Privacy Policy

Effective Date: 28/12/2025
Website: https://www.socialmediaboard.co.uk
Operated by: 360 Web Services LTD (“we”, “us”, “our”)

1. Introduction

At Social Media Board, your privacy is important to us. This Privacy Policy explains how we collect, use, store, and share personal information when you use our website and services. We operate under the UK General Data Protection Regulation (UK GDPR) and apply privacy-by-design principles across our platform.

For any privacy-related questions or requests, you may contact our Data Protection Lead at info@socialmediaboard.co.uk.

2. Data We Collect

We collect only the data necessary to operate the platform securely and effectively. The data collected depends on how you interact with Social Media Board.

For Job Seekers

  • Name and email address
  • Portfolio content you choose to publish or save (for example: bio, skills, work preferences, and optional attachments such as CVs where the feature is available)
  • Job applications and application-related messages submitted through the platform, including where we send an email application on your behalf
  • Saved jobs, recruiter contact reveals (where applicable), and related account activity
  • Account activity and interaction history within the platform
  • IP address and device data (used in hashed or truncated form for security and abuse prevention)

For Recruiters

  • Name and email address
  • Company name, website, and optional registration details
  • Job listings, applications received through the platform, and recruitment activity within recruiter dashboards
  • Recruiter verification status and related technical signals (where applicable)
  • IP address and device data (used in hashed or truncated form for security and fraud prevention)

CV Uploads, Email Applications, Storage, and CV Indexing (Important)

Social Media Board supports different application routes. How we handle CVs depends on (a) the application route, (b) whether you upload the CV through our platform, and (c) whether you choose to store the CV in your portfolio and provide consent for indexing.

  • Internal applications (via Social Media Board): you may upload a CV when applying. You may also choose to save that CV in your portfolio for reuse and visibility. CV indexing (keyword extraction to support portfolio discovery) only occurs if you choose to store the CV in your portfolio and you provide explicit consent for indexing at the point you store/upload it.
  • External applications via website link: if you apply via an employer’s external website, your application and CV are handled by the employer’s systems. We do not receive, store, or index your CV through that external website route.
  • External applications via email outside the platform: if you apply using your own email client (outside Social Media Board), we do not receive, store, or index your CV as part of that external email process.
  • External applications via email sent by Social Media Board (on your behalf): in some cases, Social Media Board may provide an email application flow where you upload a CV on our platform and we send an email to the recruiter or employer contact on your behalf. In this email-application route, your CV is used for sending and application records, but it is not indexed by default.
  • Saving a CV to your portfolio after any application: after submitting an application (including an email application sent via Social Media Board), you may choose to store the CV in your portfolio. If you store the CV in your portfolio and explicitly consent to indexing at the point of storage/upload, we may index the CV to support portfolio discovery.
  • No consent = no indexing: if you do not grant consent for indexing when uploading or saving a CV to your portfolio, we will not index it. You can manage or remove your CV at any time from /my-portfolio.

Derived and Technical Data

In addition to information you provide directly, we may generate limited derived data as part of operating the platform securely and effectively. This includes:

  • Recruiter verification scores and status indicators based on technical checks (e.g. email domain and website reachability)
  • Keyword-based CV index data created only where you have explicitly consented and only where you have chosen to store your CV in your portfolio (this may occur after an internal application or after an email application sent via our platform)
  • Audit logs recording access to CVs or candidate contact actions (including timestamps and hashed technical identifiers)
  • Aggregated analytics linked to user accounts (such as job views or application counts)

Location Data

When creating or searching job listings, we may process location information in the following ways:

  • Approximate geographic coordinates are generated for job listings using the OpenStreetMap Nominatim service based on city or region names
  • Location autocomplete and validation features may send user-entered location text to OpenStreetMap servers to improve accuracy

No personal profile data is shared with OpenStreetMap; however, standard technical data such as IP address may be processed by that service as part of normal web requests.

