data Protection Officer: [email protected]
- Lodge a complaint with your local data protection authority (UK: ICO, EU: local DPA)
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
Questions?
If you have any questions about this Privacy Policy, please contact us at [email protected]