Jobnod Privacy Policy

Last updated: 27 October 2026 · Draft for review

Draft. Complete every [bracketed item], delete any optional paragraph that does not apply to Jobnod, and remove this note and the “Drafting notes” section at the end before publishing. Check that each statement matches how Jobnod really works, and have a UK data protection adviser review the final version.

The short version

• Jobnod is an online marketplace that connects people who need a job done (“clients”) with service professionals.

• We collect what you give us, information about how you use Jobnod and, for professionals, identity and verification documents.

• We use it to run your account, verify professionals, connect clients and professionals, handle payments, keep Jobnod safe and, if you choose, keep you up to date.

• We share it only with the other person on a job, the companies that help us run Jobnod, and authorities where the law requires. We do not sell your personal data.

• You can ask to see, correct or delete your information, and you can complain to us or to the regulator. See sections 12 and 13.

1. Who we are

Jobnod is run by [Company legal name] (“Jobnod”, “we”, “us”), a company registered in [England and Wales] under company number [number], with its registered office at [address]. We are registered with the ICO, the UK data protection regulator, under registration number [number].

We are the “controller” of the personal data described in this policy, which means we decide how and why it is used.

Contact: [privacy@jobnod.co.uk] · [postal address] · [name of your Data Protection Officer or privacy lead, if you have one]

This policy applies to everyone who uses jobnod.co.uk and our related services (together, “Jobnod”): visitors, clients, professionals, blog readers and anyone who contacts us. You must be 18 or over to create an account.

2. Information we collect

Information you give us

• Account details: your name, email address, username, password and UK mobile number.

• Professional profiles: photo, services offered, description, experience, qualifications, insurance, service area, prices, availability, examples of your work, and links to your website or social media.

• Verification information (professionals): identity documents such as a passport or driving licence, proof of address, trade registrations, insurance certificates, [a selfie or short video for a face match,] [DBS certificate details for childcare services,] and the results of our checks.

• Tax details (professionals): [date of birth, home address, National Insurance number or Unique Taxpayer Reference, VAT number and company number, where we need them for tax reporting. See section 3.]

• Jobs and proposals: job descriptions, photos, location or postcode, budget, timing, proposals and quotes.

• Messages, reviews and ratings you send or post through Jobnod, and anything you tell our support team.

• Payment details: billing details and bank details for payouts. Card details are collected by our payment provider, and we do not store full card numbers.

• Preferences: your marketing choices and notification settings.

Information we collect automatically

• Device and browser details, IP address, approximate location, pages viewed, time spent, referring site and error logs.

• [Precise device location, only if you give permission.]

• Information from cookies and similar technologies (see section 10).

Information from other sources

• Other users (for example reviews and job details), and our identity-verification and payment providers (for example verification outcomes and fraud checks).

• [Public registers, such as Companies House or trade body registers, to check professionals’ details.]

• Analytics providers.

If you give us someone else’s details, make sure you are allowed to, and share only what is needed. Please do not put sensitive information (for example about health, religion or ethnicity) in profiles, job posts or messages unless a job really needs it. For childcare jobs, share only what is needed about a child.

If you choose not to give us information we ask for, we may not be able to set up your account, verify you or complete a payment.

3. How we use your information and our lawful bases

UK law requires us to have a “lawful basis” for each way we use personal data. Ours are set out below.

• Running your account (account details, preferences). We create and secure your account, sign you in and send verification codes. Lawful basis: contract; legitimate interests in keeping accounts secure.

• Verifying professionals and keeping Jobnod trustworthy (verification information). We check identities and documents, look for fake or duplicate profiles and decide whether a professional can join or stay. Lawful basis: legitimate interests (our interest, and our users’, in a safe marketplace and preventing fraud); contract; legal obligation where the law requires checks. Face-matching relies on explicit consent (see section 5).

• Connecting clients and professionals (profiles, jobs, proposals, messages, reviews). Lawful basis: contract.

• Payments, subscriptions and payouts. We take Pro plan subscriptions, hold clients’ payments until a job is confirmed complete [through our payment partner], release funds, and handle refunds and chargebacks. Lawful basis: contract; legal obligation (tax and accounting records, and anti-money-laundering rules where they apply).

• Tax reporting [keep only if Jobnod is a “reporting platform operator”; confirm with your accountant]. UK rules require digital platforms like ours to collect and verify certain details about professionals and report them, with their earnings through Jobnod, to HMRC, which may share them with other countries’ tax authorities. We give professionals a copy of what we report. Lawful basis: legal obligation.

• Support, disputes and complaints. Lawful basis: contract; legitimate interests in resolving problems and improving our service; legal obligation.

• Safety, fraud prevention and enforcing our terms (all categories of information). This includes monitoring for suspicious activity and reviewing messages or content that are reported or flagged. Lawful basis: legitimate interests; legal obligation.

