Privacy Policy

PartTime UK is a trading name of PLUTO TECHNOLOGIES LTD, registered in England and Wales with company number 13936032. We are the controller of the personal data described in this policy and are registered with the Information Commissioner's Office under registration number Z9501054.

Our registered office is Flat, Post Office, Cryers Hill Road, Cryers Hill, High Wycombe, Buckinghamshire, England, HP15 6JP. For any privacy question, email privacy@parttimeuk.co.uk.

Information you give us

• Account details such as your name, email address, password (stored only in hashed form), account type and, if you add them, your phone number and profile photo.
• If you turn on two-factor login, the secret key for your authenticator app (stored encrypted) and your recovery codes (stored only in hashed form). We delete them when you turn two-factor login off or delete your account.
• Your age: students give an age band (16 to 17, 18 to 20 or 21 and over) and confirm they are 16 or over. Employers confirm they are 18 or over and acting for a business. We record when you confirmed. We do not ask for your date of birth.
• If you sign in with Google, the name, email address and profile picture Google shares with us. If you sign in with Apple in our app, the name and email address (or Apple private relay address) Apple shares with us.
• Student profile details such as your university or college, course, availability, CV and any documents you upload.
• Details you add to optional job seeker tools, such as job alerts, your weekly availability, the shifts, pay, weekly hours limit and age band you record in the hours and pay tracker, and the private notes and follow-up dates you add to your applications. The take-home pay estimate is worked out in your browser and the tax region you pick is only saved on your device.
• If you turn on Open to work, the headline, job categories and towns you add, and invitations to apply that employers send you, including any message, whether you said you are not interested and any employers you stop from inviting you.
• Employer details such as your organisation name, contact details and the job posts you create. If an employer publishes a company page, the about text, website, town and (if they choose) their profile image as a logo.
• Notes, ratings and shortlists that employers keep about applications, and the right to work check and written statement records employers keep for people they hire. Employers must not upload copies of identity documents.
• Applications, messages you send to other users, the quick replies you save to reuse in messages, reports you make about other users or job posts, and messages you send to our support team.
• If you use AI Assist on an application message or a job description, the text you sent and the AI versions. We keep them with your application or in your account so our team can check the feature is not misused. Employers do not see your AI drafts.
• Interviews and trial shifts arranged through your account: the job, the times offered and picked, the format, location or joining details, any note or reply and whether it was confirmed, declined or cancelled.

Information created when you use the service

• Safety checks on job posts and messages: whether a job post was held for review and why, and when a message was flagged as a possible scam, as a sign someone may be at risk of harm or as possible grooming of a young person. Flagged items are seen by our team so they can act.
• Your job searches (including the IP address and browser used), saved jobs and application history.
• If you tap Use my current location in the app (or Use my location on the website), your phone or browser shares its approximate location, which is matched to the nearest town on your device. Only the town name is used in your search; your position is never sent to us. We only ask when you tap it.
• Clicks on job listings from our job sources: the job, the company name, the time of the click, whether you used the website or the app and, if you are signed in, your account. For some listings we also keep a scrambled code made from your IP address, which cannot be turned back into it, to spot repeated or automated clicks.
• Technical information such as your IP address, browser, device type and server logs.
• Payment records for sponsored job posts, renewals and Find candidates day passes, including when a day pass started and ended and when you asked for it to start straight away. Card details are handled by Stripe or Google Play and are never stored by us.

UK data protection law requires a lawful basis for each use of personal data. These are the purposes and the bases we rely on.

• Creating and running your account, showing job posts, handling applications and messages between users

  Lawful basis: Contract (we need it to provide the service you signed up for)

• Sending service emails such as email verification, security alerts and application updates

  Lawful basis: Contract

• Sending the job alert and follow-up reminder emails you set up, and running the optional tools in your account such as your availability, the hours and pay tracker, application notes, employer company pages and employer notes and hiring records

  Lawful basis: Contract (you ask us to provide these features)

• Taking payment for sponsored job posts, renewals and Find candidates day passes, and keeping a record that you asked for a day pass to start straight away

  Lawful basis: Contract

• Keeping payment and transaction records for tax and accounting

  Lawful basis: Legal obligation

• Checking you are old enough to use the service and using a student’s age band to hide jobs marked 18 or over only from 16 and 17 year olds

  Lawful basis: Legal obligation and legitimate interests (protecting young people and meeting our online safety duties)

• Keeping the service secure and moderating job posts and messages to prevent fraud, spam and abuse

  Lawful basis: Legitimate interests (protecting our users and the service)

• Recording clicks on job listings from our job sources to understand which listings are useful

  Lawful basis: Legitimate interests (improving the service)

