Privacy Policy
How we protect your personal data
Last updated: 18 September 2025
1. Who We Are
ThamesAI.co.uk ("we", "us", "our") is operated by Croscom Software, a UK-based technology company. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact Details:
- Company: Croscom Software
- Email: privacy@thamesai.co.uk
- Address: London, United Kingdom
2. What Information We Collect
For Job Seekers:
- Name and email address
- Professional profile information
- CV/Resume files (when uploaded)
- Job application data
- Communication preferences
For Employers:
- Company name and contact details
- Job posting information
- Payment information (processed securely via Stripe)
- Communication with candidates
Technical Information:
- IP address and browser information
- Cookies and similar tracking technologies
- Usage analytics and site interaction data
3. How We Use Your Information
For Job Seekers:
- To create and manage your candidate profile
- To match you with relevant job opportunities
- To send job alerts and notifications
- To facilitate applications to employers
- To improve our AI matching algorithms
For Employers:
- To process and display job postings
- To facilitate candidate applications
- To process payments for premium services
- To provide analytics on job posting performance
- To offer AI-enhanced job descriptions
4. Legal Basis for Processing
We process your personal data based on:
- Consent: When you register and agree to our terms
- Contract: To provide our job board services
- Legitimate Interest: To improve our services and prevent fraud
- Legal Obligation: To comply with UK employment and tax laws
5. Data Sharing and Third Parties
We share data with:
- Employers: When you apply for jobs (with your consent)
- Stripe: For secure payment processing
- Email Service: For sending notifications and job alerts
- Analytics Providers: Anonymous usage data only
We never:
- Sell your personal data to third parties
- Share your CV without your explicit consent
- Use your data for marketing unrelated to job searching
6. Data Retention
- Candidate profiles: Until you delete your account or request removal
- Job applications: 2 years from application date
- Payment records: 7 years (UK tax requirements)
- Marketing emails: Until you unsubscribe
- Analytics data: 26 months (anonymized)
7. Your Rights Under UK GDPR
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate information
- Erasure: "Right to be forgotten" - delete your data
- Portability: Export your data in a readable format
- Object: Stop processing for marketing purposes
- Restrict: Limit how we process your data
To exercise these rights, email us at privacy@thamesai.co.uk
8. Data Security
We protect your data using:
- SSL encryption for all data transmission
- Secure database storage with regular backups
- Access controls and authentication
- Regular security audits and updates
- Staff training on data protection
9. International Data Transfers
Your data is primarily stored within the UK. If we transfer data outside the UK, we ensure adequate protection through:
- EU adequacy decisions
- Standard contractual clauses
- Certification schemes
10. Children's Privacy
Our service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any significant changes via email or through our website.
12. Contact Us
If you have questions about this privacy policy or our data practices:
- Email: privacy@thamesai.co.uk
- Post: Croscom Software, London, United Kingdom
13. Complaints
If you're not satisfied with our response to any data protection concerns, you can contact the UK Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
🔒 Your Data, Your Rights
We believe in transparent data practices. Your personal information is yours, and we're just the custodians. Contact us anytime to exercise your rights or ask questions about your data.