1. Who we are
ContractorCallBoard, LLC ("we") runs this website and is the controller (LGPD), responsible party (POPIA) and data controller (GDPR) for the personal data described here.
Our data protection contact (Encarregado under LGPD, Information Officer under POPIA) can be reached at recruiting@contractorcallboard.com.
2. What we collect
- Account data: email address, password (stored only as a bcrypt hash), account type, language, and dates of sign-up and last login.
- Candidate profile: name, headline, description, trades, country, state and city, languages, years of experience, work arrangement, availability, and the CV and portfolio files you upload.
- Applications: the jobs you apply to, your cover note and the CV you send.
- Company data: company name, website, location, description and job posts.
- Messages you send through the contact form.
- Technical data: essential cookies, and your IP address, used briefly in memory to block abuse (rate limiting). We do not store IP addresses in our database.
- Analytics data, only if you accept analytics cookies (see section 5).
- Messages you exchange with companies or candidates, and any contact details a candidate chooses to share in a conversation.
- Job alerts: the email address, saved search and frequency you choose.
- Jobs and candidates you save, and company logos.
3. Why we use it and on what basis
- To run your account and the job board: performing our contract with you (LGPD art. 7, V; POPIA s.11(1)(b); GDPR art. 6(1)(b)).
- To send transactional emails such as confirmations, password resets and application notices: same basis.
- To keep the service safe, prevent fraud and moderate posts: legitimate interests (LGPD art. 7, IX; POPIA s.11(1)(f); GDPR art. 6(1)(f)).
- To measure site usage with Google Analytics: your consent (LGPD art. 7, I; POPIA s.11(1)(a); GDPR art. 6(1)(a)), which you can withdraw at any time.
- To meet legal obligations when they apply.
We do not sell personal data, we do not send marketing emails, and we do not make automated decisions about you.
4. Who can see your information
- Job posts and company names are public.
- Your candidate profile and CV are visible only to companies you apply to.
- If you switch on "Let companies find me", signed-in companies with a confirmed email can also find your profile and view or download your CV and portfolio.
- Moderators can see what is needed to run and protect the service.
- Service providers that process data for us: our hosting provider (servers and database), our email provider (to deliver transactional emails) and, only with your consent, Google (analytics).
- Authorities, when the law requires it.
- Messages are visible only to the two people in the conversation. If either of them reports it, moderators see the latest messages so they can review it.
- In messages, your email address and phone number stay hidden from companies until you choose to share them.
- Company pages, logos and open jobs are public. A candidate's rate is shown to companies only if the candidate makes it public.
6. International transfers
Our servers and service providers may be located outside your country. When personal data is transferred internationally we rely on the safeguards allowed by LGPD (art. 33), POPIA (s.72) and GDPR (chapter V), such as contractual clauses with providers.
7. How long we keep data
- Account, profile, files, applications and job posts: while your account is open. When you delete your account they are deleted from our live database immediately.
- Backup copies are overwritten in the normal backup cycle.
- Contact messages: as long as needed to answer you, and no longer than 12 months.
- Analytics data: according to the retention set in Google Analytics (14 months).
- Job alerts: until you unsubscribe (every alert email has a one-click link) or delete your account.
- Messages: while both accounts exist. A conversation is deleted when either person deletes their account.
8. Your rights
Depending on where you live, you can: confirm whether we process your data; access it; correct it; get a portable copy; have it deleted; object to or restrict processing; withdraw consent; and know with whom we share it.
You can download your data and delete your account yourself from "Account and privacy". For anything else, write to recruiting@contractorcallboard.com. We answer within 15 days.
You can also complain to a supervisory authority: the ANPD in Brazil, the Information Regulator in South Africa, or your local data protection authority in the EU or UK.
9. Security
Passwords are hashed with bcrypt. Connections use HTTPS. Uploaded files are stored outside the public website and served only to people allowed to see them. Access to the database is restricted. If a security incident puts your rights at risk, we will notify you and the relevant authority as the law requires.
10. Age
The board is for people aged 18 or over. We do not knowingly collect data from children.
11. Changes
If we change this policy we will update the date at the top, and we will tell registered users by email about important changes.