Skip to main content
SponsorJobs

Privacy Policy

Version 2026-05-27 · Last updated 14 October 2026

Who we are

SponsorJobs is an independent, pre-launch project that aggregates publicly available UK sponsor-licence and job-listing data into a single searchable site. We are not affiliated with UK Visas and Immigration (UKVI), the Home Office, or any of the companies listed on the site.

The data controller for the personal data described in this policy is SponsorJobs, contactable at hello@sponsorjobs.co.

What we collect

We collect the minimum personal data needed to run the service:

  • Account data. When you create an account we store your email address, first and last name, country, and stated UK status (e.g. "Already in the UK on a visa", "Looking to come to the UK"). You provide these at sign-up.
  • Newsletter subscription. If you tick the newsletter box at sign-up or use the footer form, we add your email to our digest list. You can unsubscribe from any newsletter email or by emailing us.
  • Activity. When you save a job or company, mark a job's application status, or click an apply link, we store the association between your account and the relevant job/company id.
  • Technical metadata captured at sign-up. A short cryptographic hash of your IP address (used to detect repeated sign-up abuse — we cannot recover the original IP from the hash), your browser user-agent, the referring URL, and any UTM parameters in the URL.
  • Session cookie. When you sign in we set an HttpOnly cookie called sj_session that contains an opaque random session id. It is required for the site to remember you across page loads.
  • Visit statistics. When a visit starts we record where it came from (the referring website's domain, any UTM campaign tags, the page you landed on), your country, device type and a short hash of your browser user-agent. These records are anonymous: they are tied to a random visit id, not to you. If you later create an account, the visits from that browser are linked to your account so we know how you found us. You can opt out at any time by choosing Reject in the cookie banner, which also deletes this browser's anonymous visit records.
  • Security logs. Our hosting provider, Cloudflare, logs each request to the site: your IP address, network (ASN) and country, browser user-agent, the page requested, the response, and Cloudflare's bot-detection signals. We use these logs only to keep scrapers and attacks off the site and to fix errors.
  • Pro subscription. If you buy SponsorJobs Pro we store your plan, its status and renewal or end date, and the customer and subscription ids Stripe gives us, plus a log of the billing events Stripe sends us. Stripe collects your card details directly; we never see or store your full card number.

We do not collect bank or card numbers, sensitive personal data, or special-category data (health, biometric, religious, etc.).

Why we collect it (lawful basis)

  • Performing the contract / providing the service — account creation, sign-in, saving jobs, application tracking. UK GDPR Article 6(1)(b).
  • Legitimate interests (soft opt-in) — the weekly email of new sponsor jobs for account holders. We send it under the "soft opt-in" rule (PECR regulation 22(3)): we collected your email when you created your account, the email is about our own service (new sponsor jobs), you can say no when you sign up ("Don't send these"), and every email has a one-click unsubscribe. You can also turn it off in your account settings. UK GDPR Article 6(1)(f).
  • Performing the contract + legal obligation — a SponsorJobs Pro subscription: taking payment through Stripe, giving you the Pro features, and keeping billing records for tax. UK GDPR Article 6(1)(b) and 6(1)(c).
  • Consent — newsletter emails you sign up for with the footer form. UK GDPR Article 6(1)(a).
  • Legitimate interest — fraud and abuse detection (IP-hash deduplication, rate limiting, security logs), aggregate analytics that do not identify individuals. UK GDPR Article 6(1)(f).

How long we keep it

  • Account data — for as long as your account is active, plus up to 30 days after deletion for backup-rotation cleanup.
  • Magic-link tokens — 15 minutes from creation, then automatically expired. We retain the row (used / expired) for up to 30 days for security audit purposes.
  • Newsletter subscriptions — until you unsubscribe. Unsubscribed rows are kept (marked inactive) so we can honour re-subscribes and ensure we don't email you again by accident.
  • Sign-up metadata (IP hash, user-agent, UTM) — two years from sign-up, then deleted.
  • Billing records (Pro plan history, Stripe ids, billing events) — kept for six years after the payment for UK tax and accounting rules, even if you delete your account.
  • Visit statistics — anonymous visits are deleted after 26 months; visits linked to an account are kept while the account exists and deleted with it.
  • Security logs (IP address, request and bot-detection details) — 30 days, then deleted automatically.

Who we share with

We share personal data only with the small set of processors we need to run the service:

  • Cloudflare (Workers, D1, KV, R2) — hosting and request infrastructure. Data is stored in Cloudflare's UK / EU edge regions where possible.
  • Stripe — only if you buy SponsorJobs Pro: takes the payment, stores your card, sends receipts and trial reminders, and runs the page where you manage or cancel your subscription. We share your email address and account id with Stripe for this. Stripe acts as an independent controller for some payment data (for example fraud prevention), under its privacy policy.
  • Cloudflare Email Service — to send transactional emails (sign-in links and codes, welcome) and the weekly digest if you opt in. Your email address is processed for the duration required to deliver each message.

We do not sell or share your personal data with advertisers, data brokers, recruitment agencies, or sponsor companies. The job / sponsor listings on the site are aggregated from public sources independently of any one user's profile.

International transfers

Cloudflare may process data in the United Kingdom, the European Economic Area, or the United States under standard contractual clauses (UK IDTA / EU SCCs) appropriate to each jurisdiction.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Ask us to correct inaccurate data
  • Ask us to delete your data ("right to erasure")
  • Ask us to restrict or object to certain processing
  • Receive a portable copy of your data
  • Stop marketing emails at any time (one-click unsubscribe, or your account settings)

To exercise any of these, email hello@sponsorjobs.co from the address on your account and we will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

We do not use cookies for advertising or cross-site tracking. Our own cookies are all first-party:

  • sj_session — your sign-in session (opaque random id, HttpOnly). Set when you sign in, cleared when you sign out.
  • sj_consent — remembers your cookie-banner choice.
  • sj_seen, sj_bypass_used, sj_gate_seen — count job views for the daily free-view limit. They hold page ids and a date, nothing about you.
  • sj_vt plus the sj_ts browser-storage entry — visit statistics (see above): random visit ids and the time of your last activity, kept up to 400 days. This is analytics used only to understand where visitors come from, so it runs without prior consent under the statistics exemption in the UK PECR (as amended by the Data (Use and Access) Act 2025); choosing Reject in the cookie banner turns it off.
  • __cf_bm — set by Cloudflare, our hosting provider, to tell people from automated bots and keep scrapers off the site. It expires after 30 minutes and is strictly necessary for security, so it is set without consent.

Third-party analytics (PostHog, Google Analytics) load only if you choose Accept in the cookie banner.

Changes to this policy

We will update the version date at the top of this page when this policy changes in a way that affects how we process your data. When changes are material we will email registered users from hello@sponsorjobs.co and surface a prompt at the next sign-in.

Contact

Questions, requests, or complaints — hello@sponsorjobs.co.