GDPR & Data Protection Policy

This Policy is intended to support Jobbiee’s compliance with applicable data protection and privacy laws, including the EU General Data Protection Regulation (GDPR) where applicable, together with other data protection laws that may apply based on the location of Jobbiee, its users, or its processing activities.

The GDPR defines personal data broadly as information relating to an identified or identifiable natural person, including information that can identify a person directly or indirectly through identifiers such as a name, identification number, location information, online identifier, or other factors relating to that individual.

This Policy applies to personal data processed by Jobbiee through its website, platform, applications, job-search and recruitment services, communications, and related business activities. It also establishes expectations for employees, contractors, service providers, and other parties processing personal data on behalf of Jobbiee.

Jobbiee is committed to handling personal data lawfully, fairly, transparently, securely, and in a manner that respects the privacy and legal rights of individuals.

Jobbiee aims to ensure that personal data is processed in accordance with applicable data protection principles. Personal data should be:

• 2.1 Processed lawfully, fairly, and transparently in relation to the individual.
• 2.2 Collected for specified, explicit, and legitimate purposes and not subsequently processed in a manner incompatible with those purposes.
• 2.3 Adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
• 2.4 Accurate and, where necessary, kept up to date. Reasonable steps should be taken to correct or delete inaccurate personal data without undue delay.
• 2.5 Kept in an identifiable form for no longer than is necessary for the purposes for which it is processed, subject to applicable legal, regulatory, contractual, or legitimate retention requirements.
• 2.6 Processed in a manner that provides appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical and organizational measures.

Subject to applicable law and any applicable exceptions, individuals may have rights including:

• 3.1 The right to be informed about the collection and use of personal data.
• 3.2 The right of access to personal data.
• 3.3 The right to rectification of inaccurate or incomplete personal data.
• 3.4 The right to erasure, also known as the right to be forgotten, in circumstances provided by law.
• 3.5 The right to restrict processing in circumstances provided by law.
• 3.6 The right to data portability where applicable.
• 3.7 The right to object to certain processing, including direct marketing and certain processing based on legitimate interests.
• 3.8 Rights relating to automated decision-making and profiling, where applicable.

These rights may be subject to legal limitations and exceptions.

Jobbiee will process personal data only where there is a lawful basis under applicable law.

Depending on the circumstances, lawful bases may include:

• 4.1 The individual has given consent for one or more specific purposes.
• 4.2 Processing is necessary to perform a contract with the individual or to take steps at the individual’s request before entering into a contract.
• 4.3 Processing is necessary to comply with a legal obligation.
• 4.4 Processing is necessary to protect the vital interests of an individual or another person.
• 4.5 Processing is necessary for a task carried out in the public interest or under applicable official authority.
• 4.6 Processing is necessary for legitimate interests pursued by Jobbiee or a third party, except where those interests are overridden by the individual’s rights and freedoms.

Where Jobbiee processes special categories of personal data, it will do so only where an applicable legal condition permits or requires such processing and appropriate safeguards are in place.

Jobbiee may collect personal data directly from users and from third parties where permitted by applicable law.

Personal data may be processed for purposes such as:

• 5.1 Creating and managing user profiles and accounts.
• 5.2 Providing job-search, job-alert, CV/resume, matching, recruitment, and related Services.
• 5.3 Matching candidate profiles with potentially relevant employment opportunities.
• 5.4 Supporting communications between candidates, employers, recruiters, and Jobbiee where applicable.
• 5.5 Providing customer support and responding to enquiries.
• 5.6 Maintaining the security, functionality, and performance of the Site.
• 5.7 Detecting and preventing fraud, misuse, security incidents, and unlawful activity.
• 5.8 Improving Jobbiee’s products, services, matching functionality, and user experience.
• 5.9 Complying with legal and regulatory obligations.

Jobbiee will not process personal data for incompatible purposes without an appropriate legal basis or other lawful authorization.

Jobbiee will seek to collect and process only the personal data that is reasonably necessary for the relevant purpose.

For example, information included in a CV/resume or profile may be processed where necessary to provide job-search, job-alert, matching, recruitment, or related services.

Users should avoid submitting personal information that is not relevant or necessary for the service they are using.

