Privacy Policy

We are a company registered in England and Wales. For any privacy question, contact us at privacy@gradientc.com.

This policy applies to visitors and users everywhere, including the United States, where a growing share of our audience and employer clients are based.

1. What we collect, and why

Browsing the site

We use Google Analytics to understand which pages get traffic and roughly where visitors come from. Analytics does not load until you click "Accept" on the cookie banner; if you click "Decline", it never loads, and your choice is remembered in your browser so you're not asked again. IP addresses are anonymized before Analytics processes them. We do not use Analytics to build individual profiles of you.

Signing in and your account

Signing in — via Google or a magic link sent to your email — is handled by our authentication provider, Supabase. Your session is kept in your browser rather than tracked separately by us. We store the minimum account information needed to operate your account (such as your email address and sign-in method).

Job alerts

If you sign up for job alerts, we use your email address only to send those alerts. You can stop them at any time from your account page.

Employer subscriptions and billing

If you post jobs as an employer, billing is handled by Stripe. We do not see or store your card details — Stripe processes payment directly, under its own privacy and security practices.

Referral links

Some links on this site are referral links. If you sign up through one, we may earn a small commission at no extra cost to you. This applies only to a subset of the job listings we link to, not every "Apply now" button, and is disclosed on every page in the footer.

2. Third parties we use

We do not sell your personal data, and we do not share it with anyone beyond what's needed to run these three services.

3. Where your data is processed

Because we use Google, Supabase, and Stripe, your data may be processed on servers outside the UK, including in the United States. Each of these providers maintains its own safeguards for international transfers (such as Standard Contractual Clauses where applicable). If you'd like more detail on a specific provider's transfer mechanism, contact us and we'll point you to the relevant documentation.

4. How long we keep your data

• Account and job alert data: kept for as long as your account is active, and deleted within a reasonable period after you close your account or unsubscribe.
• Analytics data: retained according to Google Analytics' standard retention settings.
• Billing records: retained as required by UK tax and accounting law (typically up to 6 years), handled via Stripe.

5. Your rights

If you are in the UK or EEA (UK GDPR)

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time (e.g. by declining or later clearing cookies)

To exercise any of these, email privacy@gradientc.com. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

If you are a US resident

Depending on your state, you may have rights under laws such as the California Consumer Privacy Act (CCPA/CPRA) and similar state privacy laws. Where applicable, these include the right to:

• Know what personal data we have collected about you
• Request deletion of your personal data
• Opt out of the "sale" or "sharing" of personal data — we do not sell or share personal data with third parties for advertising purposes
• Not be discriminated against for exercising your privacy rights

To exercise any of these rights, email privacy@gradientc.com. We will respond within the timeframe required by applicable law and may need to verify your identity before processing certain requests.

6. Children's privacy

gradientc.com is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

7. Security

We rely on our third-party providers' security practices (Google, Supabase, Stripe) alongside our own access controls to protect your data. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

8. Changes to this policy

We may update this policy from time to time, for example as our product or legal obligations change. We'll update the "Last updated" date at the top when we do. Material changes affecting how we handle your data will be communicated via the site or, where appropriate, by email.

9. Contact us

Gradient Consulting Limited
Email: privacy@gradientc.com

This policy is provided for general informational purposes and does not constitute legal advice. Given the international scope of your audience, we recommend having this reviewed by a solicitor familiar with UK GDPR and US state privacy law before publishing.