Privacy Policy

Tap&Hire ("we", "us") operates tapandhire.com, a marketplace that connects local businesses in Dublin with candidates looking for shift work. This policy explains what personal data we collect, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

We are the data controller for the personal data described below. You can reach us at privacy@tapandhire.com for anything related to this policy or your data.

1. What we collect

If you sign up as a candidate:

• Name and email address, and a password (stored securely by our authentication provider — we never see or store your password ourselves).
• Phone number — only if you choose to enable instant SMS job alerts (Gold plan).
• Job alert preferences you set (role keywords, areas, job types, pay type, minimum pay).
• Which job listings you view and unlock contact details for.
• Your subscription plan and billing status — actual payment card details are handled entirely by our payment processor, Stripe; we never see or store your card number.
• Your answers to a business's screening questions when you use Quick Apply. Each business writes its own questions, so what you're asked varies by job — typically things like your date of birth, your right to work in Ireland (visa or immigration stamp), your English level, your experience, and when you can start. Answering is your choice: you can skip any optional question, and you can skip the job entirely. Your answers are stored with that application and sent to that business.
• Your date of birth, kept on your profile so a later application comes pre-filled. You can change it on your next application; applications you already sent keep the answer you gave at the time.

If you post jobs as a business:

• Business name, address, general area, and contact details for candidates to reach you.
• The content of job postings you create — including any voice recording or photo you submit, which is processed to extract job details (see "Third parties" below).
• The screening questions you choose to ask Quick Apply candidates, and the answers those candidates give you.

For the applications sent to you, you decide what to ask and what to do with the answers — you are the data controller for that, and we host it for you. That means only asking what you actually need for the role, and complying with Irish equality and data protection law when you do (see our Terms).

2. Why we process it

• To provide the service — creating your account, showing you relevant jobs, letting businesses publish postings, and processing payments.
• Legitimate interest — sending job alerts that match what you asked to be notified about.
• Legal obligation — keeping billing records as required by tax law.
• Your choice — screening answers are only collected when you decide to apply for a specific job, and are used for that application only. We don't use them to profile you, and there's no automated decision-making: a person at the business reads the answers and decides.

3. Third parties we share data with

We use a small number of specialist providers to run the service. We don't sell your data.

When you apply for a job, the business that posted it receives your name, phone, email and your answers to its screening questions. That's the point of applying — but it only ever goes to the business whose job you applied for, never to any other business or advertiser.

• Supabase — hosts our database and handles login/authentication.
• Stripe — processes subscription payments. We never see your card details.
• Resend — delivers transactional emails and job alert emails.
• Twilio — delivers instant SMS job alerts, only for candidates who provide a phone number.
• Groq and Google Gemini — convert a business's voice recording or photo into structured job text when a job is posted. This may involve sending that audio/image outside the EU/EEA to these providers' infrastructure.
• Netlify — hosts the website itself.

Where a provider is located outside the EU/EEA, we rely on that provider's standard contractual clauses or equivalent safeguards for the transfer.

4. How long we keep it

We keep your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days — including the applications you sent and the answers in them — except where we're required to keep billing records for longer under tax law.

An application already sent stays visible to the business you sent it to until you delete your account or the job is removed. Because an application is a record of what you declared at the time, editing your profile later doesn't rewrite answers you already gave — and a business editing or removing a question never rewrites the answers already sent to it either.

5. Your rights

Under GDPR, you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything that's inaccurate.
• Delete your data ("right to be forgotten").
• Export your data in a portable format.
• Restrict or object to certain processing.

If you have a candidate account, you can delete it yourself at any time from your account page— that removes your data straight away and cancels any subscription. For anything else, email privacy@tapandhire.com. You can also complain to Ireland's Data Protection Commission (dataprotection.ie) if you believe we haven't handled your data properly.

6. Cookies

See our Cookie Policy for details on the cookies we use.

7. Changes to this policy

We may update this policy as the service evolves. We'll update the date at the top of this page when we do.