Privacy Policy

JobMatch Limited ("JobMatch", "we", "us", "our") is the data user responsible for the personal data you provide to, or which is collected by, this platform. We operate the online job board and recruitment services accessible at jobmatch.hk and related subdomains (collectively, the "Platform").

Registered office: Hong Kong. Data Protection Officer contact: privacy@jobmatch.hk.

We collect only data that is necessary for the purposes stated below. The categories of personal data we may collect include:

2.1 Job Seekers

• Identity: full name, date of birth (optional), gender (optional)
• Contact: email address, phone number, residential district in Hong Kong
• Professional: CV / résumé, work history, education, skills, languages, professional certifications, salary expectations
• Account credentials: email address and hashed password, or OAuth tokens
• Application data: cover letters, responses to employer questions, interview notes
• Profile visibility settings and job-alert preferences

2.2 Employers & Recruiters

• Identity & contact: contact person name, job title, work email, phone number
• Company information: registered company name, business registration number (optional), company address, company description, logo, and cover image
• Billing: payment card details (processed by our PCI-DSS-compliant payment provider; we do not store full card numbers)
• Job postings and application-management activity

2.3 Usage & Technical Data

• Log data: IP address, browser type, operating system, referring URLs, pages visited, time and date of visits
• Cookies and similar technologies — see our Cookie Policy for full details
• Device identifiers for security and fraud-prevention purposes

We do not intentionally collect sensitive personal data (e.g., racial or ethnic origin, political opinions, religious beliefs, health data, trade-union membership) unless you voluntarily include such information in your CV or profile. We recommend you omit sensitive information that is not relevant to your job search.

Children: The Platform is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we hold data about a minor, please contact us immediately.

We collect and use your personal data for the following purposes:

We will not use your personal data for a new purpose without first notifying you and, where required by the PDPO, obtaining your consent.

We do not sell your personal data. We may share it with the following parties, but only to the extent necessary for the purposes described above:

• Employers / Recruiters — your job-seeker profile and application materials are disclosed to the specific employer(s) you apply to. Your profile is only visible to employers if you set it to "searchable".
• Service providers — cloud hosting, email delivery, payment processing, analytics, and customer-support tools. All processors are contractually bound to process data only on our instructions and in accordance with the PDPO.
• Legal & regulatory authorities — where disclosure is required by Hong Kong law, court order, or to protect the rights and safety of JobMatch or others.
• Business transfers — in connection with a merger, acquisition, or sale of all or part of our assets, your data may transfer to the acquiring entity, who will be bound by equivalent privacy obligations.

Some of our service providers operate outside Hong Kong (e.g., cloud infrastructure providers in the United States or European Union). Where personal data is transferred outside Hong Kong, we take steps to ensure the recipient provides a level of protection at least comparable to the PDPO, including through contractual safeguards or relying on jurisdictions recognised as providing adequate protection.

We retain personal data only for as long as necessary for the purpose for which it was collected or as required by law:

• Active accounts: retained for the duration of the account plus 7 years to meet Hong Kong statutory limitation periods.
• Closed accounts: core identity and transaction records are retained for 7 years from closure; other profile data is deleted within 90 days of closure.
• Job applications: retained for 2 years from the application date, or longer if required by the employer's own obligations.
• Server logs: retained for up to 12 months for security purposes.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• TLS encryption for all data in transit
• Encryption at rest for sensitive data fields (e.g., credentials)
• Role-based access controls limiting staff access to personal data
• Regular security reviews and vulnerability assessments

No method of transmission over the internet is 100% secure. If you suspect a security breach involving your personal data, please contact us immediately at privacy@jobmatch.hk.

Under the PDPO you have the right to:

• Access — request a copy of the personal data we hold about you (a Data Access Request, or "DAR"). We will respond within 40 days as required by the Ordinance. A reasonable fee may be charged.
• Correction — request that inaccurate personal data be corrected. Many data fields can be updated directly in your account settings.
• Opt-out of direct marketing — you may withdraw consent to receive marketing communications at any time by clicking "unsubscribe" in any marketing email or adjusting notification settings in your account.
• Deletion — request deletion of your account and personal data, subject to our legal retention obligations above.

To exercise these rights, submit a written request to our Data Protection Officer:

If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner for Personal Data (PCPD) of Hong Kong at www.pcpd.org.hk.

We use cookies, pixels, and similar technologies to operate the Platform and understand how it is used. Please see our Cookie Policy for a detailed breakdown of the cookies we set, their purposes, and how to control them.

The Platform may contain links to third-party websites (e.g., employer websites). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing personal data.

We may update this Privacy Policy from time to time. Material changes will be notified by a prominent notice on the Platform or by email to registered users at least 14 days before the change takes effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

This Privacy Policy is governed by and construed in accordance with the laws of the Hong Kong Special Administrative Region. Any disputes arising in connection with it shall be subject to the exclusive jurisdiction of the courts of Hong Kong.