Legal

Privacy Policy

In accordance with UK data protection law (UK GDPR) and the Data Protection Act 2018.

Last updated: 22 August 2026

TheDreamJob (hereinafter "we", "the Platform") places the highest importance on the protection of your personal data. This Privacy Policy describes the nature of the data we collect, the reasons we process it, the parties with whom it may be shared, and the rights you hold in relation to it.

By using TheDreamJob, you acknowledge that you have read this policy and agree to the data processing described. If you do not consent, please do not use our services.

Data Controller: Singo Loua — TheDreamJob, Sunderland, SR1, United Kingdom — info.thedreamjob@gmail.com

01

Data we collect

01

Data we collect

We collect only the data necessary to provide our services:

Identity data

First name, last name, username, profile picture.

Contact data

Email address, phone number.

Professional data

CV, cover letter, work experience, education, skills, certifications, languages.

Log data

IP address, browser, pages visited, date and time of access.

Google authentication data (OAuth)

If you sign in via Google, we receive your email address and Google profile name. No Google password is stored by TheDreamJob.

02

Purposes of processing

Purpose Data concerned Legal basis
Account creation and management Identity, contact, log data Performance of contract
Connecting candidates and recruiters Identity, professional profile Performance of contract
AI CV analysis CV, cover letter Explicit consent
AI interview simulation CV, job description Explicit consent
Job search (Google Search) Search query, location Legitimate interest
Sending emails (notifications, OTP) Email address Performance of contract
Platform improvement and security Log data Legitimate interest
03

Artificial Intelligence — Google Gemini

Important section — please read carefully

TheDreamJob uses the Google Gemini API (a service of Google LLC, United States) to power two features:

📄 CV Analysis (CV Check)

The content of your CV and the job description are sent to the Gemini API to generate a personalised analysis, a compatibility score and improvement recommendations.

🎤 Interview Simulation (Mock Interview)

The content of your CV and the job description are sent to the Gemini API to generate personalised interview questions and evaluate your responses.

Transfer outside the United Kingdom: Your data (CV, interview responses) is transmitted to Google LLC servers in the United States for processing. This transfer is carried out via an encrypted connection (HTTPS).

No permanent storage by Google: In accordance with the Gemini API terms of service, Google does not retain data submitted via the API for model training purposes by default.

Consent: Use of these features is voluntary. By submitting your CV for analysis or starting a mock interview, you explicitly consent to this processing and transfer.

Automated decisions: AI results are provided for information purposes only. No decision producing legal or similarly significant effects on you is taken in a fully automated manner without human involvement.

Learn more: Google Privacy PolicyGemini API Terms of Service

04

Google APIs & International Transfers

TheDreamJob uses several services provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States) involving transfers of data outside the United Kingdom:

Google Custom Search API

Your job search query is sent to Google to retrieve results filtered for the United Kingdom. Queries are not stored by TheDreamJob.

Google Maps API

Used for the services map. Your location may be used if you permit it in your browser settings.

Google OAuth (Sign in with Google)

If you choose to sign in with your Google account, we receive your email address and name. No password is transmitted to TheDreamJob.

Google Gemini API (AI)

Detailed in section 03 above.

These transfers are governed by Google's privacy policies and applicable contractual safeguards (Standard Contractual Clauses). By using TheDreamJob, you acknowledge and accept these transfers.

05

Data retention

Account data (profile, CV) Duration of account activity + 2 years
Login data (logs) 12 months
CV analysis results (AI) Session only (not stored)
Contact messages 3 years

Upon expiry of these periods, your data is securely deleted or anonymised.

06

Your rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights over your personal data:

✅ Right of access

Obtain a copy of the personal data we hold about you.

✏️ Right of rectification

Correct inaccurate or incomplete data.

🗑️ Right to erasure

Request deletion of your account and your data.

🚫 Right to object

Object to certain processing activities based on legitimate interest.

⏸️ Right to restriction

Request that processing be temporarily suspended.

📦 Right to data portability

Receive your data in a machine-readable format.

To exercise these rights, contact us at: info.thedreamjob@gmail.com — we will respond within 30 days.
07

Data security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure:

HTTPS encryption for all communications
Passwords stored with secure hashing (Django)
6-digit OTP verification for accounts
Data access restricted to authorised personnel only

No system is infallible. In the event of a data breach affecting you, we will notify you within the timeframes required by law.

08

Cookies

TheDreamJob uses the following categories of cookies:

Strictly necessary (always active)

sessionid
Django session cookie — keeps you logged in. Deleted when you close your browser.
csrftoken
Protection against CSRF attacks. Required for form security.
cookieConsent
Remembers your cookie consent choice (accepted / declined).
googtrans
Set only if you actively choose a language via our language switcher — remembers your translation preference.

Analytics & advertising (only set after you click "Accept")

_ga, _ga_*, _gid
Google Analytics (gtag.js) — measures site traffic and usage. Set by Google LLC.
IDE, test_cookie, etc.
Google AdSense — used to show and measure advertising on the platform. Set by Google LLC.

These analytics and advertising cookies are not loaded until you click "Accept" on our cookie banner. If you click "Decline", or close the banner without choosing, they are never set. You can change your mind at any time by clearing your browser's local storage for this site, which will bring the banner back.

09

Contact & Complaints

For any question relating to this policy or to exercise your rights:

Data Controller

Singo Loua — TheDreamJob

info.thedreamjob@gmail.com

Supervisory Authority

ICO (Information Commissioner's Office)

ico.org.uk

If you believe your rights have not been respected, you have the right to lodge a complaint with the ICO (Information Commissioner's Office), the UK supervisory authority for data protection matters.

TheDreamJob Privacy Policy — Last updated: 22 August 2026
In accordance with the UK GDPR and Data Protection Act 2018
Telegram