• Recording the searches made on Browse Jobs (the words and filters used, the time, IP address and browser) to understand what people look for and to spot misuse

  Lawful basis: Legitimate interests (improving and protecting the service)

• Sending marketing emails, such as news and tips, if you turn them on in your account

  Lawful basis: Consent (you can withdraw it at any time)

• Open to work: showing your Open to work card (first name and last initial, the towns and job categories you choose, your headline, university or college, availability and profile photo if you have one) to employers who search for candidates, and letting them invite you to apply

  Lawful basis: Consent (it is off until you turn it on, and you can turn it off at any time in your account)

• Sending you an email when an employer invites you to apply, and screening the invitation message for words that are not allowed

  Lawful basis: Consent for the email (part of Open to work, which you can turn off), and legitimate interests for the screening (keeping users safe)

• AI CV rewrite, where the text of your CV and the instruction you type are sent to OpenAI

  Lawful basis: Consent, and explicit consent for any sensitive details in your CV such as health, religion or ethnicity. We ask before your CV is processed and record when you agreed. You can withdraw at any time with Withdraw consent on the CV rewrite page in your account, which also deletes your uploaded CVs and AI versions

• AI Assist on an application message or a job description, where the text you wrote is sent to OpenAI to suggest changes

  Lawful basis: Contract (it only runs when you ask for it, and we need to send your text to provide it)

• Keeping your AI Assist text and the AI versions, and a record of when you used an AI feature, to apply daily limits and check the features are not misused

  Lawful basis: Legitimate interests (keeping the AI features safe and affordable)

• AI summaries of job adverts, where the advert text, job title, location, hours and pay are sent to OpenAI. Nothing about you as the reader is sent, and the summary is shown to other visitors to the same job

  Lawful basis: Legitimate interests (helping job seekers understand adverts quickly). Any contact details in an advert are already public

• Responding to lawful requests from authorities and handling legal claims

  Lawful basis: Legal obligation, or legitimate interests where no specific law applies

Where we rely on legitimate interests, we have weighed our interests against your rights. You can object at any time by emailing privacy@parttimeuk.co.uk.

We do not sell your personal data. We share it only as described here.

Other users

• When you apply for a job posted on PartTime UK, the employer sees your application, the profile details, availability and CV you include and the messages you send them.
• Employers who receive your application are responsible for how they use it in their own recruitment and must follow UK data protection law. Employers can keep private notes, a rating and a shortlist about your application on PartTime UK. If you are hired, they can also keep a record of their right to work check and written statement. These are not shown to you, but you can ask us for a copy of personal data about you, including these records.
• If an employer invites you to an interview or trial shift, you both see its details and replies. Video or phone joining details are only shown to you once you confirm a time. We email you both about invitations, changes and a reminder about 24 hours before, so you do not miss it.
• Employers choose which contact details to show on their job posts. Only students who apply for the job can see these details.
• If an employer publishes a company page, anyone can see it and search engines can list it: the organisation name, about text, website, town, logo if they chose to show one and their live jobs. It is off until the employer publishes it and they can turn it off at any time.
• Your application notes and follow-up dates are private. Employers never see them.
• If you turn on Open to work, employers who search for candidates can see your Open to work card: your first name and last initial, the towns and job categories you chose, your headline, your university or college and availability if you added them, and your profile photo if you have one. They never see your email address, phone number, CV, age band or full name unless you apply to their job. Employers without a day pass only see a few cards a day; the rest are hidden from them and nothing about you is sent to their browser. We record which cards they were shown that day to apply this limit. You can turn it off at any time, and you can stop a particular employer from finding or inviting you.

Service providers (processors)

• OpenAI, to power optional AI features. Your CV is only sent to OpenAI after you give consent, and other text only when you ask for AI Assist or an AI summary. OpenAI processes it on our behalf to provide the feature and, under its terms for business customers, does not use it to train its models.
• Stripe, which processes card payments for sponsored job posts, renewals and Find candidates day passes on our website. Stripe also uses some payment data as a separate controller, for example to prevent fraud, under its own privacy policy.
• Google Play, which processes payments made in our Android app under its own terms and privacy policy.
• Google or Apple, if you choose to sign in with your Google or Apple account. If your profile picture comes from your Google account, it is loaded from Google when it is shown, so Google can see the IP address of the person viewing it.
• IONOS, our hosting and email provider, which stores our data and sends our emails on our instructions.

