Website privacy policy

North Star Job Hunt processes personal data only where it has a lawful basis for doing so under applicable UK data protection law.

The lawful basis may vary depending on the feature being used. Where North Star Job Hunt relies on consent, you can withdraw that consent at any time, although this will not affect processing that took place before withdrawal.

• Legitimate interests: where processing is necessary to operate recruitment, employability, support, safety, platform integrity, fraud prevention, or associated administrative services in a fair and proportionate way.
• Contract or steps at your request: where processing is necessary to create and run your account, provide requested services, process job applications, manage recruiter workspaces, or deliver features you choose to use.
• Consent: where consent is required or appropriate, including optional cookies and certain optional features or contact preferences.
• Legal obligation: where processing is necessary to meet legal, regulatory, tax, security, anti-fraud, or compliance obligations.

Depending on how you use the Website, North Star Job Hunt may collect and process the following categories of personal data:

• identity and contact details, including name, email address, postal address, telephone number, and account credentials;
• CV and profile data, including work history, education, qualifications, skills, experience, target roles, salary information, preferences, and support needs you choose to share;
• application and recruiter workflow data, including job applications, recruiter messages, shortlist activity, interview practice activity, screening responses, saved jobs, and document history;
• employer screening workflow data, including candidate names, candidate email addresses, reference codes, answers, session timings, delivery status, and the named hiring contact details entered by the organiser;
• recruiter company data, including company name, billing details, team membership, verification information, listing content, and recruiter communications;
• technical and usage data, including IP address, browser type, device information, authentication events, security logs, and page or feature usage data;
• marketing and communication preferences, including alert subscriptions, contact choices, cookie consent, and privacy requests.

North Star Job Hunt is not intended for children under 16. Users must be at least 16 years old to create an account, submit applications, upload documents, answer screening links, or use recruiter or employer tools in their own name.

If North Star Job Hunt becomes aware that personal data relating to a child under 16 has been provided through the Website without an appropriate lawful basis, North Star Job Hunt may remove the information and restrict the related account or workflow while the position is reviewed.

North Star Job Hunt collects most personal data directly from you when you create an account, upload documents, apply for jobs, answer screening questions, contact support, save searches, or use other Website features.

If you choose to sign in or register through a third-party identity provider such as Google, GitHub, or Microsoft, North Star Job Hunt may receive account information from that provider, such as your name, email address, provider account identifier, and related sign-in metadata needed to create or authenticate your North Star account.

North Star Job Hunt may also receive information indirectly from recruiters, employers, hiring managers, course providers, public job sources, or team members where they enter information into the Website about a role, a company, a screening link, an invite, or another workflow that involves you.

For example, an employer or hiring manager may enter a candidate name and email address in order to send a screening link. In that situation, North Star Job Hunt uses the information to deliver the requested workflow and to show the candidate how the screening process works when they access it.

North Star Job Hunt uses personal data to operate accounts, provide recruitment and employability services, process applications, support recruiter workflows, maintain platform security, improve product performance, respond to support requests, and manage legal or compliance obligations.

This includes using third-party identity provider data where you choose a social sign-in option, so North Star Job Hunt can create your account, authenticate you, maintain your session, and reduce unnecessary password friction.

North Star Job Hunt also uses information to operate candidate tools such as CV storage, document history, interview coaching, and related drafting or workflow features chosen by the user.

Where a user creates an account or signs up for non-campaign job-search emails, North Star Job Hunt may send limited server-side conversion information to Meta, such as a hashed email address, technical request data, event time, and event type, so paid and organic marketing performance can be measured without exposing the plain email address to Meta through this event.

Where an employer or hiring manager uses a North Star screening link, North Star Job Hunt uses the candidate's submitted answers to deliver them to the named hiring contact and, where delivery succeeds, to remove the stored answer content afterwards in line with the workflow shown to the user at the point of submission.

AI-assisted features are designed to support drafting, matching, and structured coaching workflows. They are not presented as sole automated decision-making tools and users are expected to review important outputs before relying on them.

North Star Job Hunt may make candidate information visible to recruiters and employers where that is part of the service and where the relevant visibility and contact settings allow it.

Candidate visibility, recruiter search access, and direct-contact preferences are controlled through account settings and associated workflow controls. Recruiters are expected to use candidate information only for legitimate recruitment purposes.

North Star Job Hunt shares personal data only where it is necessary for the service, required by law, or part of a workflow you have chosen to use.

