HireHub

Data Protection / GDPR

1. Introduction

HireHub (“HireHub”, “we”, “us”, “our”) is committed to protecting personal data and upholding the principles of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This page explains how we approach data protection compliance across the HireHub website (www.hirehub.cloud), application (app.hirehub.cloud), and related services (the “Platform”).

This document should be read alongside our Privacy Policy, Cookie Policy, and AI Usage Policy.

2. Data Controller Information

HireHub acts as the Data Controller for personal data processed through the Platform, except where stated otherwise.

  • Company Name: HireHub
  • Registered Office: HireHub Digital Service Ltd, 142b Station Road, London, England, E4 6AN
  • Company Registration Number: [Insert Number]
  • Data Protection Contact: [email protected]

Where HireHub processes personal data on behalf of Employers, we may act as a Data Processor under a separate Data Processing Agreement.

3. UK GDPR Compliance Framework

HireHub processes personal data in accordance with the UK GDPR principles:

  • Lawfulness, fairness and transparency
  • Purpose limitation
  • Data minimisation
  • Accuracy
  • Storage limitation
  • Integrity and confidentiality
  • Accountability

We maintain internal controls and governance measures to ensure compliance with these principles.

4. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:
4.1 Contractual Necessity
To provide platform services, including account creation, job matching, and subscription management.
4.2 Legitimate Interests
To improve services, prevent fraud, and ensure platform security, provided such interests do not override user rights.
4.3 Consent
For marketing communications and optional services where consent is required.
4.4 Legal Obligation
To comply with statutory or regulatory requirements.

5. Categories of Personal Data

Depending on your interaction with the Platform, we may process:

Identity Data
Name, profile photo, verification status.

Contact Data
Email address, phone number, and postal address.

Employment Data
CV content, skills, experience, qualifications.

Employer Data
Company name, company registration number, job listings.

Verification Data
Identity verification results, timestamps.

Payment Data
Billing details and transaction records (processed via secure third-party providers).

Technical Data
IP address, device type, browser information, and usage logs.

We do not intentionally process special category data unless voluntarily provided by users.

6. Purpose of Processing

We process personal data to:

  • Create and manage user accounts
  • Facilitate AI job matching
  • Enable job postings and applications
  • Provide verification services
  • Process payments
  • Prevent fraud and misuse
  • Maintain platform security
  • Improve service performance
  • Comply with legal obligations

7. Data Minimisation & Retention

HireHub collects only data necessary for the purposes outlined above.
We retain personal data:

  • For as long as accounts remain active
  • For a reasonable period following account closure
  • As required for tax, regulatory, or legal purposes

Users may request deletion of their account and associated personal data, subject to legal retention requirements.

8. International Data Transfers

Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are implemented, including:

  • Adequacy decisions
  • Standard contractual clauses
  • Contractual protections with third-party processors

9. Third-Party Processors

HireHub engages third-party service providers for:

  • Payment processing
  • Identity verification
  • Hosting and infrastructure
  • Analytics services
  • Security monitoring

Data Processing Agreements are in place where required under UK GDPR.

10. Security Measures

We implement appropriate technical and organisational measures, including:

  • Multi-factor authentication (MFA)
  • Encryption of data in transit
  • Role-based access controls
  • Monitoring and logging
  • Regular system testing
  • Backup and disaster recovery procedures

These measures are designed to protect personal data against unauthorised access, loss, misuse, or disclosure.

11. Data Subject Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Request data portability
  • Withdraw consent where applicable
  • Lodge a complaint with the Information Commissioner’s Office (ICO)


ICO Website: https://www.ico.org.uk

To exercise your rights, contact: [email protected]

We will respond to requests within the statutory timeframe.

12. Automated Decision-Making & AI

HireHub uses AI systems to assist in job matching and CV analysis.
These systems:

  • Provide recommendations
  • Do not make final employment decisions
  • Operate under human oversight

Users may request further information about automated processing in accordance with UK GDPR Article 22.

13. Data Breach Procedures

HireHub maintains internal procedures for identifying and responding to data breaches.
Where required by law:

  • The Information Commissioner’s Office will be notified
  • Affected individuals will be informed without undue delay

14. Data Protection Governance

HireHub maintains:

  • Internal data protection policies
  • Staff awareness procedures
  • Risk assessment processes
  • Records of processing activities

Where required, we conduct Data Protection Impact Assessments (DPIAs).

15. Updates to This Page

We may update this Data Protection & GDPR page periodically.

Any changes will be published with an updated effective date.

16. Contact Information

For data protection enquiries:

Email: [email protected]
Registered Office: HireHub Digital Service Ltd, 142b Station Road, London, England, E4 6AN