Legal
Privacy Policy
Plain-English summary: JobForesight collects only what it needs — your job title, years of experience, and (if you join the waitlist or buy) your email. We never sell your data. We use Stripe for payments so your card details never touch our servers. You have full rights to access and delete your data at any time.
1. Who we are
JobForesight ("we", "us", "our") is operated by Solid Computing Ltd, trading as JobForesight, registered at Apollo House, Hallam Way, Whitehills Business Park, Blackpool, United Kingdom, FY4 5FS, United Kingdom.
We are the data controller for personal data processed through jobforesight.com (the "Service").
Contact: For any privacy enquiry write to privacy@jobforesight.com.
We are registered with the UK Information Commissioner's Office (ICO). ICO registration number: TBA.
2. What data we collect and why
2.1 Data you provide directly
| Data | When collected | Purpose | Legal basis (UK/EU GDPR) |
|---|---|---|---|
| Job title | When you use the free tool | Calculate AI exposure score | Legitimate interests (providing the service) |
| Years of experience | When you use the free tool | Seniority-adjusted scoring | Legitimate interests |
| Email address | Waitlist sign-up or paid purchase | Send results, Blueprint PDF, service updates | Contract performance / Consent (marketing) |
| Payment information | Checkout (£24 Blueprint) | Process payment — handled entirely by Stripe; we never see card data | Contract performance |
2.2 Data collected automatically
| Data | How | Purpose |
|---|---|---|
| IP address | AWS CloudFront / server logs | Security, fraud prevention, broad geo-location (country level only) |
| Browser & device type | HTTP headers | Rendering optimisation |
| Pages visited, time on page, referrer | Analytics cookies (with consent) | Understand usage patterns, improve the product |
| Search queries entered (job title only) | Application logs | Improve occupation matching; aggregated/anonymised |
We do not collect: names, phone numbers, national ID numbers, health data, biometric data, or data from children under 16.
3. Cookies
We use cookies and similar technologies. You can manage your preferences using the cookie banner when you first visit, or at any time via our Cookie Policy page.
Cookie categories we use
- Essential — required for the site to function (session, CSRF protection). Always active.
- Analytics — anonymised usage data (e.g. Google Analytics with IP anonymisation). Only set with your consent.
- Marketing — currently not in use. Will only be activated with your explicit consent.
4. How we use your data
- Delivering the AI exposure score and Career Pivot Blueprint
- Sending your purchased Blueprint PDF via email (AWS SES)
- Responding to support requests
- Sending service-related updates (e.g. major changes to scores or methodology) — you can opt out at any time
- Aggregated, anonymised product analytics (never individually identifiable)
- Legal compliance and fraud prevention
We do not use your data for automated decision-making that produces legal or similarly significant effects on you.
5. Who we share data with
We only share data with trusted third-party processors who are contractually bound to protect it:
| Processor | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Hosting (Lambda, S3, CloudFront, DynamoDB, SES) | EU-West-1 (Ireland) / UK |
| Stripe, Inc. | Payment processing | USA (adequacy / SCCs) |
| Google Analytics | Aggregated usage analytics (consent required) | USA (adequacy / SCCs) |
We do not sell, rent, or trade your personal data to any third party, ever.
6. International transfers
Some processors (Stripe, Google) are based in the USA. Transfers are protected by the EU–US Data Privacy Framework adequacy decision and/or Standard Contractual Clauses (SCCs). AWS data is stored in Ireland (EU) and/or UK regions by default.
7. How long we keep your data
| Data type | Retention period |
|---|---|
| Email (waitlist) | Until you unsubscribe or request deletion |
| Email + purchase record | 7 years (UK tax/accounting obligations) |
| Server access logs | 90 days |
| Analytics data | 14 months (Google Analytics default), then deleted |
| Job title / experience inputs | Not stored beyond the session unless purchased |
8. Your rights
Under UK GDPR and EU GDPR you have the following rights. Residents of other jurisdictions have equivalent rights noted below.
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data ("right to be forgotten")
- Restriction — ask us to pause processing of your data
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests or for direct marketing
- Withdraw consent — where processing is consent-based, withdraw at any time without affecting prior processing
To exercise any right, email privacy@jobforesight.com. We will respond within 30 days (UK GDPR requirement). We may ask you to verify your identity.
California residents (CCPA / CPRA)
If you are a California resident, you have the right to: know what personal information we collect and how it is used; delete your personal information; opt out of the sale or sharing of personal information (we do not sell or share your data); non-discrimination for exercising your rights.
To exercise CCPA rights, contact privacy@jobforesight.com. We will respond within 45 days.
Canadian residents (PIPEDA / Quebec Law 25)
Canadian residents have the right to access personal information held about them and to challenge its accuracy. Contact our privacy officer at privacy@jobforesight.com.
Australian residents (Privacy Act 1988)
Australian residents may request access to or correction of personal information, or lodge a complaint, by contacting us at privacy@jobforesight.com. If we cannot resolve your complaint you may refer it to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
9. Security
We implement appropriate technical and organisational measures to protect your data, including:
- HTTPS/TLS encryption in transit (enforced via CloudFront)
- Encryption at rest for DynamoDB data
- Minimal data collection by design (no card data stored — Stripe handles PCI DSS)
- Access controls: only the sole operator has access to production systems
- Regular dependency updates via CI/CD pipeline
No method of transmission over the Internet is 100% secure. In the event of a data breach that poses a high risk to your rights, we will notify you and the ICO within 72 hours as required by UK GDPR.
10. Children's privacy
JobForesight is not directed at children under the age of 16. We do not knowingly collect data from anyone under 16. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
11. Third-party links
Our service may link to third-party sites (e.g. Coursera for course recommendations). We are not responsible for their privacy practices. We encourage you to review their policies directly.
12. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you by email or a prominent notice on the site. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.
13. How to complain
If you are unhappy with how we handle your data, please contact us first at privacy@jobforesight.com. If you remain unsatisfied, you have the right to lodge a complaint with your supervisory authority:
- UK: Information Commissioner's Office (ICO) — ico.org.uk
- EU: Your local data protection authority — edpb.europa.eu
- US (California): California Privacy Protection Agency — cppa.ca.gov
- Australia: Office of the Australian Information Commissioner — oaic.gov.au
- Canada: Office of the Privacy Commissioner — priv.gc.ca