This Privacy Policy explains how Fancy Working Here (“FWH”, “we”, “us”, “our”) collects, uses, shares and protects personal data when you use our websites, web application, mobile apps and related services (together, the “Service”).
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For the purposes of those laws, Fancy Working Here is the data controller of personal data we collect through the Service, except where we process data solely on behalf of a hiring business as described below.
1. Who we are and how to contact us
- Service name: Fancy Working Here
- Website: https://fancyworkinghere.com
- Mobile app: Fancy Working Here (com.fancyworkinghere)
- Contact / privacy email: hello@fancyworkinghere.com
If you have questions about this policy or want to exercise your data protection rights, email us at the address above.
2. Whose data we process
We process personal data about:
- Job seekers / applicants — people who create accounts, browse or apply for jobs, build a CV, message employers, or use related applicant features.
- Business users — owners, hiring managers and team members who create venues, post jobs, review applications, message candidates, schedule interviews, and manage billing.
- Website visitors and contacts — people who visit public pages or contact us.
- Marketing contacts — where we have a lawful basis to send service or marketing communications (including people who opt in, or business contacts we process under legitimate interests where appropriate).
3. Personal data we collect
3.1 Account and profile data
- Name, email address, phone number (optional)
- Password (stored hashed) and authentication tokens
- Account type (applicant or business), role within a business, and email verification status
- Profile photo / avatar where provided
3.2 Applicant and hiring data
- CV / résumé content, work history, skills, education and related CV-builder fields
- Job applications, cover notes, application status history and interview details
- Messages between applicants and businesses on the platform
- Saved jobs, job alerts, followed businesses and preference settings
- References and related correspondence where that feature is used
- Location information you provide (for example city) and, if you allow it on the mobile app, approximate device location used to show nearby jobs
3.3 Business and billing data
- Business / venue name, address, branding, job listings and hiring pipeline data
- Team member details and permissions
- Subscription and payment-related information processed via our payment provider (Stripe). We do not store full card numbers on our servers
3.4 Technical, usage and device data
- IP address, browser type, device type, operating system and app version
- Log data, pages viewed, feature usage and diagnostic information
- Push notification device tokens (for example Expo push tokens) when you enable notifications
- Cookie / similar technology data on the website (see Cookies below)
3.5 Communications
- Emails and notifications we send (transactional and, where permitted, marketing)
- Contact submissions and support correspondence
- Delivery / bounce / complaint events from our email provider (Postal) for reliability and suppression
4. How we collect data
- Directly from you when you register, apply, message, upload a CV, or contact us
- Automatically when you use the Service (logs, analytics, cookies, app permissions)
- From businesses when they invite team members or communicate with applicants on the platform
- From payment providers in connection with subscriptions and add-ons
5. Lawful bases for processing
We rely on one or more of the following bases under UK GDPR:
- Contract — to provide the Service you requested (account, job applications, messaging, business tools, paid subscriptions).
- Legitimate interests — to secure and improve the Service, prevent abuse, show relevant jobs, communicate important service updates, and operate B2B marketing where appropriate and balanced against your rights.
- Consent — where required (for example optional marketing emails, certain cookies, precise location, or push notifications). You can withdraw consent at any time.
- Legal obligation — where we must keep records or respond to lawful requests.
6. How we use personal data
- Create and manage accounts, verify email addresses, and authenticate users
- Enable job discovery, applications, CV tools, messaging and interview scheduling
- Provide business hiring pipelines, team access, templates and related tools
- Process subscriptions, invoices and add-on purchases
- Send transactional emails and in-app / push notifications about your account or applications
- Send marketing communications where permitted
- Monitor security, prevent fraud/spam, troubleshoot issues and improve the product
- Comply with law and enforce our Terms of Service
7. When businesses are controllers
When a hiring business reviews applications, stores candidate information in their pipeline, or messages applicants about a role, that business is typically an independent data controller of the candidate data they receive for their recruitment. We act as a platform provider and, where applicable, as a processor or separate controller depending on the processing. Businesses must handle candidate data lawfully and only for legitimate recruitment purposes.
8. Who we share data with
We share personal data only as needed to run the Service, including with:
- Hiring businesses — when you apply or message them (application and profile information relevant to the role)
- Infrastructure and hosting providers that power the Service
- Email delivery — Postal (transactional and platform email)
- Payments — Stripe for subscriptions and paid features
- Push notification delivery — Expo / platform push services when notifications are enabled
- AI feature providers — where a business or user uses optional AI-assisted tools (for example drafting or ranking aids); only the minimum necessary content is sent for that feature
- Professional advisers and authorities — where required by law or to protect rights, safety and security
We do not sell your personal data.
9. International transfers
Some providers may process data outside the UK. Where we transfer personal data internationally, we use appropriate safeguards required by UK law (such as the UK International Data Transfer Agreement / Addendum or adequacy regulations) where applicable.
10. Retention
We keep personal data only as long as needed for the purposes above, including:
- Account data — for the life of the account, then deleted or anonymised within a reasonable period after closure (unless we must retain it longer)
- Applications, messages and hiring records — for as long as needed to provide the Service and for legitimate business / legal record-keeping (typically aligned with recruitment and limitation periods)
- Billing records — as required for tax and accounting
- Logs and security data — for a shorter operational period unless needed to investigate incidents
You can request deletion of your account and associated personal data (subject to legal exceptions).
11. Your rights
Under UK GDPR you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request erasure
- Restrict or object to certain processing
- Data portability
- Withdraw consent where processing is based on consent
- Complain to the Information Commissioner’s Office (ICO) at ico.org.uk
To exercise these rights, email hello@fancyworkinghere.com. We may need to verify your identity before responding.
12. Cookies and similar technologies
Our website may use cookies and similar technologies to:
- Keep you signed in and secure the Service (strictly necessary)
- Remember preferences
- Understand usage and improve performance (analytics, where used)
You can control cookies through your browser settings. Blocking some cookies may affect how the Service works.
13. Mobile app permissions
Depending on your device settings, the Fancy Working Here app may request:
- Location — to show jobs near you. You can deny or revoke this; browsing may still work without precise location.
- Notifications — to alert you about applications, messages and hiring updates. You can disable these in device settings.
14. Children
The Service is aimed at people seeking or offering employment. It is not directed at children under 16. If you believe we have collected data from a child under 16, contact us and we will take appropriate steps to delete it.
15. Security
We use technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS), hashed passwords, access controls and monitoring. No method of transmission or storage is completely secure; please use a strong unique password and keep your login details confidential.
16. Account and data deletion
You can request deletion of your account and associated personal data, or deletion of specific personal data while keeping your account, using our dedicated deletion page: fancyworkinghere.com/account-deletion. We aim to complete eligible requests within 30 days of verification. Some records may be retained where required by law (for example billing records).
17. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be notified in-product or by email where appropriate.
18. Contact
Privacy requests and questions: hello@fancyworkinghere.com