Privacy and Data Protection Policy – Surch Ltd

Surch Ltd (“Surch”, “we”, “us”, “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you access our website (www.surch360.com) , mobile applications, and associated services (the “Services”).

We act as a Data Controller under the UK Data Protection Act 2018 and the UK General Data Protection Regulation (“GDPR”).

By registering for or using our Services, you agree to the terms of this Privacy Policy.

1. Commitment to Privacy

1.1 We ensure that personal data is processed lawfully, fairly, and transparently.

1.2 We only collect and process personal data where necessary to:

• Provide and improve our Services
• Fulfil contractual obligations
• Comply with legal requirements
• Support legitimate business interests

2. Information We Collect

2.1 Jobseekers

We may collect:

• Name, email address, phone number, and address
• Work history, education, skills, and job preferences
• Location preferences (postcode or address)
• Uploaded CVs, documents, and profile information

2.2 Recruiters / Employers

We may collect:

• Business contact details
• Company information
• Billing and payment details

2.3 Automatically Collected Data

We may collect:

• IP address
• Device identifiers
• Browser type
• Usage data and analytics

3. Mobile App Data & Permissions

When using our mobile applications, we may collect:

• Device Information : Device type, operating system, and identifiers
• Push Notifications : For job alerts, application updates, and service messages
• Media Access : To upload CVs, profile images, and documents
• Location Data (Surch Workforce): Real-time location (with consent) to verify attendance and enable clock-in functionality
• Location Data (Surch Jobs App): Based on user-provided postcode or address only (no GPS tracking)

You can manage permissions via your device settings at any time.

4. Use of Personal Data

We use your data to:

• Create and manage accounts
• Enable job applications and recruitment processes
• Allow employers to view candidate profiles (subject to privacy settings)
• Send job alerts and communications
• Process payments and subscriptions
• Improve and personalise Services
• Monitor compliance with Terms
• Meet legal obligations

We may also use anonymised and aggregated data for analysis and reporting.

5. Disclosure of Personal Data

5.1 Recruiter Access

If your profile is visible, your data may be accessed by recruiters and employers using our platform.

While we take reasonable steps to verify organisations, we cannot control how third parties use data once accessed in accordance with your settings.

5.2 Third-Party Service Providers

We may share data with trusted partners, including:

• Cloud hosting providers (e.g. Amazon Web Services)
• Payment processors (e.g. Stripe)
• Analytics providers (e.g. Google Analytics)
• Email and communication providers
• Marketing and advertising platforms

All providers are contractually required to safeguard your data.

5.3 International Transfers

Where data is transferred outside the UK/EEA, appropriate safeguards (e.g. Standard Contractual Clauses) are in place

5.4 Legal Obligations

We may disclose data where required by law or to protect rights, safety, and compliance.

5.5 Advertising & Tracking

We may use services such as Google, LiveRamp, and Criteo to deliver personalised advertising.

These services may use cookies and mobile identifiers.

Where required, we will obtain your consent in line with platform policies (including Apple App Tracking Transparency).

6. User Responsibilities

You agree to:

• Provide accurate and lawful information
• Keep your details up to date
• Maintain login confidentiality

You should not upload sensitive personal data unless specifically required.

7. Children’s Privacy

Our Services are intended for individuals aged 16 and over.

We do not knowingly collect data from individuals under 16 without appropriate consent. If identified, such data will be removed.

8. Data Retention

We retain data:

• While your account is active
• To provide Services
• To meet legal obligations

Inactive accounts are deleted after 24 months of inactivity.

Some data may be retained longer where required for legal or business purposes.

9. Your Rights

• Access your data
• Correct inaccuracies
• Request deletion
• Restrict or object to processing
• Request data portability
• Withdraw consent

You may also lodge a complaint with the UK Information Commissioner’s Office (ICO).

Contact: [email protected]

10. Marketing & Communications

You may:

• Opt-in to marketing and job alerts <\li>
• Unsubscribe at any time

Service-related messages (e.g. account updates) cannot be disabled.

11. Cookies & Tracking

We use cookies and tracking technologies to:

• Improve functionality
• Analyse usage
• Deliver relevant content

We may associate technical data with your account for:

• Security
• Fraud prevention
• Service improvement

See our Cookie Policy for more details.

12. Security

We implement appropriate security measures including:

• Encryption
• Access controls
• Monitoring systems

However, no system is completely secure.

13. Account Closure & Data Deletion

You may delete your account via your dashboard at any time.

Upon deletion:

• Your profile is removed
• Data is deleted or anonymised
• Some data may be retained where required by law

14. Data Deletion Requests

If you cannot access your account, you may request deletion via:

[email protected]

Requests will be handled within legal timeframes.

15. Enforcement

We may suspend or remove accounts that:

• Breach this policy
• Are unlawful or misleading
• Misuse the platform

16. Contact & Complaints

For questions, contact us via our website or email:

[email protected]

You may also contact the UK ICO:

https://ico.org.uk/