Privacy

Disruptajob is operated by William Peter Sandford, a sole trader based in the United Kingdom, who is the data controller for the information described here. Under the ICO’s own self-assessment this service is not yet required to pay the data protection fee; that will be revisited the moment trading begins. UK GDPR applies to us either way, and this policy is written against what the code actually does.

For anything in this policy, write to hello@disruptajob.com.

Almost everything here is something you typed on purpose. There is no profile built about you in the background.

Please don’t put health information, political or religious views, or anything else that counts as a special category of personal data into a free-text field. We don’t ask for any of it and have no use for it.

A new profile is hidden. Nothing you add is visible to any company until you change that setting yourself.

When you do open up, you can block companies by name — including the one you currently work for. Blocked companies cannot find you in search, cannot open your profile by its link, and are never informed that you exist or that you blocked them. Candidate search and profile pages require a signed-in company account precisely so this check always knows who is asking.

Honestly stated: the blocklist protects you from a named company acting as itself. A determined bad actor could register under a different name — no blocklist can prevent that, and we won’t pretend otherwise. If that is your threat model, stay hidden: hidden is absolute.

If you later hide again, you disappear from searches and from any list a company had saved you to. A saved list never outlives your consent.

Three cookies, all first-party, none used for advertising. There is no consent banner because there is nothing here to consent to beyond what the site needs to function.

We do not sell personal data, and we never will. Candidates are free and companies pay, specifically so that you are not the product.

A company you have allowed to see you will see your profile, your projects and your stated terms — never your minimum salary and never your blocklist.

The only third party involved in running this service is our hosting provider, Fly.io, whose servers hold the database. The application is deployed in London and no data is transferred outside the UK or EEA in the normal course of running it. We use no advertising networks, no analytics companies and no tracking pixels.

Under UK GDPR you can ask for a copy of your data, correct it, delete it, restrict or object to how it’s used, and take it elsewhere. Two of those you can do yourself, right now, without asking anyone:

• Download everything we hold as a JSON file, from your settings page.
• Delete your account permanently, from the same page.

For anything else, write to hello@disruptajob.com and we’ll respond within one month. If you think we’ve handled your data badly you can complain to the Information Commissioner’s Office, though we’d rather you told us first so we can put it right.

Passwords are hashed with scrypt. Sessions are opaque tokens in cookies that JavaScript cannot read. Privacy rules are enforced in the database layer rather than in individual pages. Sign-in is rate limited.

What we won’t claim: this is a young service, not a bank. There is no two-factor authentication yet and no email verification, which means we cannot currently prove that the person signing up owns the address they typed. Both are planned. Until they exist, please use a password you don’t use anywhere else.

This service is for people in work or seeking it, and is not intended for under-16s.

If this policy changes in a way that affects how your data is used, we’ll say so on this page and tell account holders directly rather than quietly updating the date.