• Service messages. Verification codes, receipts, job and proposal updates, security alerts and changes to our terms. Lawful basis: contract; legitimate interests.

• Marketing. News, offers and blog updates by email or text. We ask for your consent or, where you have already used our services, we may email you about similar services under the “soft opt-in” rule. You can opt out at any time using the unsubscribe link or by contacting us. Lawful basis: consent; legitimate interests (soft opt-in).

• Improving Jobnod. Analytics, testing, research and [suggesting relevant jobs and professionals]. Lawful basis: legitimate interests; consent where cookie rules require it.

• Legal and regulatory requirements. Responding to authorities, and establishing, exercising or defending legal claims. Lawful basis: legal obligation; legitimate interests.

• Business changes. If Jobnod is sold or restructured, we may share information with the other party and their advisers. Lawful basis: legitimate interests.

4. Automated tools, AI and decisions about you

We use automated tools, including AI, to [help check identity documents, spot fake or duplicate profiles, flag suspicious activity and suggest relevant jobs and professionals].

[A member of our team reviews any decision that would stop someone joining Jobnod or that suspends or removes an account.] If an automated decision does have a significant effect on you, we will tell you about it, and you can give your view, ask for a person to review it and challenge it. Email [privacy@jobnod.co.uk].

[We do not use your messages or uploaded documents to train AI models, and we require our AI providers not to either.]

5. Special category data, biometrics and criminal records

[Use only if you use face-matching or liveness checks; otherwise delete.] To verify your identity, we may ask you to take a selfie or short video that [name of verification provider]compares with the photo on your ID. This creates biometric data, which UK law treats as “special category data”. We do this only with your explicit consent, which you can withdraw at any time by [how]. If you would rather not, you can ask for [a manual document review], which may take longer. We delete [the biometric data within [number] days of the check].

[Use only if you check criminal records, for example DBS checks for childcare; otherwise delete.] For some services we ask professionals to confirm a DBS check or share certificate details. This can include information about criminal convictions. We use it only where the law allows, to protect clients and children, and we keep [only the outcome and certificate details].

We do not otherwise ask for special category data such as health information. Professionals, such as personal trainers, may collect health information from their own clients. That is the professional’s responsibility, not ours.

6. What other users see, and what professionals do with your information

• Professional profiles are visible to [anyone / registered users] and show [first name and initial, photo, services, area, prices, verification status, ratings and reviews].

• Client information shared with a professional includes your job details, [first name] and general area. [Your exact address and contact details are shared only once you accept a proposal.]

• Reviews are public. We may remove content that breaks our rules.

• Once a professional has your information, they are responsible for it. They are a separate “controller”. They may use it only to quote for and carry out your job and meet their legal duties, not for marketing, and they must keep it secure. To use your rights over information a professional holds, contact them directly. Tell us if you think a professional has misused your information.

7. Who we share your information with

• Service providers acting on our instructions, such as [cloud hosting], [email and SMS], [analytics], [customer support tools], [identity verification] and [AI services].

• Our payment partner, [name], which processes payments and payouts. It also carries out its own identity, fraud and anti-money-laundering checks as an independent controller, under its own privacy notice.

• Professional advisers, such as lawyers, accountants, auditors and insurers.

• Authorities, such as HMRC, the police, regulators and courts, where the law requires or to protect rights, safety or property.

• A buyer or successor, if Jobnod’s business changes hands.

• Anyone else, with your consent.

We do not sell your personal data, and we do not let our providers use it for their own marketing.

8. Transfers outside the UK

[Our main servers are in the UK.] Some providers may handle data outside the UK, for example in [country]. We transfer personal data only where UK law allows: to countries the UK recognises as providing adequate protection, or with safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Contact us for more detail.

9. How long we keep your information

We keep personal data only as long as we need it for the purposes above. [The periods below are suggestions. Confirm each one.]

• Account and profile: while your account is open, then deleted or anonymised within [90 days] of closure, apart from the records below.

• Identity documents and biometric data: [documents deleted within 30 days of the check, keeping only the result and date; biometric data deleted within [number] days].

• Payments and invoices: at least six years, for tax and accounting.

• Tax reporting records: for the period HMRC requires [currently five years].

• Jobs, proposals and messages: [up to six years after a job ends], in case of disputes or claims.

• Reviews: while the professional’s profile is live [and in anonymised form afterwards].

• Support requests and complaints: [two years] after they are resolved.

• Marketing: until you unsubscribe, after which we keep your email on a suppression list so we do not contact you again.

• Inactive accounts: [we may close accounts that have been inactive for three years, after warning you].

• Server and security logs: [90 days].

10. Cookies and similar technologies

We use cookies and similar technologies to make Jobnod work and to understand how it is used.

• Strictly necessary (signing in, security, remembering your cookie choices): always on.

• Preferences (such as remembering display settings): [used without consent for that purpose only, and you can object].

