Privacy notice

UK GDPR and the Data Protection Act 2018 apply. This notice is informational — not legal advice.

1. Controller

Ellis Greensitt, sole trader trading as VacancyCheck, is the data controller. Email: hello@vacancycheck.co.uk. No telephone.

2. This website

The public pages are static HTML. The check, order, and subscriber desk pages post over HTTPS to raise a magic-link check, a Stripe invoice, or a subscriber-desk magic link when those APIs are live. Account access for subscribers uses a single-use email magic link (no password). The site sets no cookies on the static pages, runs no analytics pixel, and has no password login. We do not use Google Analytics or a third-party stats script.

The web server keeps ordinary access logs (date and time, path, HTTP status, referring URL, browser type, and IP address) on the London host. Those logs rotate daily and are kept for about 14 days. Your browser may talk to Google Fonts if it loads the typefaces; you can block third-party fonts and the layout still works.

3. If you email us, run a free check, or buy

Drafts you paste for a free check, the subscriber desk, or an order are processed so we can deliver the check or report. We process:

• your name, work email, company name;
• the draft job-ad text you paste, optional live URL, job title, and any note;
• magic-link verification tokens for free checks and for the subscriber desk (active £79.99/mo subscription only);
• short-lived desk session identifiers and monthly report counts for subscription quota;
• payment metadata when you pay a Stripe invoice (processed by Stripe; we do not store full card numbers);
• the PDF or on-screen result we return, and a copy for our records.

Lawful bases: contract (to deliver what you ordered) and legitimate interests (keeping records, defending a complaint, and — only for UK limited-company and LLP work addresses — occasional email about the product, with an opt-out on every mail). STOP is honoured immediately.

4. What we do not do

• No sale of your data.
• No cookies on the static pages; no analytics pixel.
• No open-tracking pixels on these static pages.
• No bought lists.
• No sending customer draft text to third-party AI / LLM APIs, and no use of customer drafts to train third-party AI models.

5. Processors

Who sees your data: Ellis Greensitt trading as VacancyCheck. Processors: email hosting / routing, and Stripe when you pay (we do not store full card numbers). If a processor is outside the UK, we will use a UK-approved transfer tool or not use that processor.

Heuristic flagging runs as local regex / rules software on our UK (London) server. We do not send customer draft text to third-party AI / LLM APIs, and we do not use customer draft text to train third-party AI models.

6. How long

Order emails and reports: kept for up to six years after the contract. Free-check drafts and results: kept only as long as needed to deliver and for short-term abuse prevention, then deleted or anonymised. Outreach suppression lists: kept until you ask us to delete the suppression. Server logs: about 14 days.

7. Your rights

You may ask for access, correction, deletion, restriction, objection, or portability, and you may complain to the Information Commissioner’s Office. Email hello@vacancycheck.co.uk. Objection to direct marketing is absolute.

8. Children

The product is for people dealing with UK recruitment / HR. We do not knowingly take orders from children.

Not legal advice. Not Equality Act clearance.