3. How We Use Your Data

  • To create, manage, and secure user accounts
  • To enable job applications, job postings, and recruiter–candidate communication
  • To send email applications on your behalf where you choose to apply via an email route provided by Social Media Board (including attaching your CV and application details)
  • To publish, display, and enhance job listings, including location-based search
  • To store and display your CV within your portfolio only where you choose to do so
  • To improve portfolio discovery through keyword-based CV indexing only where: (a) you choose to store your CV in your portfolio (including after an email application sent via our platform), and (b) you explicitly consent to indexing at the point of upload/storage
  • To verify recruiter legitimacy and reduce fraudulent or abusive activity
  • To generate audit logs for security, accountability, and dispute resolution
  • To send job alerts, newsletters, or service messages where you have opted in
  • To process payments via PayPal or optional support payments via Buy Me a Coffee
  • To monitor platform performance, usage trends, and service reliability
  • To comply with legal, regulatory, and tax obligations

4. Legal Basis for Processing

  • Contractual necessity – to provide core platform functionality such as job applications, job postings, email-application sending (where you choose that route), and recruiter–candidate communication features
  • Consent – where required, including for optional communications and CV indexing (only where you choose to store your CV in your portfolio and explicitly consent to indexing)
  • Legitimate interests – to protect platform integrity, prevent abuse, verify recruiters, and improve service quality and reliability
  • Legal obligations – to comply with applicable UK laws and regulations

5. How We Store and Protect Data

We store data on secure servers operated by trusted providers, including:

  • IONOS – hosting infrastructure
  • WordPress – website and content platform
  • PayPal – payment processing
  • Buy Me a Coffee – optional support payments

Security measures include access-controlled storage, encryption at rest for sensitive files where applicable, short-lived signed access tokens for CV downloads where available, and hashed technical identifiers in audit logs. CVs and portfolios are accessible to recruiters only when you choose to share them (for example, by applying through the platform or by allowing a recruiter to view your portfolio where those features are available).

6. Sharing of Data

We do not sell personal data. We may share limited data only where necessary with:

  • Recruiters or job seekers when you apply, post a job, reveal contact details, or use platform messaging/email features (including where Social Media Board sends an email application on your behalf)
  • Service providers such as Google Analytics, Google Ads, PayPal, Buy Me a Coffee, and IONOS (limited to what is necessary to provide their services)
  • Public authorities where required by law

7. Cookies & Analytics

We use cookies and similar technologies to support core functionality and understand how the platform is used. This includes both aggregated site analytics and account-linked usage metrics within logged-in dashboards.

You can manage cookie preferences through your browser settings at any time.

8. Advertising

We may display third-party advertising, including Google Ads. Advertising partners may use cookies to deliver personalised or non-personalised ads. We do not share identifiable user profile data with advertisers.

9. Data Retention

  • Account and portfolio data – retained while your account remains active
  • CV files used in email applications sent via Social Media Board – stored only as needed to complete the sending process and maintain application records. If you later choose to save the CV to your portfolio, it will be retained as part of your portfolio until you delete it.
  • CV files stored in your portfolio – retained while your account remains active or until you delete them via My portfolio
  • CV index data – created and retained only where you have explicitly consented and removed when you withdraw consent, remove your CV, delete your portfolio, or delete your account
  • Audit log data – retained for security and operational purposes and removed when no longer necessary or upon account deletion
  • Financial records – retained as required by tax and accounting laws

10. Your Rights (UK GDPR)

  • Access your personal data
  • Request correction or deletion
  • Withdraw consent where applicable (including consent for CV indexing)
  • Object to certain processing
  • Request data portability
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

Requests can be made by emailing info@socialmediaboard.co.uk.

11. Data Breaches

If a data breach affecting personal data occurs, we will notify affected users and the ICO where legally required.

12. Automated Processing

We use limited automated processing to operate the platform, such as recruiter verification checks and (where applicable) CV keyword indexing. CV keyword indexing is performed only if you choose to store your CV in your portfolio (including after an email application sent via our platform) and you explicitly consent to indexing at the point of upload/storage. These processes do not involve profiling or automated decision-making that produces legal or similarly significant effects.

13. International Data Transfers

Some service providers may process data outside the UK. Where this occurs, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

14. Children’s Privacy

Social Media Board is intended for users aged 18 and over. We do not knowingly collect data from children.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the platform or email. The effective date above will always reflect the latest version.

16. Contact Us

360 Web Services LTD
Email: info@socialmediaboard.co.uk
Website: https://www.socialmediaboard.co.uk