Privacy Policy
Last updated: 22 April 2026
1. Who We Are
KaarKoo (kaarkoo.co.uk) is operated by Peyvand Ltd, a company registered in England and Wales, trading as KaarKoo. Peyvand Ltd is the data controller for the personal information processed through this service.
Data protection contact: contact@kaarkoo.com
2. What Data We Collect
When you post a job or seeker profile:
- Name (employer name or full name)
- City (selected from a fixed list)
- Phone number (optional)
- Telegram handle (optional)
- Instagram handle (optional)
- Email address (optional)
- Job title, description, and category
When you create an account:
- Email address or phone number
- Password (stored as a secure hash — never in plaintext)
When you verify your contact details:
A one-time verification code (OTP) is sent to your phone or email. We store only a cryptographic hash (HMAC-SHA256) of this code — the original code itself is never stored.
Automatically collected:
If you accept cookies, we collect anonymised usage statistics via Google Analytics: pages visited, session duration, device type, and browser. We do not log IP addresses or build individual user profiles.
3. Legal Basis for Processing (UK GDPR)
| Purpose | Legal Basis (Article 6 UK GDPR) |
|---|---|
| Displaying your listing on KaarKoo | Legitimate interests |
| Contact verification (phone OTP or email link) | Legitimate interests / contract performance |
| Creating and managing your account | Contract performance |
| Sending approval or rejection notifications | Legitimate interests |
| Anonymised analytics (Google Analytics) | Legitimate interests, with consent for cookies |
4. How Long We Keep Your Data
| Data | Retention Period |
|---|---|
| Active job or seeker listings | Until you delete them or we remove them |
| Deleted listings | Permanently deleted immediately |
| Verification tokens (OTPs) | 10 minutes, then deleted automatically |
| Account data | Until you request account deletion |
| Analytics data | Up to 14 months (Google's standard retention) |
5. Who We Share Data With
We use the following third-party processors. Each is bound by a data processing agreement, and international transfers are governed by Standard Contractual Clauses (SCCs) where applicable.
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database hosting | EU (AWS) |
| Vercel | Website hosting and CDN | USA (SCCs) |
| Twilio | SMS for phone verification and login OTPs | USA (SCCs) |
| Resend | Transactional email notifications | USA (SCCs) |
| Google Analytics | Anonymised usage statistics | USA (SCCs) |
We do not sell, rent, or trade your personal data to any third party.
6. Cookies
| Cookie | Purpose | Duration |
|---|---|---|
| Supabase auth token | Keeps you signed in to your account | Session / up to 1 week |
| _ga, _gid (Google Analytics) | Anonymised usage statistics | Up to 2 years / 24 hours |
| Cookie consent | Remembers your cookie preference | 1 year |
Google Analytics cookies are only set if you accept cookies via the banner shown on your first visit. You can withdraw consent at any time by clearing your browser cookies and declining when the banner reappears.
7. Your Rights Under UK GDPR
Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the following rights:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — ask us to correct inaccurate or incomplete data
- Right to erasure — ask us to delete your personal data (“right to be forgotten”)
- Right to restriction — ask us to limit how we process your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing carried out on the basis of legitimate interests
- Right to withdraw consent — withdraw consent at any time for any processing based on consent
To exercise any of these rights, contact us at contact@kaarkoo.com. We will respond within one calendar month.
8. Complaints
If you are dissatisfied with how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We ask that you contact us first before raising a complaint with the ICO, so we have the opportunity to resolve your concern directly.
9. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or applicable law. The “last updated” date at the top of this page will always reflect the most current version.
10. Contact
For any privacy-related enquiries: contact@kaarkoo.com