Privacy Policy

Last Updated: 2024-10-23

This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you use our website and services.

This Privacy Policy applies to GrabJobs, a service operated by Nextwave Labs Pte Ltd, registered in Singapore with registered office at 100 Peck Seah Street, #08-14 PS100, Singapore 079333. For the purposes of data protection law, Nextwave Labs Pte Ltd is the data controller for personal data processed via GrabJobs.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

We collect and process personal information from job seekers, employers, and visitors, including:

• Personal Data (Job Seekers): Name, email address, contact details, CV/resume, employment history, education, skills, job preferences, and application details.
• Personal Data (Employers): Contact details, company information, billing details, and job postings.
• Usage Data: IP address, browser type, device information, geolocation, and interaction with our platform.
• Cookies and Tracking Data: We use cookies and similar technologies to monitor activity on our website and improve user experience.
• Optional Sensitive Data: You may choose to provide optional demographic details (e.g. date of birth, gender, ethnicity). This is entirely voluntary and processed only with your explicit consent.

2. How We Use Your Information

We process your personal data for the following purposes:

• Job Seekers: Creating/managing accounts, enabling job applications, matching you to relevant jobs, and communicating with you.
• Employers: Creating/managing employer accounts, publishing job postings, receiving and managing applications, and processing payments.
• All Users: Improving our services, personalizing your experience, preventing fraud, ensuring platform security, fulfilling legal obligations, and conducting analytics.

3. Legal Basis for Processing

Under the GDPR, we rely on the following legal bases:

• Consent – where you provide explicit consent (e.g., marketing emails, optional sensitive data, cookies).
• Contract – where processing is necessary for the performance of a contract (e.g., providing job seeker/employer accounts and services).
• Legitimate Interest – where processing is necessary for our business purposes (e.g., fraud prevention, service improvements, marketing to registered users), provided your rights are not overridden.
• Legal Obligation – where we must comply with laws (e.g., tax or anti-fraud requirements).

4. Automated Decision-Making and Profiling

GrabJobs uses automated tools to:

• Recommend jobs to job seekers based on skills, preferences, and location.
• Suggest candidates to employers based on job requirements.
• Deliver tailored content and advertising.

These processes do not have legal or similarly significant effects on you. You may manage your preferences in your account or object to profiling by contacting us.

5. How We Share Your Data

We may share your data under the following circumstances:

• With Employers: When you apply for a job, your CV, application, and contact details are shared with the employer. Employers act as separate data controllers and are responsible for their own use of your data.
• With Job Seekers: Employer company details and job postings are shared publicly.
• Service Providers and Third-Party Vendors: We may share your data with vendors and service providers who perform services on our behalf, including but not limited to hosting, analytics, communications, payment processing, marketing, or other business services. All third-party vendors are contractually required to protect your data in accordance with applicable data protection laws and may only process your data for the purposes we specify.
• Legal Requirements: Where disclosure is required by law, regulation, or to protect against fraud or misuse.
• Business Transfers: In the event of a merger, acquisition, or sale of assets.

6. International Data Transfers

GrabJobs operates globally. If your data is transferred outside the EEA/UK, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Adequacy decisions where applicable (e.g., EU–US Data Privacy Framework for certified providers).

Some of your data may be stored on servers operated by Amazon Web Services (AWS) outside the EEA/UK. AWS is contractually bound to comply with GDPR transfer requirements.

7. Data Retention

We retain your personal data only as long as necessary:

• Account Data: Retained while your account is active, deleted within 30 days after closure.
• Resumes & Applications: Retained in your account until you delete them. Employers may retain copies subject to their own retention policies.
• Employer Data: Retained for the duration of the account and as required by tax/accounting laws.
• Support Logs: Up to 2 years after resolution.
• Analytics Data: Up to 12 months in identifiable form, then anonymized.

When data is no longer required, we securely delete or anonymize it.

8. Data Security

We take security seriously and use industry-standard measures (encryption, firewalls, access controls) to protect data. However, no system is 100% secure, and we cannot guarantee absolute protection.

9. Your Rights (GDPR & UK GDPR)

If you are in the EEA or UK, you have the following rights under data protection law:

• Right of access (to obtain a copy of your data).
• Right to rectification (correction of inaccurate data).
• Right to erasure (“right to be forgotten”).
• Right to restrict processing.
• Right to data portability.
• Right to object (including to profiling or direct marketing).
• Right to withdraw consent at any time (where consent is the basis).
• Right not to be subject to solely automated decision-making with significant effects.

To exercise these rights, contact us at contact [at] grabjobs [dot] co.
You also have the right to lodge a complaint with your local Data Protection Authority.

10. Cookies and Tracking

GrabJobs uses cookies and similar technologies to:

• Enable essential site functionality.
• Improve site performance.
• Provide analytics and targeted advertising.

Where required by law, we request your consent before placing non-essential cookies. You can withdraw consent or adjust preferences through your browser settings or our cookie banner.

11. Children’s Data

Our services are not directed to children under 16. We do not knowingly collect data from minors. If we learn that we have collected such data, we will delete it promptly.

12. Third-Party Links

Our website may contain links to external sites not operated by us. We are not responsible for their privacy practices and encourage you to review their policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any significant changes will be notified to you by email or through the platform.