Privacy Policy

Housing-Jobs is a trading name of Face-Fit Limited, a company registered in England and Wales (No. 05032436). Registered office: c/o Price Bailey LLP, 24 Old Bond Street, London W1S 4AP. Correspondence address: 27 Old Gloucester Street, London WC1N 3AX, United Kingdom. Face-Fit Limited is registered with the UK Information Commissioner's Office under number ZB127973.

Named privacy contact: Simon Wilkins. Email privacy@housing-jobs.com for any privacy question or request, or write to us at the correspondence address above.

Our role depends on the activity:

• Controller. Face-Fit Limited is the controller for running the platform — accounts, profiles, CV storage, search, job alerts, security, billing, our own work-finding and search services, and the records we must keep as an employment agency.
• Independent controller (the advertiser). When you apply for a role, the advertising employer becomes a separate, independent controller of your application from the moment they receive it, and their own privacy notice applies to what they do with it.
• Processor (for the advertiser). For some employer dashboard features — recording applicant status such as shortlisted or rejected, sending "considered" and interview-invitation emails on the employer's instruction, and bulk CV download — we act as a processor on that employer's behalf. That processing is governed by the Article 28 data-processing terms below, which form part of every employer's contract with us.

Where we process candidate personal data on an employer's documented instructions, we: act only on those instructions unless UK law requires otherwise; ensure our staff are bound by confidentiality; apply the security measures described in section 5; engage sub-processors (hosting, database, storage and email providers) under equivalent written terms and tell employers of changes; assist the employer with data-subject requests, security-breach notification and impact assessments; notify the employer without undue delay of a personal data breach affecting their data; and on termination delete or return that data, subject to the retention obligations in section 6. Employers may audit our compliance on reasonable written notice. The subject matter is recruitment for the employer's advertised vacancies, the duration is the life of the employer's account, and the data concerns candidates who apply to that employer.

• Candidate account data: name, email address, password (stored hashed), optional phone number and LinkedIn profile URL, location, disciplines and job title interests.
• CVs and applications: uploaded CV files and their version history, the roles you apply to, covering notes, application status and any no-response reports you raise.
• Job alerts: the job titles and regions you subscribe to, and the alerts we have sent you.
• Employer data: contact name, work email, company name, company logo, billing details and the adverts you publish.
• Technical data: sign-in events, device and browser information, and security logs.

Please do not include special category data (for example health, ethnicity, religion or criminal record information) in your CV or messages unless it is genuinely relevant to the role.

• To run your account and applications — performance of a contract with you.
• To send your CV and details to an employer when you apply — performance of a contract with you, at your instruction.
• To send instant job alerts you have subscribed to — consent, withdrawable at any time from your job alerts page.
• To send service emails (confirmations, password resets, application updates, interview invitations) — performance of a contract.
• To screen uploads and prevent abuse and fraud — legitimate interests in keeping the board safe and credible.
• To take payment and keep accounting records — contract and legal obligation.

• Employers you choose to apply to — your name, contact details, application and CV, delivered by email and through their dashboard using time-limited secure links.
• Hosting, database, storage and email providers that operate the platform on our behalf under data processing terms.
• Google Maps services for geocoding job locations and calculating drive times.
• Stripe for card payments from employers. We never see or store full card numbers.
• An AI provider where an employer chooses to draft advert copy with AI. Only the advert details they enter are sent; candidate data is never used for this.

We do not sell your data, and we do not share CVs with employers you have not applied to.

Accounts require email confirmation and a password of at least eight characters including a special character, and two-factor authentication is available. CVs and logos are held in private storage and are only ever released through short-lived signed links. Uploaded CVs are restricted to PDF, DOC and DOCX and are scanned for images and abusive content before they reach an employer.

• Account, profile and CV data: for as long as your account is open, then removed from the live service on closure.
• You can delete individual CV versions yourself at any time from your profile.
• Applications and their status history: retained while the account exists so both sides can track them.
• Work-finding records we must keep as an employment agency (the vacancy, the hirer, the introduction and its date, and the terms we agreed with you): at least 12 months from the later of the date the record was created and the date we last provided a work-finding service, as required by the Conduct of Employment Agencies and Employment Businesses Regulations 2003. These records survive account closure, are restricted to compliance use only, and are deleted at the end of that period.
• Complaint, content-report and moderation records, and records needed to establish or defend a legal claim: up to six years.
• Job adverts and employer records: for the life of the account plus any statutory accounting period.
• Invoices and payment records: six years, as required by UK tax law.

Deleting your account therefore removes you from the live service and from employer-facing views, but does not erase records we are legally required to retain. We will always tell you if we cannot fully action an erasure request and why.

Our providers may process data outside the UK. Where they do, transfers are covered by UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

You have the right to access your data, correct it, delete it, restrict or object to processing, withdraw consent, and receive a portable copy. Email hello@housing-jobs.com and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

See also our Cookie Policy and Terms of Use.