Privacy Policy

UOMN VERSE LTD, trading as UJobs, is the data controller where we decide why and how information is processed, including account administration, platform security, billing, support, directory operation and service improvement.

UOMN VERSE LTD is registered in England and Wales under company number 17214579. Registered office: 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

UOMN VERSE LTD is registered with the Information Commissioner's Office as a data controller. ICO registration reference: ZC236444.

Data-protection enquiries and rights requests: support@ujobs.uomnverse.com. Product support: support@ujobs.uomnverse.com.

For workforce information an organisation enters into its private workspace and asks us to handle solely on its instructions, that organisation is normally the controller and UJobs acts as its processor. The Organisation Data Processing Agreement addresses that processing. We remain a controller for our independent purposes.

• Identity and account: name, email, telephone number, profile image, account type, authentication identifiers, account status and organisation role.
• Worker and recruitment: profile, profession, skills, experience, availability, work preferences, applications, answers, CVs, documents, join requests, invitations and onboarding information.
• Organisation and workforce: organisation identity and contacts, members, branches, sites, clients, workers, manager assignments, openings, shifts, attendance, timesheets, wage estimates and workspace audit records.
• Communications: messages, support requests, reports, feedback, notification preferences and delivery records.
• Location: chosen city, postcode and travel radius; and, only when enabled and deliberately used for attendance, a fresh device location, accuracy and distance from the assigned attendance location. UJobs does not continuously track workers for attendance.
• Device, security and usage: device and push identifiers, IP address, browser/app information, sign-in and security events, integrity results, fraud signals, diagnostics and feature interactions.
• Billing: plan, billing interval, Stripe customer/subscription references, payment status and invoices. UJobs does not store full payment-card numbers.
• Early access and marketing: registration details, user type, interests, referral activity, country, consent choices and email verification status.

Some features may involve sensitive information, such as health-related attendance corrections or right-to-work and verification documents. Users and organisations must only provide it where necessary and lawful. Device biometrics remain within the device security system; UJobs does not receive biometric templates.

• users directly;
• organisations using UJobs and their authorised owners, administrators, managers and on-site managers;
• other users when they send an invitation, application, message, report or attendance confirmation involving you;
• publicly available business sources, organisation websites and directories;
• Companies House and other official or professional registers where relevant;
• providers supporting authentication, payments, communications, security, hosting and device integrity; and
• reports or corrections submitted by users and members of the public.

If directory information concerns a business contact who did not provide it directly, we use it to maintain and verify the business directory, support recruitment discovery and prevent misleading listings. People may ask us to correct or review it.

Our legitimate interests include delivering a secure and useful service, preventing fraud, maintaining accurate listings, supporting users and improving UJobs. We balance those interests against people's rights and reasonable expectations.

Identity, sign-in and role information marked as required is necessary to create and secure an account or provide the relevant contract or feature. Without it, we may be unable to create the account, verify authority, process an application, join an organisation, record attendance or provide that feature.

Profile extras, marketing choices, some documents, notification categories and location preferences are optional unless an organisation lawfully requires particular information for a stated workplace process. Not providing optional information may reduce personalisation but does not remove unrelated features.

Information is shared with the organisation, worker or authorised member involved in the relevant application, invitation, shift, attendance record or conversation, subject to workspace scope and permissions. Public organisation profiles may be visible to visitors and workers.

We use providers for hosting and platform services (including Supabase), subscriptions and payments (Stripe), transactional email, Apple and Google notification delivery, identity sign-in, device integrity, cloud infrastructure and abuse prevention (including Cloudflare Turnstile). Providers may process information only for the contracted service and under applicable data-protection terms.

We may disclose information to advisers, insurers, regulators, courts or law enforcement where required by law, needed for legal claims or reasonably necessary to protect people and the Service. We do not sell personal information.

Some providers or support teams may store or access information outside the United Kingdom. Where UK personal information is transferred to a country not covered by UK adequacy regulations, we use an appropriate safeguard such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful mechanism, with access controls and data minimisation.

Contact support@ujobs.uomnverse.com for information about a relevant transfer and how to obtain a copy of the applicable safeguard, subject to necessary redactions.

We keep information only as long as reasonably necessary for the purpose collected, including providing the Service, meeting legal and accounting duties, protecting users, resolving disputes and establishing or defending claims. Criteria include account and organisation status, record age and sensitivity, limitation and statutory periods, active disputes, security needs and an organisation controller's lawful instructions.

• Active accounts and workspaces: while active and needed for the relevant feature.
• Account deletion: when deletion is selected, data is scheduled for deletion after the stated 30-day window, except records needed for legal, safety, fraud-prevention, billing, dispute or another person's rights. Data expressly retained for future relinking remains until that choice changes or it is no longer needed.
• Precise attendance location: for the period configured by the organisation; the current system default is 90 days. Attendance decisions, timesheets and audit evidence may remain longer without precise coordinates.
• Applications, shifts, messages and workforce records: while needed by the account or organisation and for operational history, safeguarding, pay or disputes. Organisation controllers must apply their own lawful retention requirements.
• Billing records: for applicable tax, accounting, audit, chargeback and legal-claim periods.
• Security and audit records: according to risk, investigation and legal-claim needs; short-lived challenges and rate-limit records expire sooner.
• Backups: through protected backup rotation; deleted data is not restored for ordinary use.

When retention ends, we delete or irreversibly anonymise information. We do not state a fixed period where the lawful period depends on an organisation controller, unresolved dispute or statutory requirement.

UJobs may use selected postcode, city, travel radius, sector, profession, availability and organisation scope to sort or recommend openings and organisations. These are discovery tools; people make the relevant application, hiring, shift and attendance decisions.

UJobs does not currently make decisions about users based solely on automated processing that produce legal or similarly significant effects. If that changes, we will explain the logic, significance, consequences and safeguards before it applies.

Depending on the circumstances and applicable law, you may:

• request access to and a copy of your personal information;
• correct inaccurate or incomplete information;
• request erasure;
• request restriction of processing;
• object to legitimate-interest processing and object at any time to direct marketing;
• receive certain information you provided in a structured, commonly used and machine-readable format and request transfer where technically feasible;
• withdraw consent at any time, without affecting earlier lawful processing; and
• raise concerns about automated decision-making if introduced.

Rights are not absolute and lawful exemptions may apply. We may verify identity and authority. Email support@ujobs.uomnverse.com or use the account deletion request.

Please contact us first at support@ujobs.uomnverse.com so we can investigate.

You may also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, 0303 123 1113, or Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Measures include authenticated access, least-privilege role checks, database row-level security, encryption in transit, protected credential and key storage, audit trails, rate limiting and restricted administration. Device biometrics and private attendance keys are designed to remain on the device.

No system is completely secure. Protect credentials and devices, do not share verification codes, and report suspected unauthorised access to support@ujobs.uomnverse.com.

UJobs is not directed to children below the minimum lawful age for relevant work. Workers must meet applicable age and consent requirements. We will investigate information provided unlawfully by or about a child.

We may update this policy when the Service, providers, law or processing changes. We will show the current version and effective date and provide reasonable notice of material changes where appropriate.