Commercial Trades Jobs

Privacy Policy

Last updated: 17 March 2026

1. Who we are

Commercial Trades Jobs is operated by SGLA Ltd, a company registered in England and Wales. Our registered address is Whinrig, Livermere Road, Bury St Edmunds, Suffolk, IP31 2QB. You can contact us at hello@commercialtradesjobs.co.uk.

We are the data controller for personal information collected through this website.

2. What data we collect

We collect the following categories of personal data:

  • Job applicants: full name, email address, phone number, CV/resume (PDF or Word document), and any covering message you include.
  • Candidate profile (optional): trade specialisms, years of experience, certifications held, availability, job type preference, and location (city/region). This is collected only if you choose to create a profile after applying.
  • Employers: company name, contact email address, and billing information (processed by Stripe — we never store card details).
  • Job alert subscribers: email address and trade category preferences.
  • All visitors: standard server logs including IP address and browser type, retained for security purposes.

3. How we use your data

  • To forward your job application (including your CV) to the relevant employer.
  • To analyse your CV using AI in order to pre-fill your optional candidate profile form, saving you time. See section 6 for details of the AI processor used.
  • To create and maintain your optional candidate profile, which allows employers to see aggregate engineer availability counts (no personal details are shared without your permission).
  • To send you job alert emails if you have opted in.
  • To provide employers with access to applications submitted for their vacancies.
  • To process payments for job listings via Stripe.
  • To send transactional emails (application confirmations, payment receipts) via Resend.
  • To maintain security and prevent fraud.

4. Legal basis for processing

  • Contract: processing your job application or employer account.
  • Consent: sending job alert emails (you can unsubscribe at any time via the link in any alert email).
  • Legitimate interests: security logging, fraud prevention, and improving our service.

5. How long we keep your data

  • CV files and application data: retained for 12 months after the job listing expires, then deleted.
  • Employer account data: retained for the duration of the account and 6 years thereafter for legal and tax purposes.
  • Job alert subscriptions: retained until you unsubscribe.
  • Server logs: retained for 30 days.

6. Who we share your data with

We share your data only with the following third-party processors, each bound by data processing agreements:

  • Supabase — database and file storage (EU-hosted)
  • Stripe — payment processing
  • Resend — transactional email delivery
  • Cloudflare — hosting and CDN
  • OpenAI — when you submit a PDF CV, the text content of that CV is sent to OpenAI's API solely to extract structured information (trade, certifications, experience, location) for pre-filling your candidate profile form. OpenAI does not use API submissions to train its models. A Data Processing Agreement is in place with OpenAI in accordance with UK GDPR Article 28. If you do not wish your CV to be processed this way, you may submit a Word document (.doc/.docx) instead, which is not sent to OpenAI.
  • Employers — your application and CV are shared with the employer who posted the vacancy you applied to

We do not sell your personal data to any third party.

7. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erase your data (right to be forgotten)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time (e.g. unsubscribe from job alerts)

To exercise any of these rights, email us at hello@commercialtradesjobs.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Cookies

We use only essential cookies necessary for authentication (keeping you logged in as an employer). We do not use advertising or tracking cookies.

9. Security

CV files are stored in a private, access-controlled storage bucket and are only accessible via time-limited signed URLs to authorised employers. All data is transmitted over HTTPS. We apply row-level security policies to our database to prevent unauthorised access.

10. Automated processing

We use automated processing (AI) to read the text of PDF CVs submitted through job applications. This processing is used only to pre-fill the optional candidate profile form and does not produce any legal or similarly significant effects — you remain free to edit, correct, or discard the pre-filled data before submitting. No automated decisions are made about your application on the basis of this processing. The relevant legal basis is our legitimate interest in improving user experience (UK GDPR Article 6(1)(f)).

11. Changes to this policy

We may update this policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of the site after changes constitutes acceptance.

12. Contact

For any privacy-related queries, contact us at hello@commercialtradesjobs.co.uk or write to SGLA Ltd, Whinrig, Livermere Road, Bury St Edmunds, Suffolk, IP31 2QB.