Privacy Policy (United Kingdom)

Last Updated: July 23, 2025
Last Reviewed: July 23, 2025
Applies to: UK Users of Jobbers.io
Entity: Varlorys (French Sole Proprietorship)
Governing Law: UK GDPR and Data Protection Act 2018
Platforms: Website (jobbers.io) and Mobile Apps (iOS/Android)

1. Introduction

This Privacy Policy explains how Jobbers.io (operated by Varlorys, a French sole proprietorship) collects, uses, discloses, and manages your personal data when you use our website at https://www.jobbers.io and our mobile applications for iOS and Android (collectively, the “Platform”).

Jobbers.io is an international freelance marketplace operated from France, serving users worldwide including the United Kingdom. We facilitate connections between freelancers/professionals and clients by providing a platform for them to find each other, communicate, and arrange their own work agreements and payments.

As a UK resident, you have specific rights under UK data protection law, which are outlined in this policy. As a French-based company serving UK users, we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, ensuring strong protection for your personal data.

UK GDPR Compliance Commitment

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our data processing practices are based on UK GDPR principles:

• Lawfulness, Fairness, and Transparency: We process data lawfully, fairly, and transparently
• Purpose Limitation: We collect data for specified, explicit, and legitimate purposes
• Data Minimisation: We process only data that is adequate, relevant, and limited to what is necessary
• Accuracy: We keep personal data accurate and up to date
• Storage Limitation: We retain data only as long as necessary
• Integrity and Confidentiality: We ensure appropriate security measures
• Accountability: We demonstrate compliance with UK GDPR principles

Key Information for UK Users:

• French Data Controller: We are based in France and subject to French and UK data protection laws
• International Platform: Your data will be processed to connect freelancers and clients globally
• International Transfers: Some data may be transferred outside the UK with appropriate safeguards
• Your Rights: You have comprehensive rights under UK GDPR as outlined in section 12
• Marketplace Role: We facilitate connections but users arrange their own payments and contracts

2. Data Controller Information

Data Controller: Varlorys
Business Type: French Sole Proprietorship (Entreprise Individuelle)
Registration Number: 894 375 625 R.C.S. Pontoise
Business Address: 145 Rue du général Leclerc, 95130 Franconville, France
Service: International Freelance Marketplace
Contact Person: Driss LJAM BENNIS
Data Protection Officer: [email protected]

3. Personal Data We Collect

We collect personal data necessary to operate our freelance marketplace and provide our services. Under UK GDPR, we limit our collection to data that is adequate, relevant, and limited to what is necessary for the specified purposes.

3.1 Account and Profile Information

• Registration Details: Name, email address, password, username
• Age Verification: Confirmation that user is at least 18 years old
• Verification Data: Email verification, phone number verification
• Profile Information: Professional skills, work experience, education, service descriptions
• Contact Information: Phone number, preferred communication methods
• Profile Media: Profile pictures, portfolio images, work samples, certifications
• Professional Documentation: Certificates, qualifications, professional credentials
• Contact Visibility Preferences: Settings for displaying contact details through premium packs
• Content Moderation Data: Information reviewed and modified by our administrators for compliance

3.2 Premium Services and Billing Information

• Premium Package Purchases: Connection Packs, Professional Packs, Service Packs, Contact Packs, Project Packs
• Payment Details: Payment card details for platform services (processed by payment providers)
• Billing Information: Billing addresses, payment preferences for platform services
• Package Usage: Visibility boost usage, contact detail displays, search ranking improvements

3.3 Platform Activity Data

• Job and Project Data: Job postings, project descriptions, service offerings, proposals
• Proposal Management: Proposal statuses (accepted, pending, rejected), proposal content
• Communication Records: Chat messages, file sharing through our messaging system
• Ratings and Reviews: Reviews and ratings between freelancers and clients
• Portfolio Content: Work samples, portfolios, certifications, professional qualifications
• Search and Browse History: Jobs viewed, searches performed, saved profiles
• Contact Interactions: When contact details are displayed or accessed through premium packs
• AI Translation Data: Content submitted for automatic translation services

3.4 Technical Information

• Device Information: Device type, operating system, browser type, unique device identifiers
• Usage Data: Pages visited, time spent, click patterns, feature usage
• Network Information: IP address (anonymized for analytics), internet service provider, connection type
• Cookies and Tracking: As described in our Cookie Policy

3.5 Mobile App Permissions and Data

Our mobile apps may request the following permissions to provide enhanced functionality:

• Camera: To take profile photos and capture documents for verification
• Photo Library: To upload images for profiles and portfolios
• Contacts: To help you connect with existing contacts on the platform (with your consent)
• Location Services: To show location-based job opportunities and verify your location
• Push Notifications: To send important updates about jobs, messages, and platform activities
• Microphone: For voice messages and video calls (if available)
• Storage Access: To store app data and enable offline functionality
• Network Access: To connect to our services and sync data

Note: You can manage these permissions through your device settings at any time.

