Privacy Policy

Introduction

Welcome to Energy Recruitment Hub. This page describes how the platform handles personal information, based on how the application is built today. It is a draft pending legal review and does not invent a legal entity, registered office, or data-protection officer. Please read it carefully. If you do not agree, do not use the site.

Information We Collect

Personal Information You Disclose to Us

We collect personal information that you voluntarily provide to us when you register on the website, express an interest in obtaining information about us or our products and services, when you participate in activities on the website, or otherwise when you contact us.

• Account Information: Name, email address, username, password, phone number
• Profile Information: Resume/CV, work experience, education, skills, certifications
• Professional Information: Job preferences, salary expectations, availability
• Company Information: For recruiters - company name, business information, contact details
• Payment Information: Recruiter billing is processed by Stripe. Energy Recruitment Hub does not store full payment card numbers on its own servers.
• Communication Data: Contact-form submissions and transactional emails the application sends

Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate the website. This information does not reveal your specific identity but may include device and usage information.

• Log and usage data (for example IP address, browser type, operating system) when logging or analytics tools are enabled
• Device information available to the browser
• Cookies and similar technologies described in the Cookie Policy

Account, profile, job, and application records are stored in the application's PostgreSQL database and served through the Strapi CMS/API.

How We Use Your Information

We use personal information collected via our website for a variety of business purposes described below:

• To facilitate account creation and the authentication process
• To post job listings and connect job seekers with potential employers
• To send transactional messages already implemented in the application (for example account verification, application updates, and billing notices)
• To respond to user inquiries submitted through the contact form
• To provide Career Intelligence, CV analysis, and related tools you choose to use
• To analyse usage trends when optional analytics tools are enabled in that environment
• To protect accounts and forms (authentication and Cloudflare Turnstile)

Sharing Your Information

Based on how the application is built today, personal information is shared in these ways. This is a technical description, not a statement of legal basis, processor contracts, or transfer mechanisms.

• Job applications: When you apply, your application and CV are visible to the job owner (a recruiter, VA, or admin) and to authorised staff who can read applications. Other recruiters do not receive that application unless they own the role.
• Talent Search: Recruiters and admins can search candidate profiles only when the job-seeker has opted in and the profile is approved for search. Talent Search is not a public directory.
• Service providers used by the application: Stripe (recruiter payments), email delivery (SMTP), object storage (S3-compatible / DigitalOcean Spaces), Cloudflare Turnstile, Google sign-in if you use it, and OpenAI when you use AI features. Optional analytics or error reporting (GA4, Umami, Sentry) run only if configured.

Data Security

The application uses authentication cookies, HTTPS in typical deployments, and Cloudflare Turnstile on registration and contact. Optional tools such as Sentry may record errors if enabled. No electronic transmission or storage can be guaranteed to be completely secure. This draft does not assert a certified security standard.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request restriction of processing your personal data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time where we relied on consent

To exercise any of these rights, please contact us using the information provided below.

Cookie Policy

We use cookies and similar tracking technologies to access or store information. We use both session and persistent cookies for various purposes including:

• Essential cookies for website functionality and security (including authentication)
• Optional analytics cookies, if those tools are enabled in the deployment environment
• Preference or session storage used by the application (for example saved login tokens)

You can manage your cookie preferences through your browser settings. For more information, see our Cookie Policy.

Data Retention

This draft does not specify a retention schedule. How long records are kept requires operator and legal confirmation. Account and application records remain in the system until they are deleted through the product or by an operator; this page does not invent deletion timelines.

Third-Party Services

Our website may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

The application code integrates with the following categories of services. Some are always part of core flows; others run only when the operator has configured them in that environment. This list describes technical capability, not a production inventory.

• Confirmed in the application: Strapi (CMS and API), PostgreSQL (application database), Google sign-in (OAuth), Cloudflare Turnstile (bot protection on registration and contact), Stripe (recruiter billing), OpenAI (optional AI features such as CV analysis and job drafts), object storage for CVs and media (S3-compatible / DigitalOcean Spaces), and email delivery via SMTP.
• Optional / environment-dependent: Google Analytics 4, self-hosted Umami analytics, Firebase Cloud Messaging for push notifications, and Sentry error reporting. These are only used if the operator enables them.
• Not implemented: LinkedIn, Indeed, or Facebook account login, and social-media advertising pixels.

CV and profile text may be sent to OpenAI when you use Career Intelligence, CV Checker, or related AI tools. Applications and CVs are shared with the recruiter for the role you apply to. Retention schedules, processor contracts, and a named data-protection officer require client/legal confirmation and are not stated here.

Children's Privacy

Energy Recruitment Hubis built for professional energy recruitment. This draft does not invent a minimum age or a children's-data programme. A legally approved policy should confirm any age restriction.

International Data Transfers

The application uses processors that may store or process data outside the country you are in (for example Stripe, Google, OpenAI, and S3-compatible object storage, and optional analytics). This draft does not invent a transfer mechanism, standard contractual clauses, or an adequacy decision. Those details require legal confirmation.

Updates to This Privacy Policy

We may update this privacy policy from time to time. Until a legally approved version is published, this page remains marked as a draft pending legal review.

Contact Us

For general enquiries about this page, use the Contact form or email info@erh1.co.uk. This is a general enquiry address used elsewhere on the site; it is not claimed as a data-protection officer contact.

Compliance with Privacy Laws

Depending on where you live, you may have rights under applicable privacy laws. This draft does not assert that Energy Recruitment Hub is certified under any particular regime. A legally approved policy should confirm which laws apply.