Legal

Privacy notice

How JobsPronto Ltd collects and uses the personal data you give us on this site.

Last updated:
Controller:
JobsPronto Ltd

Who we are

JobsPronto Ltd, registered in England and Wales, is the data controller for the personal data collected through this website (jobspronto.co). JobsPronto is a London hospitality recruitment service. Wopla, our sister product for short-notice shift staffing, has its own website; this notice covers only what JobsPronto collects, including the Wopla interest form on this site.

Questions, requests or complaints about your personal data: email contact@jobspronto.co.

What we collect, and where

We only collect what you type into a form on this site. There is no account, no sign-in and no tracking of what you read. The fields each journey asks for are listed exactly below.

Applying for a role
Where: /jobs/[role]/apply
Full name, email, phone, where you are based, when you could start, a confirmation that you have the right to work in the UK, relevant hospitality experience (optional), anything you would like the employer to know (optional) and, where the form offers it, a CV (PDF or Word, up to 5MB). We also record the role you applied for, the time, and whether you ticked the separate marketing box. A reference number is shown to you and kept with the application.
Creating a candidate profile
Where: /candidates/profile
Full name, email, phone, where you are based, the role families and types of work you would consider, your hospitality experience, when you could start, a few lines about your experience (optional), a right-to-work confirmation and, where the form offers it, a CV. Where the CV upload is not offered, we may ask you for one later if an employer wants to progress.
Posting a role (employers)
Where: /employers/post-a-role
Company or venue name, contact name, work email, phone, role title, role family, London area or postcode, contract type, pay rate (optional), number of positions, start date (optional), a description of the role, how urgent the hire is and any additional information (optional).
Contacting us
Where: /contact
Your name, email, company (optional) and your message.
Registering interest in Wopla
Where: the “Join Wopla” / “Register your business” form, which opens only when you ask for it
Full name, email, phone (optional), where you are based or your venue area, the role family you are interested in or what you need cover for, and whether you ticked the separate updates box. We also record which page you were on and, after an application, the role that led you there. No Wopla account is created and no shift is promised.
Withdrawing an application
Where: the “Withdraw an application” link in the footer, where available
Your application reference and the email you applied with, used only to find and withdraw that application.
Unsubscribing from emails
Where: /unsubscribe
The token in the link we sent you, used only to record that you no longer want emails from us.

Why we use it, and the lawful basis

To run the recruitment service you asked for
Passing your application to the employer, matching your profile to roles, reviewing and publishing an employer’s role, answering your message, and telling you what happened. Lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in running a recruitment service. Applying for a role, creating a profile or using any service is never marketing consent.
To tell you about Wopla, only when you ask
If you register interest through the Wopla form, we use your details to contact you about Wopla. Lawful basis: taking steps at your request, and our legitimate interest in introducing our sister product to people who asked about it.
To send occasional roles and insights
Only if you tick the separate, unticked marketing box on a form. Lawful basis: consent. You can withdraw it at any time using the unsubscribe link in any email or by emailing us, and withdrawing it does not affect your application or profile.
Right-to-work confirmation
We ask you to confirm you have the right to work in the UK because employers must check this before hiring. Lawful basis: our and the employer’s legal obligation. It is stored as a simple yes, kept separately from any judgement of your experience, never scored and never used to reject anyone automatically.
To keep the site working and safe
Preventing duplicate submissions and abuse. Lawful basis: our legitimate interest in running a reliable service.

We do not make automated decisions about you, and we do not profile you.

Who sees your data

We do not sell personal data, and we do not share it with advertisers.

Employers
When you apply for a role, we share your application (including a CV if you attached one) with the employer who posted it. By applying you agree to this. We do not share your profile with an employer unless we are putting you forward for a role.
Wopla
Only when you ask to join or register your business with Wopla. Nothing else you give JobsPronto is passed to Wopla.
JobsPronto team
Our recruiters and administrators, through our internal recruitment system (JobsPronto Intelligence), to do the work described above.
Service providers
Companies that host the website and our systems and that deliver our emails, acting on our instructions. The website is served from Cloudflare's edge network. JobsPronto Intelligence, where form submissions are stored, and its database are hosted by Render in Frankfurt, Germany. Confirmation and notification emails are sent from our contact@jobspronto.co mailbox, provided by Hostinger. Where a form still uses our earlier form pipeline (Google Sheets, with CVs held in private cloud file storage provided by Supabase), those providers process the submission on our instructions.

How long we keep it

Retention periods are under review and will be set with legal advice before they are published here. Until then, nothing is deleted automatically: applications, profiles, role submissions, messages and Wopla registrations are kept while we work with you or the employer and afterwards as a record of that work. You can ask us to delete your data at any time (see your rights below) and we will do so unless we have to keep something to meet a legal obligation.

Your rights

Under UK data protection law you can ask us for a copy of the personal data we hold about you (access), ask us to correct it (rectification), ask us to delete it (erasure), ask us to restrict how we use it, object to our use of it where we rely on legitimate interests, ask for a copy in a portable format, and withdraw consent to marketing at any time.

To exercise any of these, email contact@jobspronto.co. We may ask you to confirm your identity first. We aim to respond within one month.

If you are not happy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO), the UK regulator, at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first.

Information Commissioner's Office: ico.org.uk (opens in a new tab).

Cookies and browser storage

This website sets no cookies of its own: no analytics cookies, no marketing cookies and no tracking pixels. No analytics service is connected. That is why there is no cookie banner.

To stop a form being sent twice if you refresh the page while it is sending, the browser keeps a random reference (an “idempotency key”) in session storage under the names jp:candidate-application:idempotency-key, jp:candidate-profile:idempotency-key and jp:wopla-interest:idempotency-key. It contains nothing about you, is removed as soon as the form has been sent, and disappears when you close the tab. We do not use local storage. Your marketing choice is sent with your form and is not stored in your browser.

If this changes, for example if we connect an analytics service that needs consent, we will update this notice and ask first.

Where your data is held

JobsPronto Intelligence and its database are hosted in Frankfurt, Germany, in the European Union, which UK law recognises as providing adequate protection for personal data. Cloudflare (website delivery) and Hostinger (email) may process data on servers outside the UK under their standard contractual safeguards. Where our earlier form pipeline is used, Google and Supabase may process data on servers outside the UK under their standard contractual safeguards.

Security

Data travels over HTTPS. Form submissions to our recruitment system are signed and de-duplicated, CVs are kept in private storage that is not publicly accessible, and access inside JobsPronto is limited to the people who need it for the work described above.

Changes to this notice

We will update this page when our data handling changes and show the date of the latest version at the top.