Privacy Policy

Last updated: March 2025

1. Introduction

WorkHere.cy ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform.

We process personal data in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Cyprus Processing of Personal Data (Protection of the Individual) Law of 2001 (as amended). Our supervisory authority is the Office of the Commissioner for Personal Data Protection of Cyprus.

2. Data Controller

The data controller responsible for your personal data is:

Platform: WorkHere.cy
Email: privacy@workhere.cy
Location: Limassol, Republic of Cyprus

3. What Data We Collect

3.1. Account Data

When you register, we collect:

First name, last name
Email address
Password (stored as a secure hash — we never see your actual password)
Account type (job seeker, employer, or admin)

3.2. Profile Data

Profile photo (optional)
Phone number (optional, for employer accounts)

3.3. Reviews and Ratings

When you submit a review, we collect:

Ratings (overall, salary, culture, management, work-life balance)
Review title, pros, cons, and advice
Job title, employment status, and whether the review is anonymous

Reviews are displayed publicly but are attributed anonymously by default. Your name is never shown alongside a review unless you explicitly choose to make it public.

3.4. Salary Data

When you submit salary information, we collect:

Job title, industry, city, experience level
Net monthly salary, overtime details, 13th/14th salary
Benefits (e.g., medical insurance, provident fund, company car)
Company name (optional)

Your company name is never shared with other users or displayed publicly. Salary data is used only for anonymous aggregate comparisons.

3.5. Job Application Data

When you apply for a job, we collect:

Cover letter text
Uploaded CV/resume file

This information is shared with the employer who posted the job listing. You should review the employer's own privacy practices.

3.6. Technical Data

We automatically collect:

IP address
Browser type and version
Pages visited, time spent, and interaction data
Referring URL

3.7. Cookies

We use cookies for:

Essential cookies: Session management, authentication, CSRF protection. These are necessary for the Platform to function and cannot be disabled.
Analytics cookies: To understand how visitors use our Platform (e.g., Google Analytics). These are only set with your consent.

You can manage your cookie preferences at any time via the cookie banner or your browser settings. See Section 10 for more details.

4. How We Use Your Data

We use your personal data for the following purposes and legal bases:

Purpose	Legal Basis (GDPR)
Providing and managing your account	Contract performance (Art. 6(1)(b))
Displaying anonymous reviews and salary data	Legitimate interest (Art. 6(1)(f))
Processing job applications	Contract performance (Art. 6(1)(b))
Sending account-related emails (verification, password reset)	Contract performance (Art. 6(1)(b))
Preventing fraud and abuse	Legitimate interest (Art. 6(1)(f))
Analytics and Platform improvement	Consent (Art. 6(1)(a))
Responding to legal requests	Legal obligation (Art. 6(1)(c))

5. Data Sharing

We do not sell your personal data. We share data only in these limited circumstances:

Employers: When you apply for a job, your application details (cover letter, CV) are shared with the employer
Payment processors: PayPal and VivaWallet process payments on our behalf. We do not store your payment card details
Analytics providers: Google Analytics receives anonymised usage data (with your consent)
Legal requirements: We may disclose data if required by a court order or law enforcement request under Cyprus or EU law

We do not transfer personal data outside the European Economic Area (EEA) unless adequate safeguards are in place as required by GDPR Chapter V.

6. Data Retention

Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
Reviews: Retained indefinitely as anonymous content in the public interest, even after account deletion. Authorship link is removed.
Salary data: Retained for aggregate statistical purposes. Personal identifiers are removed upon account deletion.
Job applications: Retained for 12 months after the job listing expires, then deleted.
Technical logs: Retained for 90 days.
Email communications: Sent emails are auto-deleted from our queue after 30 days.

7. Your Rights (GDPR Articles 15-22)

As a data subject in the EU/EEA, you have the following rights:

Right of access (Art. 15): Request a copy of the personal data we hold about you
Right to rectification (Art. 16): Request correction of inaccurate data
Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten")
Right to restriction (Art. 18): Request that we limit how we process your data
Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
Right to object (Art. 21): Object to processing based on legitimate interest
Right to withdraw consent (Art. 7): Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@workhere.cy. We will respond within 30 days as required by law.

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus (www.dataprotection.gov.cy).

8. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

HTTPS encryption for all data in transit
Password hashing using secure algorithms (bcrypt)
CSRF protection on all forms
Access controls and role-based permissions
Regular security reviews

While we strive to protect your personal data, no system is 100% secure. We cannot guarantee absolute security of data transmitted over the internet.

9. Children's Privacy

WorkHere.cy is not intended for use by anyone under the age of 18. We do not knowingly collect data from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

10. Cookies in Detail

Cookie	Type	Purpose	Duration
PHPSESSID	Essential	Session management	Session
cookie_consent	Essential	Stores your cookie preference	1 year
_ga, _gid	Analytics	Google Analytics tracking	Up to 2 years

You can delete cookies at any time through your browser settings. Disabling essential cookies may prevent certain features from working correctly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform or by email. The "Last updated" date at the top reflects the most recent version.

12. Contact

For privacy-related questions or to exercise your data rights:

Email: privacy@workhere.cy
General enquiries: info@workhere.cy
Location: Limassol, Republic of Cyprus