Skip to main content
SponsorJobs

Privacy Policy

Version 2026-05-27 · Last updated 27 May 2026

Who we are

SponsorJobs is an independent, pre-launch project that aggregates publicly available UK sponsor-licence and job-listing data into a single searchable site. We are not affiliated with UK Visas and Immigration (UKVI), the Home Office, or any of the companies listed on the site.

The data controller for the personal data described in this policy is SponsorJobs, contactable at hello@sponsorjobs.co.

What we collect

We collect the minimum personal data needed to run the service:

  • Account data. When you create an account we store your email address, first and last name, country, and stated UK status (e.g. "Already in the UK on a visa", "Looking to come to the UK"). You provide these at sign-up.
  • Newsletter subscription. If you tick the newsletter box at sign-up or use the footer form, we add your email to our digest list. You can unsubscribe from any newsletter email or by emailing us.
  • Activity. When you save a job or company, mark a job's application status, or click an apply link, we store the association between your account and the relevant job/company id.
  • Technical metadata captured at sign-up. A short cryptographic hash of your IP address (used to detect repeated sign-up abuse — we cannot recover the original IP from the hash), your browser user-agent, the referring URL, and any UTM parameters in the URL.
  • Session cookie. When you sign in we set an HttpOnly cookie called sj_session that contains an opaque random session id. It is required for the site to remember you across page loads.

We do not collect bank or payment information, sensitive personal data, or special-category data (health, biometric, religious, etc.).

Why we collect it (lawful basis)

  • Performing the contract / providing the service — account creation, sign-in, saving jobs, application tracking. UK GDPR Article 6(1)(b).
  • Consent — newsletter and weekly digest emails, given explicitly via the unchecked-by-default tick at sign-up or footer form. UK GDPR Article 6(1)(a).
  • Legitimate interest — fraud and abuse detection (IP-hash deduplication, rate limiting), aggregate analytics that do not identify individuals. UK GDPR Article 6(1)(f).

How long we keep it

  • Account data — for as long as your account is active, plus up to 30 days after deletion for backup-rotation cleanup.
  • Magic-link tokens — 15 minutes from creation, then automatically expired. We retain the row (used / expired) for up to 30 days for security audit purposes.
  • Newsletter subscriptions — until you unsubscribe. Unsubscribed rows are kept (marked inactive) so we can honour re-subscribes and ensure we don't email you again by accident.
  • Sign-up metadata (IP hash, user-agent, UTM) — two years from sign-up, then deleted.

Who we share with

We share personal data only with the small set of processors we need to run the service:

  • Cloudflare (Workers, D1, KV, R2) — hosting and request infrastructure. Data is stored in Cloudflare's UK / EU edge regions where possible.
  • Resend — to send transactional emails (sign-in magic links, welcome) and the weekly digest if you opt in. Your email address is shared with Resend for the duration required to deliver each message.

We do not sell or share your personal data with advertisers, data brokers, recruitment agencies, or sponsor companies. The job / sponsor listings on the site are aggregated from public sources independently of any one user's profile.

International transfers

Cloudflare and Resend may process data in the United Kingdom, the European Economic Area, or the United States under standard contractual clauses (UK IDTA / EU SCCs) appropriate to each jurisdiction.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Ask us to correct inaccurate data
  • Ask us to delete your data ("right to erasure")
  • Ask us to restrict or object to certain processing
  • Receive a portable copy of your data
  • Withdraw consent for marketing emails at any time

To exercise any of these, email hello@sponsorjobs.co from the address on your account and we will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

We use one cookie: sj_session, an HttpOnly, SameSite=Lax, Secure cookie containing an opaque random session id. It is set when you sign in and cleared when you sign out. We do not use cookies for advertising, cross-site tracking, or third-party analytics. We do not deploy any non-essential cookies that would require a consent banner under the UK PECR.

Changes to this policy

We will update the version date at the top of this page when this policy changes in a way that affects how we process your data. When changes are material we will email registered users from hello@sponsorjobs.co and surface a prompt at the next sign-in.

Contact

Questions, requests, or complaints — hello@sponsorjobs.co.