Jobbiee will take reasonable steps to ensure that personal data it processes is accurate and, where necessary, current.

Users are responsible for keeping information in their Jobbiee profile, CV/resume, contact details, employment history, qualifications, and job preferences accurate and up to date.

Where Jobbiee becomes aware that personal data is inaccurate or incomplete, it will take reasonable steps to correct, update, or delete the information as appropriate.

Jobbiee will retain personal data only for as long as reasonably necessary for the purposes for which it was collected or processed, or as required or permitted by applicable law.

Retention periods may vary depending on the type of information, the purpose of processing, account status, contractual requirements, legal obligations, dispute-resolution requirements, and legitimate business needs.

When personal data is no longer required, Jobbiee will take reasonable steps to delete, anonymize, or securely dispose of it, subject to applicable legal or operational requirements.

Jobbiee will use reasonable technical and organizational measures designed to protect personal data against unauthorized or unlawful processing and against accidental loss, destruction, alteration, or damage.

Security measures may include access controls, authentication, encryption where appropriate, secure communications, monitoring, backups, staff training, vendor controls, and secure deletion practices.

No online service or security system can guarantee absolute security. Jobbiee therefore cannot guarantee that personal data will be completely secure in every circumstance.

Jobbiee will maintain appropriate records and processes to demonstrate compliance with applicable data protection obligations.

Records may include, where applicable:

• 10.1 The identity and contact details of Jobbiee and relevant privacy contacts.
• 10.2 The purposes and lawful bases for processing personal data.
• 10.3 Categories of personal data and categories of individuals whose data is processed.
• 10.4 Information about relevant data processors and service providers.
• 10.5 Applicable data-retention periods.
• 10.6 Records of relevant international transfers and safeguards.
• 10.7 Appropriate technical and organizational security measures.

Where required by applicable law, Jobbiee may designate or appoint a Data Protection Officer or other privacy contact.

Jobbiee may conduct a Data Protection Impact Assessment (DPIA) where required by applicable law, particularly where a proposed processing activity is likely to result in a high risk to the rights and freedoms of individuals.

A DPIA may consider:

• 11.1 The types of personal data involved.
• 11.2 The purposes of processing.
• 11.3 The necessity and proportionality of the processing.
• 11.4 The individuals affected by the processing.
• 11.5 Potential risks to individuals.
• 11.6 Risks to Jobbiee and its systems.
• 11.7 Appropriate measures to reduce or manage identified risks.

Where relevant, automated matching, CV analysis, predictive analysis, or profiling features may be assessed for privacy, fairness, security, and compliance risks.

Jobbiee will provide appropriate privacy information when collecting personal data, or within the timeframe required by applicable law when information is obtained from another source.

Privacy information may include:

• 12.1 The identity and contact details of Jobbiee and relevant privacy contacts.
• 12.2 The purposes and lawful bases for processing.
• 12.3 Categories of personal data collected.
• 12.4 Relevant recipients or categories of recipients.
• 12.5 Applicable retention periods or criteria used to determine retention.
• 12.6 Applicable data-subject rights.
• 12.7 Information about consent and withdrawal of consent where processing is based on consent.
• 12.8 Information about relevant international transfers and safeguards.
• 12.9 Information about automated decision-making or profiling where applicable.
• 12.10 Where required, information about the consequences of failing to provide requested personal data.

Individuals may request access to personal data Jobbiee holds about them, subject to applicable law.

Requests may be submitted to info@jobbiee.com.

Jobbiee may need to verify the identity of the requester before providing information. Requests will generally be handled within the time period required by applicable law. Where an extension is legally permitted because of complexity or the number of requests, Jobbiee will provide appropriate notice.

Jobbiee may charge a reasonable fee or refuse a request where applicable law permits this, including in relation to manifestly unfounded or excessive requests.

Individuals may request that Jobbiee correct inaccurate or incomplete personal data.

Jobbiee will review and, where appropriate, correct the relevant information within the timeframe required by applicable law.

Where appropriate and legally required, Jobbiee may notify relevant recipients of corrections to personal data that was previously shared with them.

