1. Who we are
Seasonly is a mobile app that connects people looking for short-term seasonal work with local businesses that have seasonal hiring needs.
Seasonly is operated by Aiden Tonyy. For the purposes of UK GDPR and the Data Protection Act 2018, Aiden Tonyy is the data controller for personal data processed through the Seasonly app and website.
You can contact us at hello@seasonly.co.uk or by post at: Seasonly, The Catalyst, York Science Park, Baird Lane, York, YO10 5GA, GB.
2. Scope of this policy
This policy covers personal data processed through:
- The Seasonly mobile app (iOS), for both job seekers and employers.
- The seasonly.co.uk website and any waitlist or contact forms hosted there.
It does not cover the privacy practices of employers or other users. Employers are separate data controllers for the information they receive and keep about you, including information you share with them in the app. Please refer to their own privacy practices.
3. Data we collect
3.1 Job seekers
When you create and use a job-seeker account (currently by invitation only), we collect:
- Identity and profile data: your name, date of birth, gender, bio and profile photos. We ask for your date of birth to confirm you are 18 or over.
- Location data: your approximate location, used for distance-based matching and filtering. We do not store your precise GPS coordinates persistently.
- Professional data: industries and job types you are interested in, seasonal availability, employment type preference, work experience and education history.
- CV uploads: if you choose to upload a CV, the file is stored and processed by our AI provider (OpenAI) to extract information and pre-fill your profile. The file is kept in our file storage.
- Authentication data: managed by our authentication provider, Clerk. This includes your email address and login credentials.
- Communications: messages you send and receive in in-app chat, and any files you attach. We do not request, check or verify right-to-work documents or share codes. If you choose to send them to an employer in chat, they are treated like any other file.
- Device data: your push notification token, used to send match and message alerts.
- Usage data: internal event data such as swipes, matches and messages sent, used for product analytics and improvement. This is not shown to employers.
Please do not include sensitive information (for example about your health, ethnicity, religion or sexual orientation) in your CV, profile or chats unless you are happy for it to be processed as described in this policy.
3.2 Employers
When you create and use an employer account (by invitation only), we collect:
- Business data: company name, logo and description.
- Job listings: role title, pay, hours, dates and location for each listing.
- Authentication data: managed by Clerk (email and credentials).
- Communications: messages and attachments exchanged in-app with matched job seekers.
- Usage data: internal event data such as matches and messages sent.
3.3 AI-generated data
We generate vector embeddings from job-seeker profile data and employer job listings using the OpenAI API. Embeddings are numerical representations used to power AI matching. They are stored in our database alongside your profile or listing and are not shared beyond what is described in section 7.
3.4 Website visitors
If you visit seasonly.co.uk or submit a form (such as the waitlist form), we collect the details you submit (for example your name and email address). Our hosting provider also processes standard technical request data, such as IP address, needed to deliver and secure the site (see section 12).
4. Legal bases for processing
Under UK GDPR, we rely on the following legal bases:
| Processing activity | Legal basis |
|---|---|
| Creating and managing your account | Contract (Art. 6(1)(b)) |
| Showing your profile to matched employers, and job listings to you | Contract (Art. 6(1)(b)) |
| AI matching (generating and using embeddings) | Legitimate interests (Art. 6(1)(f)) |
| CV parsing via OpenAI (only if you choose to upload a CV) | Contract (Art. 6(1)(b)) |
| In-app chat and file sharing | Contract (Art. 6(1)(b)) |
| Service notifications (matches, messages) | Contract (Art. 6(1)(b)) |
| Internal product analytics | Legitimate interests (Art. 6(1)(f)) |
| Website security and forms | Legitimate interests (Art. 6(1)(f)) |
| Compliance with legal obligations (for example responding to lawful requests, tax and accounting records) | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have weighed our interests against your rights and freedoms. You can object to this processing at any time by contacting us.
If we send any marketing messages in future, we will ask for your consent first.
5. How we use your data
- Matching: to rank and present relevant job listings to job seekers, and to rank applicants for employers, using AI-powered compatibility scoring.
- Communication: to enable in-app messaging between matched users.
- Notifications: to send push notifications about new matches and messages.
- Profile display: to show job-seeker profiles to employers, subject to section 6.
- CV processing: to read an uploaded CV and pre-fill your profile.
- Account management: to authenticate you, maintain your account and let you delete it.
- Product improvement and security: to monitor performance, fix problems and keep the service secure.
- Legal compliance: to comply with the law and respond to lawful requests.
We do not sell your personal data. We do not use your data for advertising profiling.
6. Who can see your data
We aim to limit how widely your data is visible:
- Employers can only see job seekers who have applied to their listings. They cannot browse or search the wider pool of job seekers.
- Your work experience and education history are visible only to you and to employers you have a confirmed match with.
