Actually Remote Privacy Policy

1. Who We Are

Actually Remote is a UK-based job board helping users find truly remote jobs available to UK residents. We are the data controller for the purposes of this policy.

If you have any questions, contact us at:

📧 support@actuallyremote.co

2. The Data We Collect

We may collect and process the following types of personal data:

From Job Seekers:

• Name
• Email address
• Saved jobs, job alerts preferences
• Login credentials (securely hashed)
• IP address (for security/logging)
• Optional profile details (if applicable)

From Employers:

• Name and contact information
• Company details
• Job listing data
• Subscription status and plan details

Automatically Collected:

• Log data (browser type, pages visited)
• IP address and general location (not precise)
• Cookies (only essential cookies for the site to function)

We do not collect or store any payment card details. Payments are handled securely by Stripe Checkout.

3. How We Use Your Data

We use your data to:

• Provide and maintain the platform
• Allow account login and feature access
• Process job applications and subscriptions
• Send transactional emails (e.g. alerts, confirmations)
• Respond to enquiries and provide support
• Improve site security and performance
• Comply with legal obligations

We may also send occasional product updates or important service notices. You can opt out of non-essential communications at any time.

4. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contractual necessity – e.g. to provide services you've signed up for.
• Consent – e.g. for job alerts or marketing emails.
• Legal obligation – e.g. tax or compliance requirements.
• Legitimate interests – e.g. improving our platform and preventing abuse (balanced with your rights).

5. Cookies and Analytics

We use a privacy-friendly analytics service (Fathom Analytics) that does not track personal information or use cookies. If we do use cookies, you will be informed via a banner and given the choice to accept or reject non-essential cookies.

6. Sharing Your Data

We do not sell your personal data.

We only share data with third-party providers when necessary to operate our service (e.g. Stripe for payments, email providers for alerts). These providers are bound by data processing agreements and only process data on our instructions.

7. International Transfers

Your data may be processed or stored outside the UK (e.g. by Stripe or cloud providers). We ensure that adequate safeguards are in place to protect your data in line with UK GDPR requirements.

8. Data Retention

We retain your data only as long as necessary for the purpose it was collected. For example:

• Account data is retained while your account is active.
• Inactive accounts may be deleted after 12–24 months of inactivity.
• Legal records (e.g. for tax) may be retained for up to 6 years.

You may request account deletion at any time.

9. Your Rights

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Withdraw consent (where applicable)
• Object to processing based on legitimate interests
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise these rights, contact: support@actuallyremote.co

10. Data Security

We implement appropriate technical and organisational measures to keep your data secure, including:

• Encrypted connections (HTTPS)
• Secure password storage (hashed)
• Access controls and regular backups

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you via email or the website.

12. Contact

If you have questions about this policy or how we handle your data, contact us at:

📧 support@actuallyremote.co