Back to jobs

Privacy Policy

Last updated: 10 August 2026  ·  Applies to gradfind.co.uk

GradFind (“we”, “us”, “our”) is a UK graduate job aggregator. We take your privacy seriously. This policy describes how we collect, use, and protect your personal data, and how you can exercise your privacy rights. We handle personal data in accordance with UK data protection law, principally the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

GradFind is operated by Zuber Ali, trading as GradFind, a sole trader based in the United Kingdom. Registered address: 44 Ruthven View, Leeds, LS8 3RQ. You can contact us at gradfind@outlook.com with any data-related queries.

2. What data we collect

When you create an account we collect and store:

  • Email address: used to identify your account and (if you opt in) to send job alerts.
  • Password (hashed): stored as a one-way bcrypt hash. We never store or see your plain-text password.
  • Sector preferences: the graduate sectors you tick at sign-up (e.g. Tech, Finance). Used to filter job alerts.
  • Location preference: an optional free-text location you provide (e.g. “London”). Used to filter job alerts.
  • Email alerts preference: whether you have opted in to email notifications.
  • Privacy acceptance timestamp: the date and time you accepted this Privacy Policy, kept as a record of your consent.
  • Account creation date: the timestamp when your account was created.

We do not collect payment information, government ID, or special category personal data.

3. Cookies

We use the following cookies:

  • session (essential): a Flask session cookie that keeps you logged in. This is strictly necessary and does not require consent.
  • remember_token (essential): a long-lived login cookie set when you tick “Remember me”. Strictly necessary.
  • cookie_consent (functional): records whether you accepted or rejected optional cookies. Expires after 365 days.

If you accept optional cookies, we use Google Analytics 4 to understand how people use GradFind (pages visited, time on site, general location). Google Analytics does not identify you personally. No analytics data is collected if you reject optional cookies. You can change your choice at any time by clearing your cookies.

4. Legal basis for processing

We process your personal data under the following lawful bases (UK GDPR Article 6):

  • Contract performance (Article 6(1)(b)): your email address and hashed password are necessary to provide the account service you request when you sign up.
  • Legitimate interests (Article 6(1)(f)): sector and location preferences and the account creation date are processed to personalise your job feed. Our legitimate interest is providing a relevant service; this does not override your rights.
  • Consent (Article 6(1)(a)): email job alerts are only sent if you tick the opt-in box at registration. You may withdraw consent at any time by unchecking email alerts in your account settings, using the unsubscribe link in any alert email we send, or by deleting your account.

5. How we use your data

  • Authenticating you when you log in.
  • Displaying job listings relevant to your sector and location preferences.
  • Sending email alerts about new graduate roles (only if you opted in).
  • Keeping a record of your consent acceptance for accountability purposes.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Data storage and security

Your data is stored in a PostgreSQL database hosted on Railway (railway.app), a US-based infrastructure provider. We transfer data to this provider under appropriate safeguards for international transfers. Passwords are hashed with bcrypt and are never stored in plain text. Database connections use TLS encryption in transit.

7. Data retention

We retain your personal data for as long as your account is active. When you delete your account, your data is removed from our live database immediately. Backup copies may persist for up to 7 days before being permanently deleted from all systems.

8. Your rights

You have the following rights regarding your personal data:

  • Right of access: you may request a copy of the personal data we hold about you by emailing us.
  • Right to rectification: you may ask us to correct inaccurate data.
  • Right to erasure (“right to be forgotten”): you may delete your account at any time via the link below, which removes all your data from our live systems immediately.
  • Right to restrict processing: you may ask us to pause processing your data while a complaint is investigated.
  • Right to data portability: you may request a copy of your personal data by emailing us and we will provide it in a readable format.
  • Right to object: you may object to processing based on legitimate interests.
  • Rights related to automated decision-making: we do not carry out solely automated decision-making that produces legal or similarly significant effects.

To exercise any of these rights, email gradfind@outlook.com. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

9. Children

GradFind is intended for users aged 18 and over. We do not knowingly collect data from children under 13. If you believe a child has registered, please contact us immediately.

10. Changes to this policy

If we make material changes to this policy we will update the “Last updated” date above and notify registered users by email where we consider it appropriate.

11. Contact

Questions or requests: gradfind@outlook.com