Individuals may request deletion of their personal data where one of the grounds for erasure under applicable law applies, including where:

• 15.1 The information is no longer necessary for the purpose for which it was collected.
• 15.2 Consent has been withdrawn and there is no other lawful basis for processing.
• 15.3 The individual has objected to processing and there is no overriding lawful basis for continued processing.
• 15.4 The personal data has been processed unlawfully.
• 15.5 Deletion is required to comply with a legal obligation.

Jobbiee may retain information where permitted or required by law, including where necessary to establish, exercise, or defend legal claims, comply with legal obligations, or protect legitimate interests.

Individuals may have the right to request restriction of processing in circumstances provided by applicable law.

Where processing is restricted, Jobbiee will generally retain only the information necessary for the permitted purposes and will not process it further except as allowed by law.

Where applicable, individuals may have the right to receive certain personal data they have provided to Jobbiee in a structured, commonly used, and machine-readable format and to transmit that information to another controller.

This right generally applies only where the relevant legal conditions are met, such as processing based on consent or a contract and carried out by automated means.

Requests may be submitted to info@jobbiee.com.

Individuals may have the right to object to certain processing based on legitimate interests, direct marketing, or other grounds provided by applicable law.

Where an individual objects to direct marketing, Jobbiee will stop processing personal data for that purpose as required by applicable law.

Where an objection is made to processing based on legitimate interests, Jobbiee will assess the objection and may continue processing where it has compelling legitimate grounds permitted by law or where processing is necessary for legal claims.

Jobbiee may use automated technologies to support job matching, CV analysis, search relevance, recommendations, or related functionality.

Where applicable law gives individuals rights concerning decisions based solely on automated processing that produce legal or similarly significant effects, Jobbiee will provide the rights and safeguards required by that law.

Where required, these safeguards may include the ability to request human intervention, express a point of view, or challenge a decision.

Jobbiee may use personal data for profiling or automated analysis in connection with employment-related services, including CV competency analysis, job matching, predictive analysis, recommendations, and related functionality.

Where profiling is used, Jobbiee will seek to apply appropriate technical and organizational measures to:

• 20.1 Provide appropriate information about the nature and purpose of the profiling.
• 20.2 Use appropriate analytical methods.
• 20.3 Reduce the risk of inaccurate or unfair results.
• 20.4 Enable correction of relevant information where errors are identified.
• 20.5 Protect personal data used in profiling against unauthorized access or misuse.
• 20.6 Consider applicable legal requirements concerning discrimination, fairness, transparency, and automated decision-making.

Jobbiee does not guarantee that automated matching, analysis, recommendations, or predictions will always be accurate or result in employment.

Depending on the Services used, Jobbiee may collect and process categories of personal data such as:

• First name and surname — to create and manage a user profile.
• Date of birth or age information, where necessary and lawfully collected — for profile or eligibility purposes.
• Address or location information — to support location-based job searches and matching.
• Current and previous employment positions — to create and evaluate professional profiles.
• Employment history and experience — to support job matching and recruitment-related services.
• Gender, where voluntarily provided and legally permitted — for profile or reporting purposes.
• Education, qualifications, skills, certifications, and other professional information — to support job matching and applications.
• Information contained in a CV/resume or profile — to provide relevant employment-related services.
• Telephone number — for account, service, or recruitment-related communications where applicable.
• Email address — for account management, job alerts, communications, and service delivery.
• Job preferences and career interests — to provide job alerts, recommendations, and matching.
• Technical and usage information — to operate, secure, analyze, and improve the Site.

Jobbiee may process additional information where necessary for a specific feature or service, subject to applicable law and the relevant privacy notice.

Jobbiee will use reasonable safeguards when personal data is transferred or communicated.

Where appropriate:

• 22.1 Personal data will be transferred using secure communication channels.
• 22.2 Access to personal data will be limited to authorized individuals and service providers who need it for legitimate purposes.
• 22.3 Sensitive information should be handled using appropriate security measures and should not be sent through insecure channels where a secure alternative is reasonably available.
• 22.4 Personal data sent to third-party service providers will be subject to appropriate contractual, technical, or organizational safeguards where required.
• 22.5 Information intended for physical transfer should be protected against unauthorized access or disclosure.
• 22.6 Employees, contractors, and service providers should follow Jobbiee’s security procedures when handling personal data.

