Privacy Notice

1. Who we are

Settleskill operates this recruitment platform and decides how and why your personal data is processed — we are the data controller under the EU/UK GDPR and the equivalent "data controller" or "data fiduciary" concept in other laws. You can reach our privacy team at privacy@settleskill.com.

Employers who receive candidate profiles through the platform act as independent controllers for their own recruitment decisions and are bound by our Data Processing Terms.

2. What we collect

• Account data — name, email address, password hash, role (worker, employer, admin), language and notification preferences.
• Worker profile data — nationality, location, date of birth, sector, years of experience, skills, spoken languages, availability, profile photo.
• Documents and media — CV, passport-related details you choose to provide, police clearance certificate, work videos and a spoken-English introduction video.
• Employer data — company name, registration number, country, sector, contact person and verification documents.
• Usage and messaging data — messages exchanged on the platform, shortlists, profile views, notifications, and technical logs (IP address, device and browser type) kept for security.
• Payment data — the status of the one-time €50 verification fee. Card details are handled by our payment provider; we never see or store your full card number.

3. Special category and sensitive data

A police clearance certificate concerns criminal-record information (Art. 10 GDPR) and your videos may reveal your image and voice. We only process these because you explicitly consent to publishing them to verified employers, and we make them available solely to employers we have approved. You can withdraw this consent at any time by deleting the file or your account, which stops all future sharing.

4. Why we process it, and on what legal basis

• Contract — to create your account, build your profile, run messaging and give employers access to the service.
• Consent — publishing your documents, videos and photo to employers; optional cookies; marketing emails. Withdrawable at any time.
• Legitimate interests — fraud prevention, platform security, service improvement and defending legal claims, balanced against your rights.
• Legal obligation — accounting records for the verification fee, and responding to lawful requests from authorities.

5. Who we share it with

Verified EU employers (only after you publish your profile), our hosting and database provider, our email provider, and our payment processor. We do not sell personal data and we do not use your data to train third-party AI models. Every processor is bound by a written data processing agreement.

6. International transfers

Because we connect workers in Asia and Africa with employers in Europe, your data is transferred across borders by design. For transfers out of the EEA/UK we rely on the European Commission's Standard Contractual Clauses plus a transfer risk assessment. For transfers from India, Sri Lanka, Nepal, Kenya, Nigeria, South Africa and other countries we rely on your informed consent and contractual safeguards equivalent to those clauses. A copy of the safeguards is available on request.

7. How long we keep it

• Active accounts: for as long as your account exists.
• Inactive worker profiles: deleted 24 months after your last sign-in, after a reminder email.
• Documents and videos: deleted immediately when you delete them or close your account.
• Messages: 24 months. Security logs: 12 months. Payment records: 7 years (tax law).

8. Your rights

Wherever you live, we apply one global standard: access, correction, deletion, restriction, objection, portability, withdrawal of consent, the right not to be subject to solely automated decisions, and the right to nominate someone to act for you. We never charge for these requests and we answer within 30 days.

Exercise them from the Your data rights page or by emailing privacy@settleskill.com.

9. Automated decision-making

Shortlisting is done by human recruiters. Filters on the platform only sort and display profiles; no hiring decision is made automatically about you.

10. Security

Data is encrypted in transit (TLS) and at rest. Documents and videos are stored in private buckets that are unreadable without an authorised, signed link. Access is restricted by row-level security rules so a worker can only reach their own files and only approved employers can view published profiles.

11. Children

The platform is for adults only. You must be at least 18 to register, and we delete accounts we learn belong to minors.

12. Complaints and supervisory authorities

You can complain to your local regulator — for example your EU/EEA Data Protection Authority or the UK ICO, the Data Protection Board of India, Sri Lanka's Data Protection Authority, Pakistan's forthcoming Commission, Kenya's Office of the Data Protection Commissioner, Nigeria's NDPC, South Africa's Information Regulator, or Ethiopia's data protection authority. We would appreciate the chance to resolve it with you first.

13. Changes

We will notify you in-app and by email before any material change takes effect, and we will ask for fresh consent where the law requires it.