- Resolved chats remain visible (read-only) to both the job seeker and the employer after a match ends. The reason an employer marks a match as resolved is not shown to the job seeker.
- Internal analytics are used only by us and are not shown to employers or job seekers.
Anything you share with another user, including in chat, can be seen, saved and used by that user. We cannot control what they do with it once they have it.
7. Service providers (processors)
We share personal data with the following providers, who process it on our behalf under contractual terms:
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Clerk | Authentication and account management | Email address, login credentials | US |
| Convex | Backend database and file storage | Profile data, listings, messages, attachments, embeddings | US |
| OpenAI | CV parsing and AI embeddings for matching | CV content, profile and listing data | US |
| Expo / EAS | Push notification delivery (which may pass through Apple's push service) | Push token, notification content | US |
| Cloudflare | Website hosting | Web traffic and request logs | Global network |
| Tally | Website waitlist and contact forms | Details submitted via forms | EU |
We do not share your personal data with anyone else except where required by law or to protect our legal rights.
8. International transfers
Some of our providers are based in the United States, including Clerk, Convex, OpenAI, Expo and Cloudflare.
Where your personal data is transferred outside the UK, we rely on either (a) the UK Extension to the EU-US Data Privacy Framework, where the recipient is certified under it, or (b) the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
You can ask for more information about these safeguards by contacting us at hello@seasonly.co.uk.
9. How long we keep your data
9.1 Accounts
We keep your personal data for as long as your account is active. You can delete your account at any time in the app (see section 10). When you do, we delete your profile, listings, matches and messages from our live systems within 30 days, except where we are required to keep information by law. Deleted data may remain in backups for a limited period before it is overwritten. Messages and files you sent to other users may remain available to them.
9.2 Chat messages and attachments
Files sent in chat are automatically deleted 30 days after a match is marked as resolved. Files in conversations that are never marked as resolved are kept until account deletion. Text messages are kept until account deletion, subject to section 9.1.
Please only share documents that an employer has asked you to provide, and no more than is needed. Employers are responsible for keeping their own records of right-to-work checks as the law requires, and should not rely on Seasonly to store them.
9.3 CV files
Uploaded CV files are kept in our file storage until you delete your account. Information taken from a CV becomes part of your profile.
9.4 Legal holds
We may keep certain data for longer where the law requires it, or where it is needed to establish, exercise or defend legal claims.
10. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Have inaccurate or incomplete data corrected.
- Have your data erased. The easiest way is to delete your account in the app, or you can contact us.
- Restrict how we process your data in certain circumstances.
- Receive your data in a structured, commonly used, machine-readable format, where processing is based on contract or consent.
- Object to processing based on legitimate interests.
- Withdraw consent at any time, where we rely on it.
Automated decisions: our AI matching ranks job seekers and listings automatically, which affects the order in which people and jobs are shown. We do not make solely automated decisions that have legal or similarly significant effects on you. Employers make their own hiring decisions. If you have concerns about how matching affects you, please contact us.
To exercise any of these rights, contact hello@seasonly.co.uk. We will respond within one month.
11. Minimum age
Seasonly is intended for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you are under 18, please do not use the app. If we learn that we have collected data from someone under 18, we will delete it. If you believe this has happened, please contact us at hello@seasonly.co.uk.
12. Cookies and website analytics
The Seasonly mobile app does not use cookies. It may use device identifiers and similar technologies that are needed to provide the service, such as keeping you signed in and delivering notifications.
The seasonly.co.uk website uses only strictly necessary cookies, which are needed for the site to work and stay secure (for example security cookies set by Cloudflare). These do not require your consent under the Privacy and Electronic Communications Regulations 2003 (PECR).
We do not currently use analytics or advertising cookies on the website. If we add them in future, we will update this policy and ask for your consent before they are set.
You can block or delete cookies in your browser settings, although some parts of the website may not work properly if you do.
13. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. These include encryption in transit (TLS/HTTPS), encryption at rest provided by our database provider, access controls, and invitation-only employer account creation.
In-app chat messages and attachments are not end-to-end encrypted, so we are technically able to access them. We do not routinely read them. We may access them where needed to investigate a report, a safeguarding concern or a security issue, or where the law requires it.
No system is completely secure. If you think your account has been compromised, please contact us straight away at hello@seasonly.co.uk.
14. Changes to this policy
We may update this policy from time to time. We will change the "last updated" date at the top and, for material changes, notify you in the app or by email. If you do not agree with a change, you can stop using the app and delete your account.
15. Contact and complaints
For questions, requests or concerns about this policy or how we handle your data, contact:
Seasonly
The Catalyst, York Science Park, Baird Lane, York, YO10 5GA, GB
hello@seasonly.co.uk
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
We would appreciate the chance to address your concern first, but you do not have to contact us before going to the ICO.