1. Who is responsible
[OPERATOR LEGAL NAME] (company number [COMPANY NUMBER]) operates Cambridge Careers and is the controller for the personal data described in this notice. Its registered office is [REGISTERED OFFICE] and its VAT number is [VAT NUMBER]. Privacy questions and rights requests can be sent to hello@cambridge.careers.
2. Information we collect
Employer accounts and job listings
We collect employer email addresses, organisation and contact details, job content, application URLs, moderation correspondence and account activity. Authentication uses one-time magic links sent by email; we do not ask employers to create passwords.
Job alerts
We collect the email address and search preferences used for an alert, together with confirmation, delivery and unsubscribe records. Alerts require email confirmation before they are activated and every alert provides an unsubscribe route.
Payments and service records
We retain listing, promotion, invoice and payment-status records. Card details are entered with Stripe and are not stored by Cambridge Careers. We also process essential technical logs, security events and support messages needed to operate and protect the service.
Security and abuse prevention
We record a one-way hash of your IP address to rate-limit sign-in and form abuse. The rate-limit record does not contain the raw IP address.
3. Why we use personal data
We use personal data where necessary to:
- provide employer accounts, listings and paid promotion;
- send confirmed job alerts and process unsubscribe requests;
- moderate jobs, prevent abuse and keep the platform secure;
- respond to support, privacy and account enquiries; and
- meet accounting, tax, fraud-prevention and legal obligations.
Depending on the activity, our lawful basis is performance of a contract, consent, compliance with a legal obligation, or our legitimate interests in operating a safe and useful local job board. You may withdraw consent for job alerts at any time by unsubscribing.
4. Service providers
We use specialist providers to deliver the service, including:
- Stripe for payment processing;
- Resend for magic-link, job-alert and transactional email delivery;
- Fantastic.jobs, the licensed job-data provider that supplies imported listings;
- Railway for application and database hosting;
- professional advisers or authorities where disclosure is legally required.
These providers process data under their own terms and data-protection commitments. Where a restricted transfer is made outside the UK, we use an approved safeguard such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. You can ask for a copy of the relevant safeguard by emailing hello@cambridge.careers; commercially confidential details may be redacted.
5. Cookies and tracking
Essential session and security technology is used to sign users in and protect forms. Product analytics is currently switched off. We do not use advertising trackers, sell personal data or build profiles for third-party advertising.
6. Retention and security
We keep statutory financial records for six years. Account and listing records are normally kept for six years after the account closes or the listing expires so we can handle contractual claims, complaints and fraud enquiries. Alert subscriptions remain active until you unsubscribe; consent and delivery records are kept for two years after the last alert activity, while a minimal suppression record is kept for as long as needed to honour the opt-out. We use access controls, signed links and operational safeguards designed to protect the data, but no online service can promise absolute security.
7. Your rights
UK data-protection law gives you rights to access a copy of your data, correct inaccurate data, ask us to erase data, restrict its use, object to some processing, receive portable data and withdraw consent. Exercise these rights by emailing hello@cambridge.careers. We will respond within one month unless the law permits an extension, in which case we will explain why. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.
8. Changes to this notice
We update this notice when the service or its data practices change. The version number and last-updated date are shown at the top.