Privacy Policy

1Data Controller & Scope

This Privacy Policy explains how WorkGlobal (“we”, “us”, or “our”), a company of Resource Pool Group Ltd (registered in England & Wales, Company No. 16988514), collects, uses, protects, and discloses personal data when you use our website, web application, swipe-to-match portal, mobile apps, and associated sub-brand platforms including HireDesk, Bilocation, and Thrive.

Resource Pool Group Ltd is the data controller responsible for personal information collected through our services, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the EU GDPR (Regulation (EU) 2016/679), and relevant international privacy legislation.

2Information We Collect

We collect personal information directly from you, automatically through your interactions with our platform, and from verified third parties (such as partner certification bodies, background check agencies, or recruiting partners).

A. Information Provided by Candidates & Job Seekers

• Identity & Contact Details: Full name, email address, phone number, date of birth, nationality, country of residence, and government-issued identification (when required for visa pre-clearance).
• Professional & Career Profile: Curriculum Vitae (CV/resume), employment history, education, diplomas, language proficiencies, professional licensing/certifications, portfolio links, and salary expectations.
• Relocation & Mobility Readiness: Target destination countries, passport validity, visa history, eligibility criteria, and relocation readiness timeline.
• Matching Preferences: Swipe actions, saved positions, role preferences, work mode (remote, hybrid, on-site, or relocated), and pathway choices.
• Assessment Data: Language proficiency test scores, technical skill evaluations, video intro recordings, and training module completions (via Thrive).

B. Information Provided by Employers & Recruiters

• Corporate & Contact Info: Company name, registered address, billing contacts, hiring manager profiles, email addresses, and phone numbers.
• Role & Vacancy Postings: Job specifications, candidate criteria, compensation packages, visa sponsorship capabilities, and hiring timelines.
• Hiring Decisions: Match feedback, interview logs, offer letters, and onboarding milestone updates.

C. Automatically Collected Technical Data

• Device & Network Data: IP address, browser type and version, time zone setting, operating system, device model, and network provider.
• Platform Telemetry: Pages visited, dwell time, navigation paths, click-through rates, match swipe performance, and error logs.

3How We Use Your Data

We process your personal information strictly for the following operational and recruitment purposes:

4Legal Bases for Processing

Under GDPR and applicable data protection regulations, we rely on specific legal grounds to process your information:

• Performance of a Contract: Processing is required to deliver the core matching, recruitment, training, or employment services you requested.
• Explicit Consent: For specific activities such as sharing candidate contact details before a match, conducting voluntary video interviews, or processing sensitive relocation criteria.
• Legitimate Interests: To optimize matching algorithms, detect platform abuse, improve user interface experiences, and maintain service reliability.
• Legal Obligations: Compliance with immigration laws, labor regulations, right-to-work audits, tax reporting, and anti-fraud mandates.

5Algorithmic Matching & Artificial Intelligence

WorkGlobal utilizes intelligent recommendation algorithms to rank relevant positions for candidates and match qualified talent with employers.

Our algorithms evaluate structured criteria such as verified qualifications, language abilities, relocation readiness, and work preferences. We regularly audit our scoring algorithms to eliminate bias and ensure fair, equal opportunities for all candidates regardless of background.

6Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We share data only with verified parties essential for the international hiring pipeline:

• Prospective Employers & Sponsors: When you express interest or match with a role, your profile, CV, and verified skills are shared with the hiring company.
• Immigration & Visa Advisors: Registered immigration attorneys and mobility case managers working on your visa application.
• Training & Verification Partners: Accredited educational institutions, language testers, and identity verification providers.
• Infrastructure & Sub-Processors: Secure cloud infrastructure providers (e.g. AWS, Cloudflare), communication providers, and database services bound by strict Data Processing Agreements (DPAs).
• Legal & Regulatory Authorities: When strictly required by law, subpoena, or government right-to-work audit.

7International Data Transfers

Because WorkGlobal operates across 40+ countries, your personal data may be transferred to and processed in countries outside the UK and European Economic Area (EEA), including candidate origin countries and employer destination countries.

Whenever we transfer personal data internationally, we ensure adequate protections are in place by utilizing:

• UK International Data Transfer Agreements (IDTA) or UK Addendum to the EU SCCs;
• European Commission Standard Contractual Clauses (SCCs);
• Transfers to countries recognized as providing adequate data protection by the UK Information Commissioner’s Office (ICO) and the European Commission.

8Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was gathered, including matching, employment placement, legal compliance, and tax/statutory record-keeping:

• Active Candidate Profiles: Retained while your account is active or until you request deletion. Inactive accounts with no activity for 24 months are queued for automated anonymization.
• Placed Candidate Employment & Relocation Records: Retained for 6 years post-placement to comply with UK and international employment law.
• Server Logs & Telemetry: Retained for 90 days, then purged or aggregated into non-identifiable statistical reports.

9Your Privacy Rights

Depending on your jurisdiction (including UK GDPR and EU GDPR), you possess the following rights:

• Right of Access (SAR): Request a complete copy of all personal data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete information.
• Right to Erasure (“Right to be Forgotten”): Request the permanent deletion of your profile and documents, subject to mandatory statutory retention duties.
• Right to Restrict Processing: Request temporary pause on processing under certain conditions.
• Right to Data Portability: Receive your data in a structured, machine-readable format (JSON/CSV).
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time without affecting past lawful processing.

To exercise any of these rights, email us at info@workglobal.ai. We respond to all verified requests within 30 days free of charge.

10Data Security & Technical Safeguards

We implement state-of-the-art technical, cryptographic, and organizational security controls to protect your data against unauthorized access, loss, alteration, or disclosure:

• Encryption: TLS 1.3 encryption for all data in transit; AES-256 encryption for all sensitive files, credentials, and passport documents at rest.
• Access Controls: Role-based access control (RBAC), multi-factor authentication (MFA) required for internal staff, and strict least-privilege policies.
• Continuous Monitoring: Real-time intrusion detection, automated vulnerability scanning, and routine independent security audits.

11Cookies & Analytics

We use essential cookies to maintain session state, authenticate users, and remember your matching preferences. Optional analytical cookies help us evaluate platform usability and performance without storing intrusive third-party advertising trackers.

You can manage cookie settings directly in your web browser preferences or by contacting our support team.

12Contact Us & Data Protection Officer (DPO)

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our dedicated Data Protection Officer:

If you are located in the UK and feel that your request was not resolved satisfactorily, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.