Privacy Policy

1. Who we are (data controller)

For the personal data described in this policy, the controller is Africore Labs Ltd, a company registered in England and Wales under company number 17253591, registered office Suite Ra01, 195-197 Wood Street, London E17 3NU, United Kingdom (“AfriHire”, “we”, “us”). Our registration with the UK Information Commissioner’s Office (ICO) is in progress, and we will publish our registration reference here once it is confirmed. For any privacy question or to exercise your rights, contact us at help@afrihire.co.uk.

Note: where an Employer receives your application or views your profile, that Employer is an independent controller of your data and is responsible for its own handling of it.

2. The data we collect

• Account & identity data: name, email address, password (stored hashed) or social-login identifier (e.g. Google, LinkedIn), account type (job seeker or employer), and role/region preferences.
• Profile & CV data (job seekers): your uploaded CV and any work history, education, skills, location, visa/eligibility details, salary expectations, and target markets you provide. CVs are free text and may contain additional personal information you choose to include.
• Employer & company data: company name, industry, website, location, logo, contact details, job listings, and applicant-pipeline activity.
• Application & activity data: roles you save, apply to, or are matched with; alerts; messages; and your interactions with listings and AI features.
• Payment data: subscription plan, billing status, and transaction references. Card payments are handled by our payment processors — we do not store full card numbers.
• Technical & usage data: IP address, device and browser information, log data, and essential cookie identifiers (see section 9).
• Communications: messages you send us (e.g. support requests) and your contact/marketing preferences.

3. How we collect it

• Directly from you — when you register, build a profile, upload a CV, post a job, subscribe, or contact us.
• Automatically — through essential cookies and server logs as you use the Platform.
• From third parties — e.g. social-login providers if you sign in with them, and payment processors confirming a transaction.

4. How and why we use your data (lawful bases)

Under the UK GDPR we must have a lawful basis for using your data. We rely on the following:

• To provide the Platform and your account — create and manage your account, host your profile/CV, run job search and applications. Basis: performance of a contract.
• To provide Auto-Apply — generate drafts and, only where you explicitly enable external submission, transmit your CV, contact details, saved screening answers and generated cover letter to supported employers or their application-system provider. Basis: contract and consent for optional external submission.
• To match and rank roles for you, generate sponsorship signals, and personalise results. Basis: legitimate interests (delivering a relevant, useful service) and/or contract.
• To power AI features (AI matching, cover letters, career coach, mock interviews) using your inputs. Basis: contract and legitimate interests; consent where required.
• To process payments and manage subscriptions. Basis: contract and legal obligation.
• To send service messages (e.g. account, security, and application updates) and job alerts you set up. Basis: contract / legitimate interests; consent for optional marketing.
• To keep the Platform secure, prevent fraud and abuse, and improve our services. Basis: legitimate interests.
• To comply with legal obligations and to establish, exercise, or defend legal claims. Basis: legal obligation / legitimate interests.

Where we rely on legitimate interests, we have balanced those interests against your rights. You can object to such processing (see section 8). Where we rely on consent, you can withdraw it at any time.

5. Sensitive (special category) data

We do not ask you to provide special category data (such as data revealing health, ethnicity, religion, or political opinions). However, a CV is free text and may inadvertently contain such information. Please avoid including sensitive information you do not want processed. Where you choose to include it, you consent to us processing it as part of operating your profile and applications; you can edit or remove it at any time.

6. AI processing of your data

• To provide AI features, we process your inputs (which may include CV and profile content) using trusted third-party AI providers acting as our processors.
• We do not use your data to train third-party public AI models, and we instruct our AI providers to process data only to deliver the feature you requested.
• Job matching uses automated processing to rank roles, but it does not make decisions that produce legal or similarly significant effects about you; hiring decisions are made by employers, not by AfriHire. You can contact us if you have questions about how a result was produced.

7. Who we share data with

We share personal data only as needed, with:

• Employers / external application sites — when you apply to or are matched with a role, or make your profile discoverable. Many applications complete on a third-party site governed by its own privacy policy.
• For Auto-Apply external submission, sharing occurs only while your external-submission permission is active. Turning it off stops new transmissions but does not retract applications already received by an employer.
• Service providers (processors) acting on our instructions, including: cloud hosting and database providers (e.g. Supabase), payment processors (e.g. Stripe and Flutterwave), AI providers, email/notification providers, and analytics or error-monitoring tools where used.
• Professional advisers and authorities — where required by law, regulation, or legal process, or to protect our rights, users, or the Platform.
• Successors — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

We do not sell your personal data.

8. International transfers

Some of our providers process data outside the UK. Where we transfer personal data internationally, we rely on an appropriate safeguard — such as UK “adequacy” regulations, the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses with the UK Addendum — so that your data continues to receive an essentially equivalent level of protection. You can ask us for details of the safeguards used.

9. How long we keep data

We keep personal data only for as long as necessary for the purposes above. In general: account and profile data are kept while your account is active; if you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records (for example, transaction records for tax/accounting, or data needed to handle disputes or comply with the law). Backups are overwritten on a rolling basis.

10. Your rights

Subject to conditions in the law, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data (“right to be forgotten”) in certain circumstances;
• Restrict or object to processing, including processing based on legitimate interests and direct marketing;
• Data portability — receive certain data in a portable format;
• Withdraw consent at any time where we rely on consent;
• Not be subject to solely automated decisions with legal or similarly significant effects.

You can exercise many of these directly in your account settings, or by emailing help@afrihire.co.uk. We will respond within the timeframes required by law (usually one month). There is normally no charge.

11. Cookies

We use essential cookies that are necessary to keep you signed in, remember your session, and keep the Platform secure. We do not use third-party advertising cookies. If we introduce optional analytics or performance cookies in future, we will ask for your consent first. You can also manage cookies through your browser settings, though disabling essential cookies may stop parts of the Platform working.

12. Marketing & job alerts

If you opt in to job alerts or updates, we’ll send them to your email. You can unsubscribe at any time using the link in the email or in your account settings. We’ll still send essential service messages (e.g. about your account, security, or applications) that aren’t marketing.

13. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and hosting with reputable providers. No system is completely secure; if a breach occurs that is likely to affect your rights, we will notify the ICO and, where required, you, in line with our legal obligations.

14. Children

The Platform is intended for users aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

15. Third-party sites

The Platform links and redirects to third-party websites (such as employer careers pages and external job boards). We are not responsible for their privacy practices; please review their policies before providing them with your data. Where you enable Auto-Apply external submission, AfriHire acts on your instruction to provide the application data you saved; the receiving employer then becomes responsible for its use of that data.

16. Changes to this policy

We may update this policy from time to time. We’ll change the “Last updated” date and, for material changes, take reasonable steps to notify you. Your continued use of the Platform after changes take effect means you accept the updated policy.

17. Contact us & complaints

For any privacy question or to exercise your rights, contact us at help@afrihire.co.uk or write to Africore Labs Ltd, Suite Ra01, 195-197 Wood Street, London E17 3NU, United Kingdom.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113. We’d appreciate the chance to address your concerns first.