Privacy notice

Last updated 3 September 2026.

JobFeedz is operated by Mako Digital, 6 Seven Stars Road, Wigan, WN3 5AT. Questions and data-rights requests can be sent to hello@makodigital.co.uk.

What we collect

We collect account details, contact information, candidate introductions, optional CVs and voice notes, job posts, application decisions, device push subscriptions, security logs and information employers submit when claiming or posting a vacancy. Your analytics choice is stored in your browser. If you consent, JobFeedz stores daily aggregate event counts without an account ID, device identifier or raw IP address in the analytics record. If you add a passkey, we store its public credential, a random account handle and use dates. Face, fingerprint and device PIN data stay on your device and are never sent to JobFeedz.

Why we use it

We process information to provide requested services, protect the platform, communicate application decisions, meet legal obligations and pursue legitimate interests in operating and improving JobFeedz. Cloudflare Turnstile processes limited device and connection information to prevent automated sign-up abuse. Optional aggregate analytics remain off unless you accept them; advertising and cross-site profiling are not part of JobFeedz.

Imported vacancies and employer outreach

We receive vacancy information from authorised sources, retain its provenance and link to the original application route. Employer contact research is limited to published contacts belonging to verified corporate subscribers. Every outreach record stores its source and a purpose, necessity and balancing check. We do not send this outreach to sole traders or individual subscribers without consent. Opt-outs are permanently suppressed.

Sharing

Candidate introductions are shared only with the relevant direct employer or recruiter. Imported-job applications continue with the named source. Service providers receive only the information needed to host, secure or deliver the service, including email, push notification and bot-protection providers when those features are used.

How long we keep it

Single-use sign-in links are deleted after 24 hours. Revoked push subscriptions are deleted after 30 days. Decision notifications and completed shot content are removed or anonymised after 12 months. Aggregate analytics are kept by day without a person or device identifier. Expired vacancies immediately leave active discovery and lose job structured data. Active passkey public credentials remain until you remove them or the account is deleted. Suppression information is kept so we can honour outreach opt-outs. Account profile information stays while the account is active or until a valid deletion request, subject to records we must keep for legal claims, fraud prevention or another documented obligation.

Your rights

You may request access, correction, deletion, restriction, portability or objection, and may complain to the UK Information Commissioner. You have an absolute right to object to direct marketing. Consent can be withdrawn without affecting earlier lawful processing.