Skip to content
Post a job

Legal

Privacy policy

How we handle your personal data, why we are allowed to, who we share it with, and the rights you have.

In plain English

We collect only the data needed to operate an introduction directory for technical services. Contact details you choose to publish on job postings are visible to verified paying technicians. We use cookieless, privacy-preserving first-party analytics and coordinate fuzzing to protect user locations. You retain all statutory data rights under UK and EU GDPR.

This is a summary for your convenience. The full text below is the legally binding document that applies.

This page is provided in English. The English version is the authoritative version.

Last updated: 17 August 2026

1. The data controller and how to contact them

The data controller for this website is Cloud 7 Trading - Alan Smith, trading as minijobs.support (“we”, “us”, “our”).

Sole Trader business address: 20/8 Oxgangs Crescent, Edinburgh, EH13 9HL, United Kingdom.

If you want to ask about your data, exercise any of the rights described below, or complain, write to our data protection contact at privacy [at] minijobs [dot] support or legal [at] minijobs [dot] support. minijobs.support maintains Suited Business Insurance (Policy No. 6734881825 / Suited ID: 22840468 via Suited Insure Ltd), providing £1,000,000 Public Liability and £100,000 Commercial Legal Expenses protection. All formal legal notices, regulatory claims, and statutory disputes are automatically escalated to our external legal defense team.

Our supervisory authority is the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom (ico.org.uk). You always have the right to complain to the ICO if you believe we have handled your data wrongly.

2. What this policy covers

This policy explains what personal data we collect when you use minijobs.support, why we collect it, who we share it with, how long we keep it, and the rights you have. It applies to the website at minijobs.support and to the accounts, job postings, subscriptions and emails that go with it.

3. The one thing you should know first

If you post a job, the contact details you put on the listing (or that you let us show) will be visible to paying technicians. That is how the service works. A technician reads your job, sees how to reach you, and gets in touch. We do not hide that, and we do not require a paid intermediary to forward the message. Please bear that in mind before you post an email address, a phone number, or a name.

4. What we collect

Account data. When you sign up as a customer or as a technician, we ask for your name, email address, password (stored as a one-way hash using industry-standard Argon2id/bcrypt algorithms, never in plain text), country, and a short description of what you do or what you need.

Job postings. Everything you write in a job listing, including the title, body, location, budget, and any contact details you choose to include. The contact details a customer chooses to publish are visible to paying technicians (see section 3).

Subscription and payment records. If you take a paid plan we keep a record of the plan, the amount paid, the date and the payment method identifier. We never see or store your full card number; that lives with our payment processor.

Server logs and security data. Our hosting and edge providers keep standard logs (IP address, request URL, user agent, response code) for a short period for security, fraud prevention and debugging.

First-party analytics. We use a small, cookieless analytics tool that does not set a cross-site identifier and does not build a profile of you outside this site. See our cookie policy.

What we do not collect. We do not buy marketing lists. We do not run third-party advertising trackers. We do not collect special-category data (health, ethnicity, religion, politics, sexual orientation, etc.) and we ask you not to put it in job postings.

5. Why we use it (our lawful basis under UK GDPR)

To run the service you signed up for (contract). Showing your account to you, displaying job postings to the people who should see them, processing your subscription, and sending you service emails (account, billing, security) all rely on the fact that you asked us to provide the service.

To keep the service secure and prevent fraud (legitimate interests). Server logs, rate limiting, abuse detection and account security are our legitimate interest, balanced against your right to privacy. We keep the data as short as we can.

For marketing emails (consent). We only send marketing emails if you have opted in. You can unsubscribe in one click from any of them, and we will stop.

To meet our legal duties (legal obligation). We keep accounting records for the period the tax law requires, even if you close your account.

6. Who we share it with (our processors)

We share data only with the people who help us run the service, and only the data they need to do their job. Today those are:

  • Cloudflare — content delivery network and security edge (United States and global edge nodes).
  • Contabo — hosting provider for our application and database (Germany).
  • Zoho Mail and ZeptoMail — our transactional and mailbox email providers (India / United States / European Union, depending on the route).
  • OpenFreeMap & OpenStreetMap — vector & raster map rendering for job and technician positions. Location search queries are proxied via our secure European server infrastructure to protect visitor IP addresses from external exposure. Map tiles are initialized dynamically. Public coordinates employ deterministic outcode sector fuzzing and random radius jitter (300m - 1,000m) so exact residential street addresses are never rendered publicly.
  • Umami Analytics — self-hosted, first-party, cookieless traffic analytics running on our secure European server infrastructure (analytics.minijobs.support). Processes zero persistent personal identifiers, sets no cookies, and hashes visitor IP addresses with a daily rotating salt.
  • Stripe and PayPal — our payment processors, used only when a paid plan is bought (United States and European Economic Area).

We do not sell your data, and we do not share it with advertising networks, data brokers or social media platforms.

7. International transfers

Some of our processors are based outside the United Kingdom. Where personal data leaves the UK, we rely on the safeguards the law allows: the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or a UK adequacy decision. A copy of the relevant safeguard is available on request.

8. How long we keep it

Account data. For as long as your account is open. If you close your account, we delete personal data within 30 days, except anything we are required to keep (see below).

Job postings. Live postings stay up until you take them down or they expire (we set a maximum lifetime of 90 days). After that, a stripped record (no contact details) is kept for one year for anti-fraud purposes, then deleted.

Subscription and payment records. We keep these for six years after the last transaction because HMRC requires it. This is a legal minimum and cannot be shortened even on request.

Server logs. Up to 30 days, then deleted on a rolling basis.

Backups. Encrypted backups are kept for up to 60 days. Restoring one of those backups is not a reason to keep your data longer than this policy says.

9. Your rights

Under the UK GDPR and the EU GDPR (where it applies to you), you can:

  • Access the personal data we hold about you.
  • Correct it if it is wrong.
  • Delete it (the “right to be forgotten”), subject to the legal minimums above.
  • Restrict or object to how we use it, including for direct marketing.
  • Move it to another service in a portable format (data portability).
  • Withdraw consent at any time, where consent was the basis for processing.
  • Complain to the ICO at any time. Their contact details are in section 1.

To exercise any of these rights, write to [email protected] or [email protected].Legal Defense & Dispute Notice: To protect against fraudulent data theft, formal communications regarding data rights or Subject Access Requests (SARs) must comply with our statutory identity verification protocol (UK GDPR Art. 12(6)). Unverified email requests will not be processed. Formal legal notices will be served directly to Suited Business Insurance Legal Defense Services.

Data privacy controls

Under the UK GDPR and the EU GDPR you can download a copy of the personal data we hold about you (Article 15) or ask us to erase your account (Article 17). Both work from this page.

The archive is a JSON file containing your profile, your job briefs and your inquiry history.

10. Children

minijobs.support is for adults. The service is not aimed at, and must not be used by, anyone under 18. Please do not create an account or post a job if you are under 18. If you are a parent or guardian and believe a child has given us their data, contact us and we will delete it.

11. How we tell you about changes

If we change this policy in a way that affects you, we will email account holders and post a notice on the website at least 14 days before the change takes effect. The “Last updated” date at the top of this page will also be changed. Smaller, non-material edits (typos, clarifications, formatting) will not trigger a notice.

12. Related documents