1. Who we are
MadyJobSearch.com (the "Site") is operated by MAKZEE LTD, registered in Scotland under company number SC877764, registered office 383 High Street, Cowdenbeath, KY4 9QW, United Kingdom. ICO registration reference ZC248854. Contact for data protection matters: support@madyhr.ai.
We have not appointed a Data Protection Officer. We are not required to, and we have documented that assessment.
MadyHR.ai is a separate service with its own privacy policy at madyhr.ai/legal/privacy.
2. Who this covers, and our role
| You are | Our role |
|---|---|
| A job seeker with a free account | MAKZEE is the controller for your account, profile, CVs, saved jobs, saved searches, alerts and search history |
| A job seeker who applies to a vacancy posted on the Site | The employer is the controller of your application once you send it. MAKZEE holds it for them as their processor (section 8) |
| An employer with a free account | MAKZEE is the controller for your account and company data |
| A visitor who browses without an account | MAKZEE is the controller for the technical data the Site needs to work |
| A person named in an advert | MAKZEE is the controller for its display of that information (section 10) |
Browsing and searching jobs never requires an account.
3. What we collect
If you create a job seeker account
| Data | Where it comes from |
|---|---|
| Name, email address, password (stored only as a one-way hash) | You |
| Profile: headline, summary, phone, location, LinkedIn and website links, years of experience, skills, work history, education, certifications, the roles, places, work patterns and sectors you want, your minimum salary, and whether you are open to work | You, or your CV if you choose to add what Mady read from it |
| Right to work: whether you already have the right to work in the UK, need visa sponsorship, or are unsure | You, only if you choose to answer |
| CVs you upload: the file, and the text and details read from it | You |
| Saved jobs, saved searches and how often you want alerts | You |
| Search history: the searches you run while signed in, how Mady read them and how many results came back | Your use of the Site |
| Match scores between your profile and jobs | Calculated by the Site (section 5) |
| Notifications shown in your account | The Site |
If you apply through the Site: the CV you chose (we keep a copy exactly as sent), your covering message, your answers to the employer's questions, your contact email and phone, your profile as it stood when you applied, the match score at that moment, and the progress of the application.
If you create an employer account: company name, website, location and logo; your name, work email and password hash; the adverts you post; your notes on applicants and the decisions you record.
Everyone: when you sign in we record your IP address and browser type against the session, to keep accounts secure. Our audit log records sign-ins and important account actions with an IP address. Our hosting provider keeps standard request logs.
If you contact us: your name, email, topic and message. If you report an advert: your report.
We do not ask for: your date of birth, National Insurance number, nationality, identity documents, bank details, or any special category data. If you include health, disability, ethnicity, religion or similar information in your CV or profile, you do so by choice and it is processed only as part of what you chose to share.
We never charge job seekers, so we never collect payment details from them.
4. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Running your account, profile, CVs, saved jobs and saved searches | Performance of a contract (our Terms of Use) |
| Reading your CV to fill in your profile, when you ask us to | Performance of a contract |
| Showing match scores and the reasons for them | Performance of a contract: it is the service you signed up for |
| Job alert emails | Performance of a contract: you set up the alert and choose how often |
| Account emails: confirming your email, password resets, application confirmations and status updates | Performance of a contract |
| Delivering an application to the employer you chose | Performance of a contract with you; the employer then relies on its own lawful basis |
| Running employer accounts and publishing their adverts | Performance of a contract |
| Showing adverts from other job sites and employers' public careers pages | Legitimate interests: running a free job site from adverts published for that purpose |
| Showing contact details that appear in an advert | Legitimate interests: the employer put them there for applicants to use |
| Security, fraud prevention, rate limiting, audit and request logs | Legitimate interests: keeping the Site and your account safe |
| Answering messages and reports | Legitimate interests |
| Aggregated statistics about Site use that identify no one | Legitimate interests |
Right-to-work information. Whether you need sponsorship is not special category data, but we treat it with care. We use it only to show you jobs that suit you and, if you apply through the Site, to show the employer you applied to. You can leave it blank or change it at any time.
We do not sell personal data. We do not use your data for advertising, and we do not show your profile or CV to any employer you have not applied to.
5. Matching and AI
The Site helps you find suitable jobs by comparing your profile, CV and searches with each advert and giving a match score with its reasons, such as the skills you have and the ones the advert asks for. It also reads plain-English searches ("nursing jobs near Birmingham with sponsorship") to work out the role, place, pay and other filters, and it can read a CV you upload to suggest profile details you then choose whether to keep.
All of this runs on our own servers. We do not send your CV, profile, searches or applications to any outside AI company, and no outside company trains a model on them. If we ever change that, we will update this section and tell account holders by email before it takes effect.
When you apply through the Site, the employer sees the match score between your profile and their vacancy, with its reasons, and can sort applicants by it. The score is a recommendation only. It decides nothing: a person at the employer reviews applications and makes every decision. The Site makes no decision with legal or similarly significant effect about anyone by automated means. If you think a score is wrong, keeping your profile up to date changes it, and you can tell us at support@madyhr.ai.
6. Adverts and sponsorship information
Adverts on the Site come from employers who post them here, from licensed job feeds (Reed.co.uk and Adzuna), and from employers' own public careers pages. Each advert shows where it came from.
Sponsor information comes from the Home Office's public register of licensed sponsors, published on GOV.UK under the Open Government Licence. It is about organisations, not individuals.
