Privacy Policy

Last updated: 19 May 2026

Data controller

The Wight List Ltd · ICO registration: ZB123456

What we collect

Account information (name, email, password hash)

Profile data (location, work history, skills)

Application data (cover letters, screening answers)

Usage data (page views, search queries — analytics only if you consent)

Payment information (processed by Stripe — we store only invoice references)

How we use it

To operate the job board (Art. 6(1)(b) — contract)

To send job alerts and marketing emails (Art. 6(1)(a) — consent)

To improve the platform (Art. 6(1)(f) — legitimate interests)

To comply with legal obligations (Art. 6(1)(c))

Data residency

All personal data is stored on servers in the UK (AWS eu-west-2, London). Encrypted at rest with AES-256.

Retention

Application data is retained for 6 months after the role closes. Account data is retained until you delete your account. Audit logs are retained for 7 years for legal compliance.

Your rights

Under UK GDPR you have the right to: access, rectification, erasure, portability, restriction, objection, and to withdraw consent at any time. Exercise these rights via your Privacy Centre (/me/privacy) or by emailing privacy@thewightlist.co.uk.

Contact

Data Protection Officer: privacy@thewightlist.co.uk