Privacy Policy

QuicKEY Job ("QuicKEY", "we", "us", or "our") is operated by Rexish Ltd, a company registered in England and Wales (company number: [insert company number]). For the purposes of UK GDPR and the EU GDPR, Rexish Ltd is the data controller responsible for your personal data when you use the QuicKEY Job platform (the "Platform").

This policy applies to job seekers, employers, and anyone else who visits or creates an account on the Platform. It should be read alongside our Terms of Service and Cookie Policy.

We collect the following categories of personal data:

• Account data — name, email address, phone number, and password (stored as a salted hash, never in plain text).
• Profile data — skills, work history, CV/resume, profile photo, and any other details you choose to add to your profile.
• Job and application data — job listings you post or apply to, application content, cover letters, and messages exchanged with other users through the Platform.
• Location data — an address or postcode you provide for a job listing, and the resulting coordinates, used to match jobs by distance. We do not continuously track your device location.
• Verification and background check data — a selfie photo, and images of a government-issued ID document (UK driving licence, national ID, or passport). See Section 5 for how this category is handled specifically.
• Usage data — pages visited, actions taken, approximate IP-based location, device type, and browser information, collected automatically when you use the Platform.
• Communications you send us — messages sent via our contact form, feedback submissions, and any correspondence with support.

Under UK GDPR and EU GDPR, we rely on the following legal bases depending on the activity:

• Performance of a contract — processing your account, profile, and application data so we can provide the Platform to you.
• Legitimate interests — securing the Platform, preventing fraud and abuse, and improving our services, balanced against your rights and interests.
• Consent — where we ask for it explicitly, such as before you submit identity verification documents, or for optional marketing communications. You may withdraw consent at any time.
• Legal obligation — where we're required to process or retain data to comply with applicable law.

We use your information to:

• Match job seekers with relevant, nearby jobs and employers
• Operate, maintain, secure, and improve the Platform
• Verify the identity and eligibility of jobseekers and employers before they can apply for or post jobs
• Communicate with you about your account, applications, or important updates
• Detect and prevent fraud, abuse, and security incidents
• Respond to feedback, support requests, and contact form submissions
• Comply with our legal obligations

Before a user can apply for or post a job, we require profile verification and a background check. This is a deliberately narrow, purpose-limited use of sensitive data, and we want to be specific about it:

• We collect a selfie and a photo of a government-issued ID document (front and back, where applicable) solely to confirm you are who you say you are, and to carry out the background check required to use certain features of the Platform.
• We do not use this data for advertising, profiling, or any purpose unrelated to identity verification and eligibility screening.
• Verification documents are stored in a separate, restricted data store from your main profile — not mixed with your general account data — and are accessible only to authorised reviewers.
• When you apply for a job or a job seeker applies to your listing, the other party sees only your verification status (for example, "Verified") — they never see your submitted ID documents or selfie.
• Background check review is carried out by our own verification team, not an external consumer-reporting agency, and every submission is reviewed by a human before a decision is made (see Section 12).

When you apply for a job, your relevant profile and application details are shared with the employer. When you post a job, your listing and business name are visible to job seekers browsing the Platform. We do not sell your personal data to third parties, and we do not share your verification documents with other users under any circumstances.

We use trusted third-party service providers ("sub-processors") to help us run the Platform, including:

• Supabase — database hosting and authentication.
• Cloudflare — content delivery, security, and object storage for documents and profile photos (Cloudflare R2), accessed only via private, time-limited links — never a public bucket.
• Brevo — transactional email delivery (e.g. verification status updates, notifications).

Each sub-processor is contractually required to apply appropriate technical and organisational security measures to protect your data. That said, we want to be direct about where responsibility sits: Rexish Ltd remains the data controller and is responsible to you for your personal data, even where a sub-processor is responsible for the underlying infrastructure. Using a third-party host does not transfer our legal responsibility to you. If a sub-processor experiences a security incident affecting your data, we will assess and, where required by law, notify affected users and the relevant supervisory authority in line with our obligations under UK/EU GDPR.

We use a minimal, privacy-first approach to cookies and analytics. Full details, including exactly what is (and isn't) set on your device, are in our Cookie Policy.

We retain account and profile data for as long as your account is active, or as needed to provide the Platform and meet our legal obligations. If you delete your account, we will delete or anonymise your personal data within a reasonable period, except where we're required to retain certain records for legal, fraud-prevention, or dispute-resolution purposes.

Verification documents (ID images and selfies) are retained only for as long as necessary to complete and support your verification status, after which the underlying documents are securely deleted. We retain a record of your verification status (verified/not verified, cleared/not cleared) for longer, as this is necessary to operate the eligibility gate on an ongoing basis.

You can request deletion of your account and associated data at any time by contacting us — see Section 16.

We apply industry-standard technical and organisational measures to protect your data, including encryption in transit, access controls, and private, presigned-URL-only storage for sensitive documents. No system connected to the internet can be guaranteed completely secure, and we encourage you to use a strong, unique password and enable any additional account protections we offer.

Some of our sub-processors may process data outside the UK or EEA, including in the United States. Where this happens, we rely on appropriate safeguards recognised under UK and EU data protection law — such as Standard Contractual Clauses or an equivalent adequacy mechanism — to ensure your data continues to receive a comparable level of protection.

As part of identity verification, we may use automated tools to assist in comparing your selfie against your submitted ID document. However, we do not make solely automated decisions that have a legal or similarly significant effect on you — every background check submission is reviewed by a member of our verification team before a final decision (cleared or flagged) is made. If you believe a verification decision was made in error, you can request a human review by contacting us.

Under UK GDPR, the Data Protection Act 2018, and (where applicable) the EU GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Request a portable copy of your data
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office (ICO); if you're in the EU, your local data protection authority

To exercise any of these rights, contact us using the details in Section 16. We will respond within the timeframes required by law.

QuicKEY Job is intended for users aged 16 and over, in line with our Terms of Service. We do not knowingly collect personal data from anyone under 16. If we become aware that we have inadvertently collected such data, we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes to the Platform or our legal obligations. Where a change is material, we'll notify you through the Platform or by email before it takes effect. The "Effective date" at the top of this page shows when it was last updated.

For privacy questions, requests, or to exercise your rights, contact us at info@quickeyjob.com. If you're not satisfied with our response, you have the right to lodge a complaint with the ICO or your local supervisory authority.