Effective Date: [29-09-2025]
Last Updated: [29-09-2025]
Stafty Ltd is committed to protecting your personal data and complying with the UK GDPR and Data Protection Act 2018. This policy explains what data we collect, how we use it, how cookies work, how long data is kept, and your rights.
Account data: name, email, phone, password, profile photo.
Professional data: employment history, skills, CVs.
Content/activity: posts, comments, messages, job applications.
Usage data: IP, device type, logs, cookies.
Organisation data: company accounts, job adverts, compliance documents.
Optional data: surveys, marketing preferences, feedback.
To provide Stafty’s services.
To recommend jobs, connections, and content.
To maintain security and prevent fraud.
To send essential service updates.
To comply with legal obligations.
To improve performance through analytics.
Contract: delivering Stafty’s services.
Legitimate interests: ensuring security, platform improvement.
Consent: marketing, cookies.
Legal obligation: tax and compliance.
We may share your data with:
Other users (when profiles are public or you apply for roles).
Service providers under contract.
Authorities where required.
Business successors in mergers or sales.
Where data is transferred outside the UK, Stafty uses approved safeguards such as the UK IDTA or EU SCCs.
Stafty uses cookies, pixels, and storage technologies to:
Enable log-ins and secure sessions.
Store preferences.
Analyse traffic.
Deliver relevant promotions (if consented).
Control: You can manage preferences in our cookie banner or browser settings.
Profiles: active + 24 months after closure.
Posts/messages: until deleted + 12 months in backups.
Job applications: 24 months.
Security logs: 12–24 months.
Financial records: 6 years.
Cookies/analytics: up to 13 months.
Stafty applies encryption, access controls, and audits. While we take reasonable steps, no system is completely secure, and you accept risks when sharing data.
You have rights to:
Access and obtain a copy of your data.
Correct inaccuracies.
Request deletion.
Restrict or object to processing.
Port your data.
Withdraw consent at any time.
Complaints can be made to the UK Information Commissioner (www.ico.org.uk).
Stafty is for users aged 16+. We do not knowingly collect data from children under 16.
We may update this policy from time to time. Significant changes will be notified to users.
Email: privacy@stafty.com
Data Protection Officer: [Name], dpo@stafty.com