Cookie Policy & GDPR Compliance

1. What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us remember your preferences, understand how you use our services, and improve your experience. Job-Fit uses both session cookies (which expire when you close your browser) and persistent cookies (which remain until deleted or expire).

2. Types of Cookies We Use

Essential Cookies

These cookies are necessary for the website to function properly. They enable core functionality such as security, network management, and accessibility. Without these cookies, services you've asked for cannot be provided. These are always enabled.

• Session tokens: Maintain your login session
• Security cookies: Protect against fraudulent activity
• CSRF tokens: Prevent cross-site request forgery attacks

Performance & Analytics Cookies

These cookies collect information about how you use our website, such as which pages you visit and if you experience errors. This helps us improve website performance and user experience. This information is aggregated and anonymous.

• Google Analytics: Tracks page views and user behavior (anonymized)
• Performance metrics: Measures website speed and functionality

Functional Cookies

These cookies remember your choices to provide enhanced functionality and personalization.

• User preferences: Remember your language and display settings
• Account information: Store your email and user ID (encrypted)
• Theme preferences: Remember your UI preferences

Marketing & Advertising Cookies

These cookies may track your browsing activity across different websites to show you relevant advertisements. You can disable these cookies through your browser settings or opt-out mechanisms.

• Facebook Pixel: Tracks conversions and user interactions
• Google Ads: Personalizes advertising based on interests
• Remarketing cookies: Remembers your visits for targeted ads

3. Third-Party Cookies

Our website may contain links to third-party services and applications. These third parties may set their own cookies on your device:

• Payment processors (Stripe, PayPal): Handle secure payment transactions
• Social media plugins: Enable sharing on social platforms
• Analytics services: Provide website analytics and insights
• CDN providers: Deliver content and improve performance

4. Your Cookie Choices

You have full control over cookies on your device:

• Browser settings: Most browsers allow you to refuse cookies or alert you when cookies are being sent
• Cookie consent banner: Use our consent banner to manage your preferences
• Opt-out tools: Use industry opt-out tools for marketing cookies
• Do Not Track (DNT): Some browsers support DNT signals; we respect these signals

Note: Disabling certain essential cookies may affect the functionality of our website and your ability to use certain services.

5. GDPR Compliance

As a service compliant with the General Data Protection Regulation (GDPR), Job-Fit respects your rights regarding your personal data:

Your GDPR Rights

• Right of Access: You have the right to request what personal data we hold about you
• Right to Rectification: You can correct inaccurate or incomplete personal data
• Right to Erasure: You can request deletion of your personal data (with exceptions)
• Right to Restrict Processing: You can limit how we process your data
• Right to Data Portability: You can receive your data in a structured format
• Right to Object: You can object to specific types of processing
• Rights Related to Automated Decision-Making: You have rights regarding automated decisions and profiling

Data Processing

We process your personal data based on:

• Consent: You've explicitly agreed to the processing
• Contract: Processing is necessary to provide services you've requested
• Legal obligation: We're required by law to process your data
• Legitimate interests: We have a valid business reason to process your data

6. Data Protection & Security

We implement appropriate technical and organizational measures to protect your personal data:

• End-to-end encryption for sensitive data
• SSL/TLS encryption for data in transit
• Regular security audits and vulnerability assessments
• Secure authentication mechanisms
• Limited access to personal data (need-to-know basis)
• Secure data retention and deletion policies
• Data Processing Agreements (DPAs) with all third parties

7. Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations:

• Account data: Retained while you have an account, plus 90 days after deletion
• Transaction data: Retained for 7 years for financial compliance
• Analytics data: Retained for 14 months and then anonymized
• Support emails: Retained for 24 months unless you request deletion

8. International Data Transfers

If you are located in the European Union, we ensure that any data transfers outside the EU/EEA comply with GDPR requirements, including using Standard Contractual Clauses (SCCs) and conducting Transfer Impact Assessments (TIAs).

9. CCPA Compliance (California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information collected from you
• Right to opt-out of the sale or sharing of your personal information
• Right to non-discrimination for exercising your CCPA rights

10. Data Breach Notification

In the event of a data breach affecting your personal data, we will notify you without unreasonable delay, in accordance with GDPR requirements (typically within 72 hours of discovery), and provide information about the breach and recommended protective steps.

11. Contact Us About Cookies & GDPR

If you have questions about our cookie policy, data practices, or wish to exercise your privacy rights:

12. Changes to This Policy

We may update this Cookie Policy and GDPR Compliance notice periodically to reflect changes in our practices or applicable laws. We will notify you of significant changes by updating the "Last updated" date and highlighting the changes on this page.