Job sources

Some listings come from partner job sites, job networks, public sector job boards and employers' own career sites. We publish them under agreements or licences that allow us to show them. For some partner listings we are paid when a visitor clicks through to apply. This costs you nothing and does not change the order of your search results. When you choose to apply for one of these jobs you leave PartTime UK and apply on their website, under their own privacy policy. We do not send your personal data to these sites. For some listings we add an anonymous reference to the link so the site can count the visit; it does not identify you. If you ask for an AI summary of a job, the job advert text (including adverts from these sites) is sent to OpenAI to write the summary. That text is the employer's advert, not information about you.

Legal reasons

We may share information with the police, regulators or courts when the law requires it, or to protect the rights and safety of our users and the service.

• Files you upload, such as CVs, documents and images, are kept in private storage. They are not publicly accessible and are only served to signed in users who are allowed to see them.
• Passwords are stored in hashed form, so we cannot read them.
• You can turn on two-factor login in your account settings. Your authenticator secret is stored encrypted and your recovery codes only in hashed form.
• Information is sent over encrypted connections (HTTPS).
• Access to personal data is limited to people who need it to run and support the service.

Some of our providers, such as OpenAI, Stripe and Google, may process data outside the UK. When that happens we rely on safeguards recognised by UK law, such as UK adequacy regulations, the UK Extension to the EU to US Data Privacy Framework or the International Data Transfer Agreement.

• We keep your account information for as long as your account is open. If you do not log in for 7 years, we delete your account and its data in the same way as when you delete it yourself. We email you 30 days before, and logging in keeps your account.
• When you delete your account it is scheduled for deletion and removed after 30 days. Until then you can contact us to cancel the deletion. During that time your profile is hidden from employers and any jobs you posted are hidden from job seekers. How to delete your account.
• Unverified sign ups are deleted 7 days after the verification link expires.
• Payment and transaction records, including the record that you asked for a day pass to start straight away, are kept for tax and accounting for 7 years after the payment, even if you delete your account, and then deleted. Checkouts that were started but never paid are deleted after 30 days.
• Job applications, including the CV and message sent with them and the notes and interview records that belong to them, are deleted 7 years after the job closed or the last activity on the application (applying, a message or a note), whichever is later, or sooner if the job seeker deletes their account.
• Messages between job seekers and employers are deleted 7 years after the last message in the conversation, or sooner if the application is deleted.
• Records of clicks on listings from our job sources are anonymised when your account is deleted. The scrambled IP code is removed after 90 days and the records are deleted after 24 months.
• Invitations to apply are deleted 6 months after they were sent.
• Notifications in your account (the bell) are deleted 90 days after they were created, or with your account.
• Your application notes and follow-up dates are kept until you delete them, or are deleted with the application or your account. Company pages are kept until the employer account is deleted, and are hidden as soon as the employer turns them off.
• Interview and trial shift records are deleted 12 months after the interview date, or sooner if the application or either account is deleted.
• Job alerts, your availability, your hours and pay tracker entries and your saved quick replies are kept until you delete them or your account.
• AI Assist drafts are kept with the application they belong to, or for job descriptions until you delete your account.
• Your Open to work details are deleted once Open to work has been off for 12 months, straight away if you delete them in your account, or when your account is deleted. Employers cannot see them while Open to work is off or once you ask to delete your account.
• The record of which Open to work cards an employer without a day pass was shown each day is deleted after 2 days.
• Searches on Browse Jobs are kept for 24 months. After 90 days we remove the IP address, browser details and the link to your account, and we remove them straight away when your account is deleted.
• Records of the emails we send (recipient, subject and the start of the message) are kept for 24 months. Unsubscribe links in marketing emails work for 24 months, and you can always turn marketing off in your account settings.
• Records of the actions our staff take in the admin area (for example editing or suspending an account, taking a job down or replying to a support message) are kept for 7 years. They hold the staff member, the action, which account or record it was about and which fields changed, but not the content of messages or passwords, and only part of the IP address.
• Records of your data protection choices and requests (data downloads, consent given or withdrawn, unsubscribes, Open to work turned on or off, deletion requests and requests you send us by email) are kept for 7 years so we can show we acted on them. They hold what happened and when, not the content of your data.
• Records of when you used an AI feature (the feature and the time, not what you wrote) are kept for 12 months to apply daily limits and prevent misuse.
• Your CV AI data (uploaded CVs, the text taken from them, your instructions and AI versions) is kept until you delete it, withdraw your AI consent or delete your account.
• When an account is deleted we keep a short record of it (name, email address, account type and the relevant dates) for 12 months so we can deal with later questions, disputes or misuse. After that we keep only a scrambled (keyed hash) form of the email address, the account type and the dates, and we delete the record 6 years after the account was deleted.
• Messages to our support team are deleted 24 months after they were resolved or last updated. Reports about other users are deleted 24 months after we finish reviewing them.
• Reports about job posts and safety flags on messages, invitations and company pages are deleted 24 months after we finish reviewing them.
• A record of each change to a job seeker's age band (the old and new band, when and whether it was changed at sign up, in settings or by our staff) is kept for 7 years, even if the account is deleted, so we can look into safety concerns about young people. It holds the account number, not your name or contact details.
• Right to work and written statement records that an employer keeps for someone they hired stay with the employer even if the worker deletes their account, because employers must keep check evidence for the employment and 2 years after it. We delete them 2 years after the employment end date the employer records, or 6 years after the record was last changed if no end date is recorded. The employer can delete them sooner.
• We keep information for longer only where the law requires it or where it is needed for a legal claim.

