Privacy policy
How Energy Jobs Board collects, uses and protects personal data for candidates, employers and visitors, how long we keep it and the rights you have.
Last updated 25 October 2026
Who we are
Energy Jobs Board is a specialist job board for the UK energy sector. It is run by Energy Jobs Board. In this policy, "we", "us" and "our" mean Energy Jobs Board.
We are the controller of the personal data described in this policy. That means we decide why and how it is used, and we are responsible for looking after it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have a question about this policy or want to use any of your rights, please send us a message through our contact form. In most cases there is no charge.
Information we collect
Your account
When you register as a candidate or an employer, we collect your name, email address, phone number and a password. We store your password only as a one-way hash, so nobody at Energy Jobs Board can read it. We also record when your account was created, when you confirmed your email address and when you last signed in.
Candidate profiles and CVs
If you register as a candidate, you can add the following to your profile:
- your location and the locations where you would like to work
- your job title and a short summary about yourself
- the sectors you work in, your skills and your qualifications
- your years of experience and employment preferences, such as permanent, contract, on-site, hybrid or remote
- an optional salary expectation, and your availability
- an optional link to your LinkedIn profile
- your CV, uploaded as a PDF or Word file
CV files are stored privately. They are not published on the website and cannot be reached through a public web address. They are only made available in the ways described under "How candidate information is shared" below.
Job applications and saved jobs
When you apply for a job, we record the job, your covering message, a copy of the CV you sent and the status of your application, such as viewed, shortlisted or unsuccessful. We also keep the list of jobs you have saved.
Employers and recruitment agencies
For employer accounts we collect company details (such as name, description, website, location, logo, sectors, size and social media links), contact details for the people managing the account, the job adverts you submit and any orders you place for packages or credits. When someone from your organisation views a candidate profile or downloads a CV, we record the company, the user, the date and time and the IP address used.
Contact form
When you use our contact form, we collect the details you enter: your name, email address, phone number, address, postcode, preferred contact method, the type of enquiry and your message.
Spam protection
Our forms are protected against spam robots. Messages are checked automatically, and if a message is stopped as suspected spam we may record the form used, the reason, the email address given, a short extract of the message and the IP address it came from.
Website statistics
When you visit a page, our own server records the page viewed, the date and time, the website that referred you (if any), your IP address, your browser and device type (from the user agent your browser sends) and your approximate country. We use this to run the site, spot problems and understand which pages are useful. We do not use advertising trackers, and we do not use these records to build a profile of you.
How candidate information is shared
You stay in control of who can see your candidate profile.
- Hidden by default. Your profile is not searchable until you choose to make it searchable in your privacy settings. You can switch this off again at any time.
- Approved employers only. If your profile is searchable, only employers and agencies that we have approved and that have candidate database access can view it and download your CV. Profiles are not shown to the public.
- Every access is logged. We record each profile view and CV download, and your dashboard shows which companies have accessed your CV.
- Applications. When you apply for a job, your application and a copy of your CV go to the employer or agency that posted it.
- Withdrawing. If you withdraw an application, we delete our copy of the CV and covering message for that application, and the employer can no longer see them on Energy Jobs Board.
An employer or agency that receives your details is responsible for its own use of them, as a separate controller. If it has already downloaded your CV, it must handle that copy in line with data protection law. Our terms of use forbid employers from reselling candidate data or using it for anything other than recruitment, and you can ask an employer directly what it holds about you.
Why we use your information and our legal basis
Data protection law says we must have a lawful basis for each way we use personal data. The table below sets out what we do and the basis we rely on.
| What we do | Legal basis |
|---|---|
| Create and run your account, candidate profile, saved jobs and application history | Contract: we need to do this to provide the service you signed up for |
| Send your application and CV to the employer you apply to, and show your profile to approved employers when you have made it searchable | Contract |
| Publish employer adverts and company profiles, handle orders and add credits | Contract |
| Send service emails, such as confirmation of an application, updates from employers and notices about your account | Contract |
| Keep the site and accounts secure, investigate misuse and log access to candidate data | Legitimate interests |
| Check adverts, company profiles and other content before and after it goes live (moderation) | Legitimate interests |
| Protect our forms from spam | Legitimate interests |
| Record website statistics to run and improve the site | Legitimate interests |
| Reply to messages sent through the contact form | Legitimate interests, or contract where your message is about your account or an order |
| Send occasional energy careers news and tips, if you ask for them | Consent |
| Keep financial records of orders and respond to lawful requests from public authorities | Legal obligation |
Where we rely on legitimate interests, we have weighed our interest in running a safe, reliable job board against your rights, and we limit what we collect to what is needed. You can object at any time (see "Your rights" below).
