Thrive ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, applications, and services (the "Platform").
We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Thrive is the data controller responsible for your personal data.
1Data We Collect
We collect the following types of personal data depending on how you use the Platform:
Account Information
- Full name, email address, phone number
- Password (stored securely using industry-standard hashing)
- Account type (Job Seeker or Employer)
Job Seeker Profiles
- Professional profile information (job title, bio, skills, experience)
- CV/resume uploads
- Work history, certifications, and qualifications
- Location and availability status
- Profile photograph (optional)
Employer Information
- Company name, contact person, and business address
- Company description, industry, and size
- Company logo and website (optional)
- Company registration and VAT number (optional)
Job Listings
- Job titles, descriptions, requirements, and responsibilities
- Salary information and employment type
- Location and work arrangement details
Usage Data
- Pages visited, features used, and time spent on the Platform
- Search queries and filter preferences
- Device information, browser type, and IP address
- Interaction data (applications submitted, messages sent, profiles viewed)
Payment Data
- Billing name and address (for employer subscriptions)
- Payment method details are processed securely by our payment provider (Stripe) and are never stored on our servers
- Transaction history and subscription status
2How We Use Your Data
We use the data we collect for the following purposes:
Service Delivery
- Creating and managing your account
- Displaying your profile to relevant users
- Facilitating job applications and messaging
- Processing employer subscriptions and billing
Platform Improvement
- Providing personalised job recommendations
- Improving search results and matching algorithms
- Analysing usage patterns to enhance features
- Fixing bugs and improving performance
Communication
- Sending notification emails and alerts
- Subscription and billing reminders
- Platform updates and security notices
- Marketing (only with your consent)
Safety & Legal
- Preventing fraud and abuse
- Enforcing our Terms of Service
- Complying with legal obligations
- Responding to lawful data requests
Our legal bases for processing under UK GDPR include: contract performance, legitimate interests, consent, and legal obligation — depending on the specific processing activity.
4Job Seeker Data Visibility
As a job seeker, you have control over your profile visibility. You can manage these settings at any time from your Privacy Settings page:
- Profile visibility: Choose whether your profile is visible to all employers, or hidden from search (private mode)
- Contact details: Optionally hide your email and phone number until you have connected with an employer
- Availability status: Control whether your availability is shown publicly on your profile
- Search results: Opt out of appearing in employer search results
- Profile bookmarking: Choose whether employers can save your profile to a shortlist
Even with a public profile, your data is only accessible to registered employers with verified accounts. Anonymous visitors cannot see your full profile or contact information.
5Data Storage & Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it:
- All data is encrypted in transit using TLS/SSL encryption
- Passwords are securely hashed and never stored in plain text
- Database access is restricted using row-level security policies
- Payment card details are handled exclusively by Stripe and never touch our servers
- Regular security audits and vulnerability assessments
- Access to personal data is limited to authorised personnel only
- Automated backups with encryption at rest
While we strive to protect your data, no method of electronic storage or transmission is 100% secure. If you become aware of any security breach, please contact us immediately.
6Data Retention
We retain your personal data in accordance with the following schedule:
You can request earlier deletion of your data at any time (see below), except where we are legally required to retain it.
7Your Rights Under UK GDPR
Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the following rights regarding your personal data:
Right to Access
Request a copy of all personal data we hold about you
Right to Rectify
Request correction of any inaccurate or incomplete data
Right to Erase
Request deletion of your personal data ("right to be forgotten")
Right to Restrict
Request that we limit how we process your data
Right to Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing based on legitimate interests or for marketing
You also have the right to withdraw consent at any time where we rely on consent as the legal basis for processing (e.g., marketing emails). Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
How to exercise your rights
You can manage most settings directly from your Privacy Settings page, or use the Download My Data feature to export your data. For any other requests, email us at privacy@thrivecareer.co.uk. We will respond within 30 days.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
9Children's Privacy
Thrive is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children under 16 years of age.
If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete that data as quickly as possible. If you believe a child under 16 has provided us with personal data, please contact us immediately at privacy@thrivecareer.co.uk.
10International Transfers
Your data is primarily stored and processed within the United Kingdom and European Economic Area (EEA). Where data is transferred outside the UK/EEA (for example, to cloud infrastructure providers), we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner
- Transfers to countries with an adequacy decision from the UK Government
- Binding corporate rules where applicable
You can contact us for more information about the specific safeguards applied to international transfers of your data.
11Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
Material changes will be communicated to you via email or Platform notification at least 14 days before taking effect. We will also update the "Last updated" date at the top of this page.
We encourage you to review this Privacy Policy periodically. Continued use of the Platform after changes take effect constitutes your acknowledgement of the updated policy.
12Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection team:
Thrive — Data Protection
Email: privacy@thrivecareer.co.uk
If you wish to make a complaint about how we handle your data, you can also contact the Information Commissioner's Office:
This Privacy Policy is governed by and construed in accordance with the laws of England and Wales. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of England and Wales.