7. How long we keep it
| Data | How long |
|---|---|
| Job seeker account, profile, CVs, saved jobs and saved searches | Until you delete them or your account. If you do not sign in for 24 months, we email you, and delete the account 30 days later if you do not return |
| Search history | 12 months, unless you clear it sooner in your account |
| Applications made through the Site | 6 months after the advert closes, then deleted with their CV copies, unless the employer has a legal reason and asks us to keep a specific application longer |
| Employer account and company data | Until closed. If an employer does not sign in for 24 months, we email them and close the account 30 days later |
| Employer-posted adverts | Until the employer closes them or their closing date passes; closed adverts are deleted 12 months after closing |
| Adverts from feeds and careers pages | While the advert is still live at its source. We close it when it disappears from the source |
| Sign-in sessions | 14 days, then they expire and are deleted after 90 days |
| Audit log (sign-ins and important actions) | 2 years, for security; when you delete your account, your email and IP address are removed from it |
| Copies of emails we have sent | 30 days |
| Contact messages and reports | 2 years |
| Removal requests | As long as the advert could reappear, so it is not re-added |
Deleting your account. Job seekers can delete their account at any time under Settings. This deletes your profile, CVs, saved jobs, saved searches, search history, notifications and applications, including the CV copies employers could see. It cannot recall an application an employer has already downloaded. Employers can ask us to close their account by emailing support@madyhr.ai.
8. Applications made through the Site: data processing terms
This section applies whenever an employer receives applications through the Site. It forms part of the Terms of Use and is the processing contract required by Article 28 UK GDPR.
8.1 Roles. The employer is the controller of every application it receives through the Site. MAKZEE is its processor for holding and presenting those applications.
8.2 Subject matter and duration. Collecting applications to the employer's advert and making them available to the employer, for the period in section 7.
8.3 Nature and purpose. Receipt, storage, display, scoring against the advert (section 5), and deletion of applications, so the employer can consider them for the vacancy advertised.
8.4 Data and data subjects. Name, contact details, CV, covering message, answers to the employer's questions, profile details including right-to-work status, and match score, of people who apply for the employer's vacancy.
8.5 Instructions. MAKZEE processes applications only to make them available to the employer, to delete them at the end of the retention period or on the employer's instruction, and as the law requires. MAKZEE will tell the employer if an instruction appears to breach data protection law.
8.6 Confidentiality. Everyone authorised to access applications is bound by confidentiality.
8.7 Security. Applications are stored on infrastructure in the European Union, encrypted in transit and at rest. Access is limited to the employer's account users and to authorised MAKZEE personnel. CV downloads are recorded in an audit log.
8.8 Subprocessors. The employer authorises MAKZEE to use the subprocessors listed on the MadyJobSearch.com Subprocessors page. MAKZEE will give employer account holders 30 days' notice of any change by email.
8.9 Assistance. MAKZEE will forward any request from an applicant about their application to the employer and help the employer respond.
8.10 Breach. MAKZEE will notify the employer without undue delay of any personal data breach affecting applications, with the information the employer needs to decide whether to notify the ICO.
8.11 Deletion. Applications are deleted at the end of the period in section 7, or earlier on the employer's instruction. Copies in encrypted backups are overwritten in the normal backup cycle.
8.12 Audit. MAKZEE will give the employer the information reasonably necessary to show compliance with this section.
8.13 The employer's obligations. The employer must have a lawful basis for the applications it receives, handle them in line with data protection and equality law, use them only for the vacancy advertised, not use a match score as the sole basis of a decision, and give applicants any further privacy information the law requires.
9. Where your data is held
The Site, its database and its files run in the European Union (Amsterdam, Netherlands), on infrastructure provided by Railway and Cloudflare. The UK recognises the EEA as providing adequate protection, so no further safeguard is needed for this.
Our email delivery provider, Resend, is based in the United States. Suppliers outside the UK and EEA are listed on the Subprocessors page with the transfer safeguard that applies.
10. Who we share it with, and removal
- The employer you applied to, when you apply through the Site, and nobody else.
- Our suppliers, who host the Site, store files and send email, under written contracts. They are listed on the Subprocessors page.
- Anyone the law requires us to, and where needed to establish or defend legal claims.
If your name, email or phone number appears in an advert and you want it removed, email support@madyhr.ai with the advert's link. For an employer-posted advert we will edit or remove it within 5 working days. For an advert from a feed or careers page, we will remove it from the Site and tell the source; we cannot change the original.
11. Your rights
Where MAKZEE is the controller, you can ask to access, correct, delete, restrict or object to our use of your data, and to receive it in a portable format. Much of this you can do yourself in your account: edit your profile, delete CVs, clear your search history, turn alerts off, or delete your whole account. For a copy of your data, email support@madyhr.ai. We respond within one month, free of charge.
If you applied through the Site, the employer controls your application; contact them. If you contact us, we will pass your request on and help them respond.
You can complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113. We would appreciate the chance to put things right first.
12. Emails
We send only emails linked to your account: confirming your email, password resets, application confirmations and updates, and the job alerts you set up. Every alert email has a link to stop that alert in one click. We send no marketing emails.
13. Cookies
The Site uses only the cookies it needs to work. See our Cookie Policy.
14. Children
The Site is for people aged 16 and over. We do not knowingly collect data from anyone younger. If you believe we have, email us and we will delete it.
15. Changes
We update this page when our processing changes, with a new version number and date. Account holders are emailed about material changes before they take effect.
16. Contact
MAKZEE LTD, 383 High Street, Cowdenbeath, KY4 9QW, United Kingdom
support@madyhr.ai
ICO registration: ZC248854