News emails are optional. You can choose them when you register and change your mind at any time in your account settings. Withdrawing consent does not affect anything we did before you withdrew it.
Cookies
We use only a small number of cookies that the site needs to work, such as keeping you signed in and protecting our forms from spam. We do not use analytics or advertising cookies. Our cookie policy lists each one.
Who we share information with
- Employers and agencies, as explained above.
- Our service providers. We use a web hosting provider to run the site and store its data, and an email delivery provider to send emails. They act as our processors: under a written contract, they may only use the data to provide their service to us, and they must keep it secure.
- Writing tools. Some blog articles may be drafted with the help of an AI writing service. We do not send it any personal data about candidates, employers or visitors.
- Maps. Location pages include a map embedded from OpenStreetMap. When the map loads, your browser connects to OpenStreetMap's servers, which receive your IP address and browser details and handle them under the OpenStreetMap Foundation's own policies.
- Others where necessary. We may share information with professional advisers, with the police, courts or regulators where the law requires it, or with a buyer if our business is sold, who would have to keep using it in line with this policy.
We do not sell personal data, and we do not share it with advertisers.
Where your data is stored
We aim to keep personal data in the UK. If one of our providers processes data outside the UK, we make sure the transfer is protected in the way UK data protection law requires, for example by relying on UK adequacy regulations or the International Data Transfer Agreement.
How long we keep information
| Information | How long we keep it |
|---|---|
| Accounts and profiles | While your account is open, subject to the rules below |
| Account deletion requests | Your account is hidden as soon as you ask, and erased 14 days later. If you change your mind, sign in before then. |
| Inactive candidate accounts | If you have not signed in for 24 months, we email you. If you still do not sign in, your account, profile and CV are deleted 30 days after that email. |
| Applications | Kept with your account. Withdrawing an application deletes our copy of its CV and covering message straight away. |
| Website statistics | Up to 13 months |
| Spam logs | 90 days |
| Database backups | 14 days, after which each backup is deleted |
| Contact enquiries | As long as we need to deal with your enquiry and any follow-up |
| Order records | As long as the law requires us to keep financial records |
Because backups are kept for 14 days, information deleted from the live site can remain in a backup for up to 14 days afterwards. We only use backups to restore the site after a fault.
How we protect your information
Passwords are stored as one-way hashes, CV files are kept outside the public part of the website, and access to candidate data is limited to approved employers and authorised staff, with each access logged. Signed-in sessions use secure cookies, and our forms include protection against misuse. No system is completely secure, but we review our measures regularly and will act quickly if something goes wrong, including telling you and the regulator where the law requires it.
Your rights
Under UK data protection law, you have the right to:
- access the personal data we hold about you and receive a copy
- rectification, so that inaccurate or incomplete data is corrected
- erasure, meaning you can ask us to delete your data
- restriction, meaning you can ask us to limit how we use your data, for example while we check a complaint
- object to any use of your data based on legitimate interests
- portability, meaning you can receive data you gave us in a structured, commonly used format, or have it sent to another organisation
- withdraw consent at any time where we rely on it
You can do many of these things yourself. Candidates can edit their profile, replace or remove a CV, hide their profile from searches, change email preferences and delete their account from the dashboard. For anything else, send us a request through our contact page and we will respond within one month. If a request is complex, we may extend this by up to two further months and will tell you why. We may need to confirm your identity first.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first so we can try to put it right. We will acknowledge your complaint within 30 days, look into it and tell you the outcome without undue delay.
You also have the right to complain to the UK data protection regulator. Under the Data (Use and Access) Act 2025, the Information Commission replaced the Information Commissioner on 30 September 2026. It still uses the name ICO (now short for Information Commission's Office), and you can find out how to complain on its website at ico.org.uk.
Age
Energy Jobs Board is for people looking for work or recruiting in the energy sector. You must be at least 16 to create an account, and we do not knowingly collect personal data from children under 16.
Changes to this policy
We will update this policy when the way we handle personal data changes. The date at the top of this page shows when it was last updated. If a change significantly affects you, we will tell you by email or on the site.