Shoutt International Ltd is committed to protecting your personal data. This policy explains what we collect, why, how we store it, and the rights you have under UK GDPR and the Data Protection Act 2018. It forms part of our Terms of Service.
Introduction
Shoutt International Ltd (Shoutt, we, our, us) is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use and store it, and what rights you have under UK GDPR and the Data Protection Act 2018. This Privacy Policy forms part of our Terms of Service. By using the Shoutt platform you accept both documents.
Who We Are
Shoutt International Ltd is the data controller for personal data processed through the Platform. Our registered address is 86-90 Paul Street, London, EC2A 4NE. Contact us at [email protected] for any data protection query.
What Data We Collect
When you create an account: your name, email address, and password (stored encrypted).
Information you provide to use the Platform's job search features, including:
- CV and work history
- Cover letters and application content generated or uploaded on the Platform
- Job preferences, target roles, salary expectations, and location
- LinkedIn profile URL and publicly available LinkedIn profile information
- Portfolio links and supporting materials
Shoutt creates and operates a unique Relay Address for each User. We collect and process:
- Emails sent through the Relay Address to employers and recruiters
- Emails received at the Relay Address from employers and recruiters
- Metadata associated with those emails (sender, recipient, timestamp, subject) This data is used solely to provide the Platform's application tracking and Placement detection functions. It is not used for advertising or sold to third parties.
Payment card details are collected when a User unlocks interview details for a role applied to via the Platform. Card details are captured solely as security for the Success Fee that will become payable if the User secures a Qualifying Role. No charge is made at the point of card capture. Card details are processed and stored by our payment provider, Stripe. Shoutt does not store full card numbers. The Success Fee will only be charged if the User lands a job through Shoutt. We retain transaction records and charge history for accounting and legal compliance purposes.
By using the Platform, you agree that Shoutt may monitor publicly available LinkedIn profile data (including job title and employer fields) to detect changes that may indicate a Placement. This monitoring is limited to Placement detection. It does not extend to other social activity.
We collect information about how you use the Platform, including pages visited, jobs viewed, and actions taken, to improve the service.
We retain communications between you and Shoutt support for service and troubleshooting purposes.
Legal Bases for Processing
We process your personal data on the following legal bases under UK GDPR:
- Contract performance (Article 6(1)(b)): processing necessary to provide the Platform services you have signed up for, including operating the Relay Address, tracking applications, and collecting the Success Fee.
- Legitimate interests (Article 6(1)(f)): monitoring LinkedIn and other public signals to detect Placements; fraud prevention; debt recovery where a Success Fee is unpaid. Our legitimate interests do not override your rights where those interests are outweighed by your interests or fundamental rights.
- Legal obligation (Article 6(1)(c)): retaining transaction and contract records as required by applicable law.
- Consent (Article 6(1)(a)): where we process data for purposes not covered above (for example, using application data to improve AI models), we will seek your explicit consent separately.
How We Use Your Data
Data Sharing
Data Retention
Automated Processing
International Transfers
Data is stored on Microsoft Azure infrastructure with locations in Europe and the United States. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms recognised under UK data protection law.
Security
We apply technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include encryption at rest and in transit, access controls, and regular security reviews. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and notify affected users without undue delay.
Cookies and Tracking
- Essential cookies: required for core functionality including login and session management.
- Analytics cookies: we use Google Analytics and Meta Pixel to understand usage patterns and improve the Platform. These tools may collect data about your activity across Shoutt and other sites.
- Preference cookies: to remember your settings and improve your experience.
Your Rights
Under UK GDPR you have the following rights:
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: request deletion of your data, subject to the retention provisions in clause 7.
- Restriction: ask us to restrict processing of your data in certain circumstances.
- Portability: receive your data in a structured, machine-readable format.
- Object: object to processing based on legitimate interests, including Placement detection monitoring. Note that objecting to Placement detection monitoring will affect our ability to provide the Platform's core service.
- Withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Third-Party Links
The Platform may contain links to third-party websites and job listings. These operate independently and Shoutt is not responsible for their privacy practices. Review their privacy policies before providing any personal data.
California Residents (CCPA)
Changes to This Policy
We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email at least 14 days before they take effect. The current version is always available on the Platform.
Contact
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, contact us at [email protected].
See also: Terms of Service