Privacy Policy

Last updated: 16 July 2026 • Job Bookers, Norfolk, United Kingdom

This Privacy Policy explains how Job Bookers ("we", "us", "our") collects, uses, and protects personal data in connection with the Job Bookers Routing API ("the Service"). We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The data controller is Job Bookers, Norfolk, United Kingdom. Contact: hello@jobbookers.co.uk.

1. What Data We Collect

1.1 Subscriber data (customers)

When you subscribe to the Service via Stripe, we receive:

Data	Source	Purpose
Email address	Stripe checkout	Issue and communicate your API key; billing correspondence
Payment information	Stripe (we never see card details)	Process subscription payments
Stripe customer ID	Stripe	Link your subscription to your API key
API usage counts	Our servers	Enforce monthly call limits and monitor service use

1.2 API usage data

When you make calls to the API, we log:

• The API key used (to authenticate and count usage)
• The number of calls made (not the specific postcode queries)
• Timestamps of API calls for rate limiting purposes

We do not log or retain the specific postcode pairs or coordinates you query. Query data is processed transiently and not stored.

1.3 Website visitors

Our website (api.jobbookers.co.uk) does not use cookies, tracking pixels, or analytics software. We do not collect personal data from visitors who do not subscribe.

2. Legal Basis for Processing

Processing activity	Legal basis
Issuing and managing your API key	Contract (performance of the subscription agreement)
Processing payment via Stripe	Contract
Sending transactional emails (key issuance, billing alerts)	Contract
Enforcing monthly call limits	Contract and legitimate interests
Preventing abuse of the Service	Legitimate interests

3. How We Use Your Data

We use your data only for:

• Provisioning and managing your API access
• Sending transactional emails about your subscription (key issuance, payment failures, cancellation confirmation)
• Enforcing the terms of your subscription (call limits, acceptable use)
• Responding to support requests

We do not use your data for marketing, profiling, or any purpose unrelated to providing the Service.

4. Data Sharing

We share your data with the following third parties only to the extent necessary to provide the Service:

Third party	Purpose	Location
Stripe	Payment processing and subscription management	USA (Standard Contractual Clauses apply)
Supabase	Secure storage of API keys and usage data	EU
Hostinger	VPS hosting for API infrastructure	EU
Hostinger Email	Transactional email delivery	EU

We do not sell your personal data to any third party.

5. Data Retention

• Subscriber email and API key: Retained for the duration of your subscription and deleted within 90 days of cancellation, unless required to be retained for legal or financial record-keeping purposes (typically 6 years under UK law)
• API usage counts: Retained for 13 months to allow year-on-year comparison and then deleted
• Stripe records: Managed by Stripe under their own retention policy; we cannot delete Stripe's records

6. Your Rights

Under UK GDPR you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct inaccurate data
• Erasure: Ask us to delete your data (subject to legal retention obligations)
• Restriction: Ask us to stop processing your data in certain circumstances
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests

To exercise any of these rights, email hello@jobbookers.co.uk and we will respond within 30 days. You also have the right to raise a concern with the UK data protection regulator at ico.org.uk.

7. Security

We take reasonable technical and organisational measures to protect your personal data, including:

• All data in transit encrypted via TLS/HTTPS
• API keys stored in encrypted database with restricted access
• VPS access restricted to SSH key authentication only
• No personal data stored in plaintext configuration files

No method of transmission or storage is completely secure. If you believe your data has been compromised, contact us immediately at hello@jobbookers.co.uk.

8. Cookies

This website does not use cookies of any kind. No consent banner is required.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email to active subscribers. The date at the top of this page shows when it was last updated.

10. Contact

For any privacy-related queries or to exercise your rights, contact us at hello@jobbookers.co.uk.