4. How We Collect Personal Data

Under UK GDPR, we are transparent about how we collect your personal data:

4.1 Direct Collection

• Account Registration: When you create an account (must be 18+ years old)
• Profile Creation: When you set up your freelancer or client profile
• Verification Processes: Email and phone number verification
• Form Submissions: Contact forms, job applications, project postings
• Communications: When you contact us or communicate with other users
• Administrative Review: During our validation process for profiles, services, and projects
• Surveys and Feedback: Voluntary participation in platform surveys
• Rating and Review System: When you provide or receive evaluations

4.2 Automated Collection

• Website and App Usage: Through cookies, analytics, and tracking technologies
• Device Information: Automatically collected when you access our platform
• Location Data: Through IP address or GPS (with permission on mobile)
• Performance Monitoring: App crashes, error reports, usage statistics

4.3 Third-Party Sources

• Social Media: When you connect social media accounts (with your consent)
• Payment Providers: Transaction and verification data from PayPal, Stripe
• Verification Services: From email and SMS verification providers
• Public Sources: Publicly available professional information

5. Legal Bases and Purposes for Data Processing

Under UK GDPR Article 6, we process your personal data based on the following legal bases and for the following purposes:

6. Sharing and Disclosure of Personal Data

Under UK GDPR, we limit the use, disclosure, and retention of personal data to the purposes for which it was collected. We may share your personal data in the following circumstances:

6.1 With Other Platform Users

• Public Profile Information: Name, profile picture, skills, services, reviews, portfolio
• Contact Details: Phone number and email (through premium Contact Packs, when authorized)
• Communication: Direct messaging through our chat system for project discussions
• Project Information: Project details, proposals, and related communications
• Reviews and Ratings: Feedback provided by clients and freelancers
• Portfolio Content: Work samples, certifications, and professional credentials

6.2 With Data Processors

• Payment Processors: PayPal, Stripe (for platform premium package purchases only)
• Cloud Hosting: AWS, Google Cloud (for data storage and processing)
• Analytics Services: Google Analytics (for platform analytics, with consent and data processing agreement)
• Communication Tools: Email and messaging service providers
• AI Translation Services: Third-party providers for automatic content translation
• Verification Services: Email and SMS verification providers
• Customer Support: Help desk and support platforms

6.3 Legal and Compliance Sharing

• Law Enforcement: When required by law or court order
• Regulatory Authorities: For compliance with applicable laws
• Legal Proceedings: In connection with legal disputes or investigations
• Safety Protection: To protect the safety of users or the public

6.4 Business Transfers

If our business is sold, merged, or acquired, your personal data may be transferred to the new owners as part of the business assets, subject to the same privacy protections and UK GDPR requirements.

7. International Data Transfers

As an international platform, some of our service providers are located outside the United Kingdom. Under UK GDPR Chapter V, we ensure appropriate safeguards are in place for international transfers.

7.1 Countries Where Your Data May Be Transferred

• Germany: Our primary operations and main servers
• European Union: Additional hosting and service providers
• United States: Cloud services (Google, AWS), payment processors (Stripe, PayPal)
• Other Countries: Where freelancers, clients, and service providers are located

7.2 Transfer Safeguards

We implement the following safeguards for international transfers under UK GDPR:

• UK Adequacy Regulations: For transfers to countries with adequate protection (Regulation 3)
• International Data Transfer Agreements (IDTAs): UK-approved contractual safeguards
• Standard Contractual Clauses (SCCs): EU Commission-approved clauses recognized by UK
• Certification Schemes: Industry-recognized privacy certifications
• Codes of Conduct: Industry-specific privacy standards
• Your Consent: Explicit consent for specific transfers

7.3 Platform-Specific Transfers

As a global freelance marketplace, transferring your data internationally is essential for:

• Connecting you with freelancers and clients worldwide
• Processing premium package purchases
• Providing AI translation services for multilingual communication
• Providing customer support across time zones
• Ensuring platform security and preventing abuse
• Facilitating direct communication and project arrangements between users