Jobbiee will take reasonable measures designed to protect stored personal data.

These measures may include:

• 23.1 Password protection and access controls.
• 23.2 Encryption where appropriate for data at rest or in transit.
• 23.3 Role-based access and least-privilege principles.
• 23.4 Secure backups and recovery processes.
• 23.5 Security monitoring and appropriate system maintenance.
• 23.6 Restrictions on storing personal data on unauthorized personal devices or systems.
• 23.7 Appropriate controls for third-party hosting and cloud service providers.

When personal data is no longer required and there is no legal or legitimate reason to retain it, Jobbiee will take reasonable steps to securely delete, anonymize, or otherwise dispose of the information.

Electronic records should be securely deleted using appropriate technical processes, and physical records should be securely destroyed where applicable.

Jobbiee will limit access to personal data to authorized personnel, contractors, and service providers who require access for legitimate business or service purposes.

• 25.1 Personal data should not be shared informally or with unauthorized persons.
• 25.2 Access should be granted based on job responsibilities and the principle of least privilege.
• 25.3 Personal data should not be left unattended or exposed to unauthorized individuals.
• 25.4 Devices and systems displaying personal data should be secured when left unattended.
• 25.5 Personal data used for marketing should be processed in accordance with applicable privacy and electronic-marketing laws and any required consent or opt-out requirements.

Jobbiee will maintain reasonable information-security practices designed to protect personal data and the systems that process it.

These practices may include:

• 26.1 Strong authentication and password controls.
• 26.2 Regular security updates and software patching.
• 26.3 Appropriate endpoint, network, and application security.
• 26.4 Restrictions on unauthorized software and system changes.
• 26.5 Monitoring for security incidents and suspicious activity.
• 26.6 Appropriate procedures for responding to security vulnerabilities.

Jobbiee will seek to maintain organizational controls appropriate to the nature and volume of personal data processed.

These may include:

• 27.1 Privacy and security awareness for personnel handling personal data.
• 27.2 Access limited to individuals who need information for their assigned duties.
• 27.3 Appropriate privacy and security training.
• 27.4 Appropriate supervision and review of data-handling activities.
• 27.5 Regular review of data collection, processing, retention, and security practices.
• 27.6 Periodic review of personal data to determine whether continued retention is necessary.
• 27.7 Appropriate contractual obligations for employees, contractors, processors, and service providers handling personal data.
• 27.8 Appropriate due diligence and contractual safeguards for third-party processors.
• 27.9 Reasonable procedures for identifying, reporting, investigating, and responding to privacy or security incidents.

Jobbiee may use service providers or infrastructure located in countries other than the country in which an individual resides.

Where personal data is transferred internationally and applicable law requires safeguards, Jobbiee will use an appropriate lawful transfer mechanism.

Depending on the applicable legal framework, safeguards may include an adequacy decision, standard contractual clauses, contractual safeguards, binding corporate rules, an approved certification mechanism, or another legally recognized transfer mechanism.

Where required, Jobbiee will provide appropriate information about international transfers in its privacy notices.

Jobbiee will maintain reasonable procedures for identifying, assessing, containing, and responding to personal data breaches.

Where a breach occurs, Jobbiee will assess the nature and risk of the incident and take actions required by applicable law.

Where notification to a regulator or affected individuals is legally required, Jobbiee will make such notifications within the applicable statutory timeframe.

A breach response may include information about:

• 29.1 The nature and categories of the personal data affected.
• 29.2 The approximate number of individuals or records affected, where known.
• 29.3 The likely consequences of the breach.
• 29.4 Measures taken or proposed to contain and remediate the incident.
• 29.5 Appropriate contact information for privacy or data-protection enquiries.

This Policy is effective as of August 29, 2026.

Jobbiee may update this Policy from time to time to reflect changes in its Services, technology, business operations, or applicable privacy and data-protection requirements.

Where appropriate, material changes will be communicated through the Site or other suitable means.

For questions or privacy requests, please contact:

Jobbiee
Website: https://jobbiee.com/
Email: info@jobbiee.com