• Analytics: [Option A: we use privacy-friendly analytics that produce only aggregate statistics for us. We use them without asking for consent, and you can opt out at any time in cookie settings.] [Option B: we set analytics cookies only with your consent.]

• Marketing and advertising: only with your consent.

You can change your choices at any time through [the “Cookie settings” link in the footer] or your browser settings. Our [Cookie Policy] lists each cookie we use.

11. How we protect your information

We use [encryption in transit, access controls limited to staff who need them, secure storage for verification documents, regular security testing and checks on our suppliers]. No system is completely secure, so please use a strong, unique password and tell us straight away if you think someone has accessed your account. If a data breach is likely to put you at risk, we will tell you and the ICO as the law requires.

12. Your rights

Under UK data protection law you have the right to:

• Be informed about how we use your data (this policy).

• Access a copy of your personal data. We carry out reasonable and proportionate searches.

• Correct inaccurate or incomplete data.

• Erase your data in certain circumstances.

• Restrict how we use it in certain circumstances.

• Data portability: receive data you gave us in a common format, where we process it by automated means on the basis of consent or contract.

• Object to uses based on legitimate interests, and object to direct marketing at any time.

• Withdraw consent at any time where we rely on it. This does not affect earlier use.

• Challenge automated decisions (see section 4).

To use a right, email [privacy@jobnod.co.uk] or use [your account settings / link to form]. We may need to confirm who you are first. We aim to reply without undue delay and within one month. We can extend this by up to two further months if your request is complex or you have made several, and we will tell you if so. If we reasonably need more information from you to confirm who you are or what you are asking for, the time limit pauses until you reply. There is no charge, unless a request is clearly unfounded or excessive. Some rights have exceptions, for example where we must keep data to meet a legal obligation.

13. Complaints

If you are unhappy with how we have handled your personal data, please tell us first at [privacy@jobnod.co.uk] or through [link to online complaints form]. We will acknowledge your complaint within 30 days, look into it without undue delay, keep you updated and tell you the outcome.

You also have the right to complain to the regulator, the Information Commission, which continues to operate as the ICO: [ico.org.uk]. You can do this at any time, but we would welcome the chance to put things right first.

14. Children

Jobnod is for people aged 18 or over. If we learn that an account belongs to someone under 18, we will close it and delete the data. For childcare jobs, clients should share only what is needed about a child, and professionals must handle that information responsibly.

15. Links to other websites

Jobnod may link to other websites, including professionals’ own sites. We are not responsible for their privacy practices, so please read their policies.

16. Changes to this policy

We may update this policy. The date at the top shows when it last changed. If a change significantly affects how we use your data, we will tell you before it takes effect, for example by email or a notice on Jobnod.

17. Contact us

[Company legal name] · [registered office] · [privacy@jobnod.co.uk]

Drafting notes (delete before publishing)

1. Fill the gaps: legal entity, company number, ICO registration number, contact details, and the names of your hosting, payment, identity-verification, messaging, analytics and AI providers.

2. Pay the ICO data protection fee and quote your registration number. The smallest tier is currently £52 a year (£47 by direct debit); the ICO’s self-assessment tool shows which tier applies to you.

3. Make every statement true. Check “we do not sell personal data”, “a person reviews decisions”, no AI training on user data, “we do not store card numbers” and every retention period against what your systems really do, and set up automatic deletion.

4. Identity checks: if you use face-matching or liveness, you need explicit consent, a non-biometric alternative and a data protection impact assessment (DPIA). Keep a person involved in approve or reject decisions: the automated decision-making rules changed on 5 February 2026 and are looser for ordinary data, but stay strict where special category data such as biometrics is involved.

5. Childcare and DBS: processing criminal-record information needs a specific legal condition and usually an appropriate policy document. Get advice before you collect it.

6. Tax reporting: ask an accountant whether Jobnod must register and report under HMRC’s digital platform reporting rules. If so, you must collect and verify professionals’ details at onboarding, which affects the signup form.

7. Complaints and rights: since 19 June 2026 you must provide an electronic complaints route, acknowledge complaints within 30 days and keep a procedure for handling them. Have this and your rights-request process working before you publish sections 12 and 13.

8. Cookies: publish a Cookie Policy and a banner or settings panel. Do not set non-essential cookies before consent unless a narrow exception applies and users can opt out (ICO guidance, 2026). Advertising cookies always need consent.

9. Paperwork behind the policy: a record of processing, legitimate interests assessments, contracts with your processors, transfer safeguards and a breach procedure.

10. Where it appears: link it in the footer, on both signup forms and wherever you ask for consent. Keep marketing and biometric consents separate and unticked by default.

11. Companion pages: Terms of Service, Cookie Policy, and your company name, number, registered address and contact email somewhere visible on the site.

Jobnod Privacy Policy · Page of