Privacy notice

Who we are

Doorstep Referrals is the data controller for the personal data described here. Contact: hello@doorstepreferrals.co.uk.

Age

Doorstep is for people aged 16 or over. We don’t knowingly collect personal data from anyone under 16. If you think someone under 16 has an account, contact us at hello@doorstepreferrals.co.uk and we’ll delete it.

What we collect

• Everyone: your email address and when you log in.
• Candidates: your CV, your note to the referrer, the role you apply for, whether you need visa sponsorship, your LinkedIn link if you add one, and the outcome of your applications.
• Referrers: your name, work email, company, team, the roles you refer for and your criteria. Publicly we show only your first name, last initial, team and company.
• Usage: basic records of actions in the app (for example when an application was reviewed), used to measure how well the service works.

Why we use it, and our lawful basis

• To run the service you signed up for: sending your application to the referrer you chose, and telling you the result (contract).
• To check referrers really work where they say (legitimate interests: keeping the service trustworthy).
• To send emails about your applications or your queue (contract). We don’t send marketing without asking.

Automated decisions and AI

We don’t currently use AI to process your CV or note. The referrer reviews your CV and decides. No decision with legal or similarly significant effects is made solely by automated means. If we add optional AI features in future, we will update this notice and tell you before they apply to you. See who decides.

Who we share it with

• The referrer you apply to sees your CV, note and application details. If they refer you, they also see your email address and pass your details to their employer’s recruiting team.
• Service providers who process data on our behalf: Supabase (database and file storage, EU), Vercel (hosting), Resend (email). Some are based in the US; where data leaves the UK, transfers are covered by the UK International Data Transfer Addendum or equivalent safeguards.

We don’t sell your data.

How long we keep it

• CVs are deleted 90 days after the referrer decides or the application closes.
• Your account and application history stay until you delete your account, which you can do at any time from your account page.

Your rights

You can ask to access, correct, delete or export your data, or object to how we use it, by emailing hello@doorstepreferrals.co.uk. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk).

Cookies

We use only the cookies needed to keep you logged in. No advertising or tracking cookies.