LatoJobs

Privacy Policy

Last updated: 2025-06-12

This Privacy Policy explains how Genty Consulting LLP ("we", "us", "our") collects, processes, and protects personal data when you use the LatoJobs.com platform (“Platform”, “Service”).

We act as the Data Controller under the UK General Data Protection Regulation (UK GDPR).

1. Contact Details

Genty Consulting LLP
71–75 Shelton Street, Covent Garden
London, WC2H 9JQ
United Kingdom
Email: legal@latojobs.com

2. Data We Collect

2.1 Candidate Data

  • Name, email address, and contact details
  • CV/resume information
  • Employment history and qualifications
  • Skills, experience, and application content
  • Account credentials (if applicable)

2.2 Employer Data

  • Company name, profile, and contact details
  • Billing information (processed by our payment service provider)
  • Job posting content and metadata

2.3 Automatically Collected Data

  • IP address and device identifiers
  • Cookies and tracking technologies
  • Browser type, version, and usage data
  • Analytics and performance information

3. Sources of Data

We collect data from the following sources:

  • Direct submissions from candidates and employers
  • Publicly available job listings and employer information
  • External APIs or sources providing public job data
  • Analytics tools used to understand platform usage
  • Payment service providers (payment-related data, excluding full card details)
  • Google OAuth (for authentication, with user consent)

We do not collect or store full payment card details. All payments are processed through certified Payment Service Providers.

4. Purposes of Processing

We process personal data for the following purposes:

  • Operating and maintaining the job board
  • Publishing job postings submitted by employers
  • Facilitating job applications and communication
  • Processing payments through our payment service provider
  • Authenticating users via email/password or Google OAuth
  • Providing customer support
  • Improving platform functionality and analytics
  • Preventing fraud, abuse, or security incidents
  • Complying with legal obligations (tax, accounting, etc.)

5. Legal Basis for Processing

Under UK GDPR/EU GDPR, our lawful bases for processing include:

  • Contract performance — delivering services to employers and candidates
  • Legitimate interests — platform operations, fraud prevention, analytics
  • Consent — cookie usage, optional marketing communications, Google OAuth sign-in
  • Legal obligations — accounting, tax compliance

6. Data Sharing

We may share personal data with:

  • Payment service providers — for payment processing and tax compliance
  • Google — when you choose to sign in with Google OAuth (limited to authentication data)
  • Platform service providers (hosting, analytics, email delivery)
  • Employers receiving candidate applications
  • Regulatory or legal authorities when required by law

We do not sell personal data to third parties.

7. Google OAuth and Third-Party Authentication

We offer the option to sign in or register using your Google account ("Sign in with Google"). When you choose this option:

  • Data we receive: Your basic profile information (name and email address) from Google, only after you explicitly grant permission.
  • Purpose: We use this data solely for account creation and authentication. We do not access your Google Drive, Gmail, contacts, or any other Google services.
  • OAuth Scopes: We request only the minimum necessary scopes:openid, email, and profile.
  • Storage: Your email is stored as your account identifier. Your name is used for display purposes only.
  • Revocation: You can revoke LatoJobs' access to your Google account at any time via your Google Account settings.

We comply with Google API Services User Data Policy, including the Limited Use requirements.

8. International Transfers

Your data may be transferred outside the UK or EU. We rely on:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Other legally compliant safeguards

9. Data Retention

We retain data for the following periods:

  • Candidate data: up to 24 months after last activity
  • Employer data: up to 6 years (for accounting/tax obligations)
  • Job postings: for as long as they remain published or until deletion is requested

Users may request deletion of their personal data at any time, unless we must retain it for legal reasons.

10. Your Rights

Under UK GDPR and EU GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccuracies
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent (e.g., cookies, marketing)

To exercise any rights, contact us at: legal@latojobs.com.

11. Security

We implement appropriate technical and organizational measures to protect personal data, including:

  • Secure hosting infrastructure
  • Encryption and access control
  • Data minimization principles
  • Regular audits and monitoring

No method of storage or transmission is completely secure, but we take reasonable steps to safeguard your data.

12. Cookies

We use cookies and similar technologies for essential functions, analytics, and improving user experience. Where required, we obtain user consent before using non-essential cookies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When updates occur, we will revise the “Last updated” date at the top of this page.