• recruiters, employers, hiring managers, and hiring organisations where you apply, make your profile visible, respond to screening, or where they use candidate workflows through the Website;
• course providers or delivery partners where you register interest in a course or later enrol in one;
• service providers that support Website operations, such as Supabase for authentication, database, and storage infrastructure, Vercel for hosting, Cloudflare Turnstile for anti-bot checks, Google, GitHub, or Microsoft where you choose those sign-in routes, Resend for transactional emails, Stripe for recruiter billing, Microsoft 365 and Microsoft Teams for interview scheduling where enabled, OpenAI for AI-assisted features, Cloudmersive for file scanning where enabled, and Meta where campaign or conversion measurement is used;
• professional advisers, insurers, regulators, law enforcement bodies, courts, or other third parties where disclosure is required to meet legal obligations, protect rights, prevent fraud, or deal with disputes.

North Star Job Hunt may send service communications where necessary to operate accounts, protect the service, administer billing, or respond to requests made by users.

North Star Job Hunt may also send optional marketing, updates, alerts, or related communications where you have chosen to receive them or where otherwise permitted by law. You can change those preferences through your account or by using the unsubscribe method included in the communication.

North Star Job Hunt does not automatically use a signed-in user's uploaded CV to personalise job search results unless the user opts into that feature or takes a related action that clearly calls for it.

Guest CV refinement is temporary, consent-based, and designed to support the current search flow only. Temporary derived search information may be used during that search session, but the uploaded guest CV is not treated as a saved account document unless the user creates an account and completes the relevant save flow.

Personal information, including CV details, applications, and contact information, may be accessed by recruiters, employers, course providers, or service providers outside the United Kingdom or European Economic Area where that forms part of the recruitment, application, learning, support, or technical service being used.

Where international transfers occur, North Star Job Hunt aims to use appropriate safeguards and contractual or organisational measures where required by law.

North Star Job Hunt uses AI-assisted features to support drafting, summarisation, structured coaching, and related workflow support. These features are intended to assist users, not to replace human judgement.

North Star Job Hunt does not present its AI tools as sole automated decision-making about whether a person should be hired, shortlisted, rejected, or otherwise subject to a legal or similarly significant decision. Recruiters, employers, and users remain responsible for meaningful human review before relying on AI-assisted output.

North Star Job Hunt applies technical and organisational measures intended to protect personal data against unauthorised access, misuse, accidental loss, or unlawful disclosure. Those measures may include authentication controls, MFA, rate limiting, access restrictions, malware checks, audit logging, and related security controls where appropriate.

North Star Job Hunt keeps personal data only for as long as reasonably necessary for the purposes for which it was collected, to meet legal or operational obligations, to resolve disputes, or to protect the integrity and safety of the service.

• inactive account records, including profile, preference, saved-search, application, message, and document metadata, are generally reviewed after 24 months of no meaningful account activity and may then be deleted or anonymised unless North Star Job Hunt still needs them for security, fraud prevention, dispute handling, or another lawful reason;
• uploaded CVs, generated documents, and related stored files are generally kept while the account remains active and are then subject to the same inactivity review or any deletion request accepted through the Website;
• candidate application, inbox message, and interview scheduling records are generally kept while the account remains active and then reviewed after 24 months of inactivity, unless North Star Job Hunt needs to retain limited records for dispute handling, abuse prevention, or legal reasons;
• for employer screening links, North Star Job Hunt aims to remove stored answer content immediately after successful delivery to the named hiring contact. If delivery does not complete successfully, the answer content may be held temporarily so that delivery can be retried or the organiser can resend it manually. Limited session metadata may be kept for up to 12 months so North Star can show status, maintain security, and keep an audit trail of the workflow;
• general support enquiries are typically kept for up to 24 months after the enquiry is closed, unless the matter needs to be kept for longer because it develops into a complaint, dispute, or legal issue;
• privacy requests and the records showing how North Star Job Hunt responded to them may be kept for up to six years after the request is closed so North Star can demonstrate compliance and handle any later complaint or dispute;
• billing and financial records may be kept for up to six years after the end of the relevant financial period, or longer where the law requires it;

Subject to applicable law, you may have rights to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to certain processing, or portability where applicable.

Where North Star Job Hunt relies on legitimate interests, you have the right to object to that processing if your particular circumstances justify it. You also have the right to object at any time to direct marketing.

Where North Star Job Hunt relies on consent, you can withdraw that consent at any time. North Star Job Hunt also provides account-level controls and privacy-request workflows for certain common requests.

If you are unhappy with how North Star Job Hunt has handled your personal data, you can complain to the UK Information Commissioner's Office. Current ICO guidance and complaint details are available at ico.org.uk.

If you have questions about this Privacy Policy, want to make a privacy request, or need to contact North Star Job Hunt about personal data, you may use the Contact page, email support, or write to the registered office address shown on the Website.

If you need to ask about how a recruiter, employer, or hiring contact uses your information after North Star Job Hunt has passed it on to them for their own recruitment purposes, you may also need to contact that organisation directly because it will usually be responsible for that later use.