Data Protection & GDPR.

Source of Hire Recruitment is a specialist recruitment agency committed to protecting your personal data in accordance with the Australian Privacy Act 1988 and Australian Privacy Principles (APPs), as amended by the Privacy and Other Legislation Amendment Act 2024; the UK GDPR and Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025; the EU General Data Protection Regulation (GDPR); and applicable US state privacy laws.

As a recruitment agency working with clients and candidates internationally — including in Australia, the United Kingdom, and the United States — we act as the data controller for personal data processed on this platform.

We process your personal data based on one or more of the following legal grounds:

Contract: Processing necessary to operate your account, process your job applications, and deliver our recruitment services

Consent: Where you have opted in, such as setting up job alerts or enabling usage analytics

Legitimate interests: For running and securing the platform, where your rights are not overridden

Legal obligation: Where required by law in Australia, the US, or the UK

We collect and process the personal data you give us through the platform:

Identity data: Name and professional title

Contact data: Email address and optional phone number

Professional data: Resume, work history, education, qualifications, skills, industry, and years of experience

Employment data: Availability, desired roles, salary expectations, and location

Application data: Roles you apply for and any cover letters you write

Alert data: Email address and the search criteria you choose for job alerts

Technical data: IP address and standard server logs, kept for security

Usage data (optional, consent-based): Anonymous first-party analytics — pages viewed and time on page, tied to a random identifier never linked to your account; off by default, retained up to 24 months

We do not collect payment data or build marketing profiles, and we never track you without your consent — no third-party trackers, ever.

We do not make automated decisions that produce legal or similarly significant effects for you, and we do not use AI systems for candidate matching, screening, or ranking.

Job search on this platform is keyword- and filter-based, returning listings that match the criteria you enter. Job alerts match new listings against criteria you define yourself. All applications and employer requests are reviewed by our recruiters. This means the automated decision-making provisions of the UK GDPR (Article 22, as amended), the EU GDPR, and the Australian Privacy Act's ADM transparency requirements (from December 2026) do not currently apply to any processing on this platform — and this page will be updated before that ever changes.

We implement appropriate technical and organisational measures including:

• Passwords stored only as salted argon2id hashes
• Session tokens stored only in hashed form
• Encryption of data in transit
• Access controls and authentication
• Data minimisation — we collect only what the service needs

We retain personal data only as long as necessary for the purposes collected:

Active accounts: Candidate and employer data retained while your account is active

Inactive data: Candidate profiles, resumes, and applications retained for up to 24 months after your last activity, then reviewed and removed

Deletion on request: You can ask us to delete your account and data at any time

Legal requirements: Some records retained longer if required by law or to resolve disputes

These periods match our Privacy Policy.

Source of Hire Recruitment works with clients and candidates internationally, including in Australia, the United Kingdom, and the United States. Your data may be transferred between these jurisdictions. When this happens, we ensure adequate protection through:

• Compliance with the Australian Privacy Act 1988 cross-border disclosure requirements (APP 8)
• Standard contractual clauses for transfers involving EU/EEA and UK data
• Compliance with applicable US state privacy laws
• Adequacy decisions where applicable

You have the right to access, correct, delete, restrict, and port your personal data, to object to processing, and to withdraw consent. To exercise any of these rights, you can:

• Update your details in your account settings
• Email us at admin@sohrecruitment.com

We will respond to your request within one month. This may be extended by two months for complex requests.

If you are not satisfied with how we handle your data, you can complain to us directly at admin@sohrecruitment.com — we acknowledge complaints within 30 days and respond without undue delay, as required by the UK Data (Use and Access) Act 2025. You also have the right to lodge a complaint with the relevant authority:

Australia — Office of the Australian Information Commissioner (OAIC)

Website: oaic.gov.au

Phone: 1300 363 992

Australian law also provides a statutory tort for serious invasions of privacy (in force since June 2025), a direct court avenue independent of the OAIC.

UK — Information Commissioner's Office (ICO)

Website: ico.org.uk

EU/EEA — Your local data protection authority

A full list is available at edpb.europa.eu

US — The attorney-general or privacy agency of your state

If you have any concerns about how Source of Hire Recruitment handles your personal data, contact us at:

Email: admin@sohrecruitment.com