Privacy notice

Last updated 8 September 2026.

JobFeedz is operated by Mako Digital, 6 Seven Stars Road, Wigan, WN3 5AT. Questions and data-rights requests can be sent to hello@makodigital.co.uk.

What we collect

We collect account details, contact information, candidate introductions, optional CVs and voice notes, job posts, application decisions, device push subscriptions, security logs and information employers submit when claiming or posting a vacancy. Your analytics choice is stored in your browser. If you accept analytics, Google Analytics 4 receives page views, broad interaction events, cookie or client identifiers, device and browser information and approximate location derived from connection data. Advertising signals and ad personalisation are disabled. JobFeedz also stores daily aggregate event counts without an account ID, device identifier or raw IP address in that local analytics record. If you add a passkey, we store its public credential, a random account handle and use dates. Face, fingerprint and device PIN data stay on your device and are never sent to JobFeedz.

Why we use it

We process information to provide requested services, protect the platform, communicate application decisions, meet legal obligations and pursue legitimate interests in operating and improving JobFeedz. Cloudflare Turnstile processes limited device and connection information to prevent automated sign-up abuse. Google Analytics and local aggregate analytics remain off unless you accept them; JobFeedz does not use advertising or cross-site profiling.

Imported vacancies and employer outreach

We receive vacancy information from authorised sources, retain its provenance and link to the original application route. We do not contact an original listing provider where the feed contract prohibits that activity, including vacancies supplied by Adzuna. Any other employer outreach requires explicit source permission, a published corporate-subscriber contact and a recorded purpose, necessity and balancing check. We do not send this outreach to sole traders or individual subscribers without consent. Opt-outs are permanently suppressed.

Sharing

Candidate introductions are shared only with the relevant direct employer or recruiter. Imported-job applications continue with the named source. Service providers receive only the information needed to host, secure or deliver the service, including Google for consented analytics, and email, push-notification and bot-protection providers when those features are used.

How long we keep it

Single-use sign-in links are deleted after 24 hours. Revoked push subscriptions are deleted after 30 days. Decision notifications and completed shot content are removed or anonymised after 12 months. Local aggregate analytics are kept by day without a person or device identifier; Google Analytics retention is controlled in the linked GA4 property. Expired vacancies immediately leave active discovery and lose job structured data. Active passkey public credentials remain until you remove them or the account is deleted. Suppression information is kept so we can honour outreach opt-outs. Account profile information stays while the account is active or until a valid deletion request, subject to records we must keep for legal claims, fraud prevention or another documented obligation.

Your rights

You may request access, correction, deletion, restriction, portability or objection, and may complain to the UK Information Commissioner. You have an absolute right to object to direct marketing. Consent can be withdrawn without affecting earlier lawful processing.