8. Data Retention

Under UK GDPR Article 5(1)(e), we retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

9. Data Security and Protection

Under UK GDPR Article 32, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk:

9.1 Technical Safeguards

• Encryption: Data encrypted in transit and at rest using industry standards
• Access Controls: Multi-factor authentication and role-based access
• Network Security: Firewalls, intrusion detection, and monitoring
• Regular Updates: Security patches and system updates
• IP Address Anonymization: Full IP addresses are anonymized in Google Analytics
• Pseudonymization: Where possible, we use pseudonymization techniques

9.2 Organizational Safeguards

• Staff Training: Regular privacy and security training for employees
• Background Checks: Screening of personnel with access to personal data
• Incident Response: Procedures for handling security breaches
• Data Processing Agreements: Contracts with all data processors
• Privacy by Design: Privacy considerations in system design

9.3 Data Breach Response

In the event of a data breach under UK GDPR Articles 33-34:

• We will notify the ICO within 72 hours where required
• We will notify affected individuals without undue delay when the breach poses a high risk
• We will provide information about the breach, its likely consequences, and mitigation measures
• We will document the breach and our response for regulatory review

10. Cookies and Tracking Technologies

We use cookies and similar technologies as described in our Cookie Policy (UK). Key points include:

• Essential Cookies: Required for platform functionality (legitimate interests)
• Analytics Cookies: To understand platform usage (consent required)
• Marketing Cookies: For advertising and personalization (consent required)
• Third-Party Cookies: From our service providers and partners
• Google Analytics: We have a data processing agreement with Google and anonymize IP addresses

You can manage your cookie preferences through our consent management platform and your browser settings.

11. Marketing and Communications

11.1 Platform Communications

We will send you essential platform communications based on contract performance:

• Account security notifications
• Transaction confirmations
• Important platform updates
• Legal and policy changes

11.2 Marketing Communications

With your explicit consent under UK GDPR Article 6(1)(a), we may send:

• Newsletter and platform updates
• Job recommendations and opportunities
• Feature announcements
• Educational content and tips

You can withdraw consent at any time using the unsubscribe link or contacting us.

12. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights regarding your personal data:

12.1 Fundamental Rights (UK GDPR Chapter III)

• Right to be Informed (Articles 13-14): Receive transparent information about data processing
• Right of Access (Article 15): Access your personal data and information about processing
• Right to Rectification (Article 16): Correct inaccurate or incomplete personal data
• Right to Erasure (Article 17): Request deletion of your personal data (“right to be forgotten”)
• Right to Restrict Processing (Article 18): Limit how we process your personal data
• Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format
• Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing
• Rights Related to Automated Decision-Making (Article 22): Protection from solely automated decisions

12.2 Consent Rights

• Withdraw Consent: Withdraw consent at any time without affecting prior lawful processing
• Granular Consent: Provide or withdraw consent for specific processing activities
• Clear Consent: Receive clear information before giving consent

12.3 How to Exercise Your Rights

To exercise your rights:

• Email: [email protected]
• Subject Line: “UK GDPR Rights Request – [Type of Request]”
• Include: Your account email, specific request details, identity verification
• Response Time: We will respond within one month (extendable by two months for complex requests)
• Fees: No charge for standard requests

12.4 Complaint Process

If you have a privacy complaint:

1. Contact Us First: Send your complaint to [email protected]
2. We Will Investigate: We’ll investigate and respond within one month
3. ICO Complaint: You have the right to lodge a complaint with the Information Commissioner’s Office

12.5 Quick Data Request Form

For common requests, you can use our simplified request process:

Name: [Your Full Name]

Email: [Your Account Email]

Request Type:

• Submit a request for access to the data we process about you
• Submit a request for deletion of data if it is no longer relevant
• Submit a request to receive an export file of the data we process about you
• Submit a request for correction of inaccurate data
• Submit a request to restrict processing of your data
• Submit an objection to processing based on legitimate interests

Send your completed request to: [email protected]

13. Age Restrictions and Children’s Privacy

Our platform is strictly intended for individuals who are 18 years of age or older. Under UK GDPR Article 8, we do not knowingly process personal data of children under 16 years of age.

Age Verification: During registration, users must confirm they are at least 18 years old. This is required for:

• Legal capacity to enter into work agreements
• Compliance with our terms of service
• Protection of children from inappropriate content
• Meeting legal requirements for freelance marketplace participation

If we become aware that we have collected personal data from someone under 16, we will take immediate steps to delete such information and terminate the account.

