Privacy Policy

Last updated: 11 January 2026

1. Introduction

In plain English: this explains what data we collect, why we need it, and how we keep it safe when you use Aspo.

This Privacy Policy explains how Aspo Recruitment Ltd ("we", "us", "our") collects, uses, stores, and shares personal data when you use our website, platform, and related services (the "Services").

We operate an early-career and entry-level recruitment platform designed to help candidates discover suitable roles and help employers and recruiters connect with talent.

We are committed to protecting your privacy and handling personal data transparently, lawfully, and securely in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

We’re responsible for how your data is handled on the platform.

Aspo Recruitment Ltd is the data controller responsible for personal data processed through the Services.

Email: james@teamaspo.com

3. Personal Data We Collect

This section covers what information we collect, depending on how you use Aspo.

3.1 Candidates and Users

• Name and contact details (such as email address)
• Account and authentication information
• Location data (city or region level)
• Job preferences and search activity
• CVs, profile information, and application data you choose to provide
• Communications with us

Certain features of the Services, including personalised job matching, suitability feedback, and role recommendations, require you to provide a CV or equivalent profile information as part of account creation.

3.2 Employers and Recruiters

• Name and business contact details
• Company name and role
• Job listings and related information
• Communications and platform usage data

3.3 Job Data from Third-Party Sources

We ingest job listings from third-party job boards and public sources. These listings may include employer names, job descriptions, locations, salary ranges, and application links.

This data is processed to classify roles, filter unsuitable listings, and present relevant opportunities. Where personal data appears in third-party listings, we rely on legitimate interests and/or the original publisher’s lawful basis.

3.4 Technical Data

• IP address
• Browser and device information
• Session identifiers and cookies
• Log files and error data

4. How We Use Personal Data

We use your data to make the platform work properly and keep job matches relevant.

• Provide and operate the Services
• Create and manage user accounts
• Match candidates with relevant job opportunities
• Enable employers and recruiters to engage with candidates
• Improve relevance using automated and AI-assisted classification
• Communicate with users
• Maintain security and prevent misuse
• Comply with legal obligations

5. Lawful Bases for Processing

UK law requires us to have a valid reason for using your data — these are ours.

• Contract – where processing is necessary to provide the Services
• Legitimate interests – to operate and improve our platform
• Consent – where required for optional communications
• Legal obligation – where required by law

6. Automated Processing and AI

We use automation to save time — not to make important decisions about you on its own.

We use automated systems, including AI-based tools, to classify job listings, identify entry-level roles, and improve matching accuracy.

These processes support decision-making and do not produce legal or similarly significant effects without human oversight.

7. Data Sharing

We only share data when it’s necessary to run the platform or required by law.

We use trusted third-party service providers to help us operate the Services. These may include providers for hosting, databases, analytics, email delivery, and customer support.

These providers process personal data only on our instructions and are subject to appropriate contractual and security obligations.

• Hosting and infrastructure providers
• Analytics and monitoring services
• Professional advisers
• Regulators or authorities where legally required

We do not sell personal data.

7.1 Sharing data with employers

When you choose to share your details with an employer or recruiter through the Services, we will share the personal data you have provided for recruitment purposes. This may include your contact details, CV, work history, profile information, and suitability or matching information.

In these circumstances, Aspo Recruitment Ltd acts as a data controller when processing your data on the platform. Once your data is shared, the employer or recruiter will act as a separate and independent data controller and will process your data in accordance with their own privacy policies and legal obligations.

Employers and recruiters are responsible for how they use, store, and retain your data after it has been shared. We require employers using our platform to process candidate data securely and only for legitimate recruitment purposes.

8. International Transfers

Some of our tools operate outside the UK, but your data stays protected.

Where personal data is processed outside the UK, we ensure appropriate safeguards are in place, including adequacy regulations or standard contractual clauses.

9. Data Retention

We don’t keep your data forever — only for as long as there’s a real reason to.

We retain personal data only for as long as necessary to provide the Services, meet legal requirements, resolve disputes, and enforce our agreements.

10. Your Rights

You’re in control of your data, and the law gives you clear rights over it.

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict processing
• Request data portability
• Withdraw consent where applicable
• Lodge a complaint with the Information Commissioner’s Office (ICO)

11. Cookies

Cookies help the site work properly and understand what’s being used.

We use cookies and similar technologies to maintain sessions, improve functionality, and analyse usage. Where required by law, we will seek consent before using non-essential cookies or similar technologies. Further details are available in our Cookie Policy.

12. Security

We take reasonable steps to protect your data, but no system is perfect.

We implement appropriate technical and organisational measures to protect personal data, including encryption, access controls, and monitoring.

13. Children’s Data

Aspo is built for adults entering work, not children.

Our Services are not intended for children under 16, and we do not knowingly collect personal data from children.

14. Changes to This Policy

If this policy changes in a meaningful way, we’ll make that clear.

We may update this Privacy Policy from time to time. Any material changes will be communicated through the platform or by email where appropriate.

15. Contact Us

Questions, concerns, or data requests — just email us.

If you have questions about this Privacy Policy or how we handle personal data, contact us at james@teamaspo.com.