Under UK data protection law you have the right to:

• ask for a copy of your personal data
• have inaccurate data corrected
• have your data deleted
• restrict how we use your data
• receive your data in a portable format
• object to processing based on legitimate interests
• object to direct marketing at any time, in which case we will stop
• withdraw consent at any time, without affecting processing that took place before

You can delete your account in the app or in Settings in your account. You can download a copy of your data from Settings in your account. You get a ZIP file with a readable PDF, a file you can move to another service and the CV and photo files you uploaded. You can turn marketing emails off at any time in the settings in your account or with the unsubscribe link in any marketing email, and every job alert email has a link to pause that alert. We need some details, such as your name and email address, to create your account. If you do not give them we cannot provide the service. Other details are optional.

Automated decisions and AI

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our AI features only make suggestions, such as a rewritten CV or a job summary, which you can check, change or ignore. Employers, not PartTime UK or AI, decide who to contact or hire.

To use any of these rights, email privacy@parttimeuk.co.uk. We will reply within one month.

Complaints

If you are unhappy with how we use your personal data, email privacy@parttimeuk.co.uk with the subject "Data protection complaint". We will acknowledge your complaint within 30 days, look into it and tell you the outcome without undue delay. You also have the right to complain to the Information Commissioner's Office at ico.org.uk (opens in a new tab), although we would appreciate the chance to help first.

We only use essential cookies and browser storage that the site needs to work or that remember a choice you made. We do not use advertising or analytics cookies. Because these items are essential, they do not need your consent, but you can block or delete them in your browser settings. Some parts of the site, such as signing in, will not work without them.

• Session

  Keeps you signed in and protects your account between pages. Only set when you sign in

  Type and duration: Cookie, expires 24 hours after your last visit or when you sign out

• Admin session

  Keeps PartTime UK staff signed in to the admin area. Not set for other users

  Type and duration: Cookies, the sign in cookie lasts up to 2 hours and an optional trusted device cookie lasts 30 days

• Theme

  Remembers whether you chose the light or dark theme

  Type and duration: Browser local storage, until you clear it

• Cookie choice

  Remembers that you have seen the cookie notice

  Type and duration: Browser local storage, until you clear it

• Your town

  Remembers the town you typed, or the nearest town to you if you press Use my location and let your browser share it, so job searches start near you. We only ask for your location when you press that button. Your device position is matched to a town on your device and is never sent to us

  Type and duration: Browser local storage, until you clear it

• Remembered email

  Fills in your email address on the sign in page, only if you tick "Remember me"

  Type and duration: Browser local storage, until you untick it or clear it

• Form progress

  Keeps a job post draft, a payment confirmation, a CV rewrite in progress or the address a verification email was sent to, so you do not lose your work if the page reloads

  Type and duration: Browser local or session storage, removed when the task is finished

• Tax region

  Remembers the tax region you picked for the take-home pay estimate in the hours and pay tracker. Only saved on your device

  Type and duration: Browser local storage, until you change it or clear it

• Applied jobs

  Shows which jobs you have applied for while you browse

  Type and duration: Browser session storage, removed when you close the tab

• Admin preferences

  Remembers layout choices and the sign in name for PartTime UK staff in the admin area. Not set for other users

  Type and duration: Browser local storage, until cleared

PartTime UK is for people aged 16 and over. Employers must be 18 or over. We ask students for an age band rather than a date of birth. Students aged 16 or 17 cannot see or apply for jobs marked 18 or over only, job posts are checked before they go live when they look unsafe, and messages that look like a scam, suggest someone may be at risk of harm or look like an attempt to groom a young person are flagged to our team. Students aged 16 or 17 also see a warning on messages that look like grooming. If you think we hold data about a child under 16, email privacy@parttimeuk.co.uk and we will delete it.

We may update this policy from time to time. The date at the top shows when it last changed. If we make a significant change we will tell you by email or on the site. Our Terms and Conditions and Refund Policy explain the rest of how the service works.