If you believe we have collected information from someone under 16, please contact us immediately at [email protected].

14. Automated Decision-Making and Profiling

Under UK GDPR Article 22, we inform you about automated decision-making and profiling:

14.1 Automated Processes We Use

• Content Moderation: Automated systems help review user-generated content for compliance
• Fraud Prevention: Automated systems detect potentially fraudulent activities
• AI Translation: Automated translation of user content for multilingual accessibility
• Search and Matching: Automated algorithms help match freelancers with relevant job opportunities

14.2 Your Rights

You have the right to:

• Not be subject to decisions based solely on automated processing that significantly affect you
• Obtain human intervention in automated decision-making processes
• Express your point of view and contest automated decisions
• Receive information about the logic, significance, and consequences of automated processing

15. Content Moderation and Administrative Review

To maintain platform quality and safety, we conduct administrative review and content moderation:

15.1 Administrative Validation Process

• Profile Review: All freelancer and professional profiles require admin approval before going online
• Service Validation: New or modified service listings are reviewed before publication
• Project Approval: Client project postings are validated before becoming visible
• Content Modification: We may edit content to remove contact details, correct categories, or remove inappropriate content

15.2 What We Review

• Professional qualifications and service descriptions
• Compliance with platform guidelines and UK GDPR
• Removal of personal contact details from inappropriate fields
• Category accuracy and content relevance
• Age verification (18+ requirement)

15.3 Content Standards

We review content to ensure it is not:

• Abusive, defamatory, or discriminatory
• Misleading about qualifications or services
• Containing inappropriate personal data disclosure
• Violating intellectual property rights
• Against applicable laws and regulations including UK GDPR

16. Our Role as a Marketplace Facilitator

Important: Jobbers.io acts as a marketplace facilitator that connects freelancers and clients. We provide the platform and tools for users to find each other and communicate, but we do not:

• Process payments between users: Users arrange their own payment methods and terms
• Mediate disputes: Users handle project disputes directly with each other
• Guarantee work quality: We provide a rating system but users are responsible for vetting each other
• Act as an employer: We facilitate connections but are not party to work agreements

We do provide:

• Platform hosting and maintenance
• Communication tools (chat, file sharing)
• Premium visibility and contact packages
• AI translation services
• User verification (email and phone)
• Rating and review systems

17. Third-Party Services and Links

Our platform may contain links to third-party websites, services, or integrations. This privacy policy does not apply to third-party services. We recommend reading the privacy policies of any third-party services you use.

17.1 Social Media Integration

If you connect social media accounts, we may access certain information from those platforms according to your privacy settings on those platforms.

17.2 Payment Processors

Payment processing is handled by third-party providers (PayPal, Stripe) who have their own privacy policies and are responsible for protecting your payment information under appropriate data processing agreements.

18. Changes to This Privacy Policy

We may update this privacy policy to reflect changes in our practices, technology, legal requirements, or other factors. Under UK GDPR, we will notify you of material changes by:

• Posting the updated policy on our platform
• Updating the “Last Updated” date
• Sending email notifications for significant changes
• Obtaining fresh consent where required by UK GDPR
• Providing reasonable notice before changes take effect

We encourage you to review this policy periodically to stay informed about how we protect your privacy.

19. Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Data Controller Details:

Varlorys (French Sole Proprietorship)
Registration: 894 375 625 R.C.S. Pontoise
Business: International Freelance Platform (Jobbers.io)
Address: 145 Rue du général Leclerc, 95130 Franconville, France
UK Service Area: United Kingdom

Contact Information:

Website: https://www.jobbers.io
General Email: [email protected]
Privacy Email: [email protected]
Phone: +33 6 88 95 37 10 (French timezone: CET/CEST)

Data Protection Officer:

Name: Driss LJAM BENNIS
Title: Privacy Contact / Data Protection Officer
Address: 145 Rue du général Leclerc, 95130 Franconville, France
Email: [email protected]

UK Supervisory Authority:

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office (ICO)
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Phone: 0303 123 1113
Email: [email protected]

Response Times:

General Inquiries: 24-48 hours
UK GDPR Rights Requests: 1 month (extendable to 3 months for complex requests)
Urgent Privacy Matters: 72 hours
Data Breach Notifications: Within 72 hours to ICO (where required)