Privacy Policy

1. Data Controller

Fashion Workplace is the data controller responsible for the personal data described in this policy. We are based in the Netherlands and process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch law.

For any privacy-related questions or requests, you can reach us at privacy@fashionworkplace.com.

2. What Personal Data We Collect

We collect the minimum personal data necessary to operate Fashion Workplace. Depending on how you use the platform, this may include:

Account holders (job seekers and employers)

When you create an account, we collect your email address and name. These are used solely to manage your account and, if you are an employer, to administer the job postings you purchase. We do not collect biographical information, CV data, or other profile content beyond what you choose to provide.

Job alert subscribers

If you subscribe to job alerts without creating a full account, we collect your email address and the alert preferences you configure. This data is collected on the basis of your consent and is used only to send you relevant job alert emails.

Authentication and security

When you log in, we store a session token in a strictly necessary cookie to keep you authenticated. We also process IP addresses for fraud prevention and to protect the integrity of the platform. We do not log or store IP addresses beyond what is required for security purposes.

Payment information

If you purchase a job posting, payment processing is handled entirely by Stripe. Fashion Workplace does not store your card details. We receive a confirmation from Stripe that a payment was made, along with the amount and a transaction reference, which we retain for accounting purposes.

3. Legal Basis for Processing

We rely on the following legal bases under GDPR Article 6:

Contract performance (Article 6(1)(b))

Processing your account data (name and email) is necessary to provide the service you signed up for, whether that is browsing job listings as a registered user or posting jobs as an employer.

Legitimate interest (Article 6(1)(f))

We process IP addresses and session data for security purposes, including fraud prevention and protecting our platform from abuse. This is a legitimate interest we pursue in a way that is proportionate and does not override your fundamental rights.

Consent (Article 6(1)(a))

If you subscribe to job alerts, we process your email address on the basis of your explicit consent. You can withdraw this consent at any time by clicking the unsubscribe link in any job alert email.

4. Cookies

Fashion Workplace uses only strictly necessary cookies. We set a single session cookie when you log in, which is required to keep you authenticated as you navigate the site. This cookie contains no tracking information and is deleted when your session ends or when you log out.

Because we use only strictly necessary cookies, we are not required to display a cookie consent banner and we do not do so. We do not use advertising cookies, analytics cookies, or any third-party tracking cookies.

5. Analytics

We use visitors.now for website analytics. This service is cookieless and does not collect or transfer personal data. It measures aggregate traffic patterns (such as which pages are visited and how many people visit) without identifying individual visitors. No data is shared with third parties through this service.

6. Data Processors and Sub-Processors

We work with the following third-party service providers who process data on our behalf. Each has been selected with data protection in mind.

Vercel Inc. (hosting and content delivery)

Our platform is hosted on Vercel's infrastructure. Vercel is based in the United States. The transfer of personal data to the US is covered by Standard Contractual Clauses (SCCs) as approved by the European Commission. Vercel processes data only to the extent necessary to serve the platform.

Neon Inc. (database)

Our PostgreSQL database runs on Neon, hosted on AWS in the eu-west-1 (Ireland) region. Personal data stored in our database therefore remains within the European Economic Area.

Stripe Inc. (payments)

Job posting purchases are processed by Stripe, which is based in the United States. Data transfers to Stripe are covered by Standard Contractual Clauses. Stripe acts as a data controller for payment data in its own right and has its own privacy policy.

visitors.now (analytics)

As described above, visitors.now is our cookieless analytics provider. It does not receive personal data.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data is removed from our systems within 30 days, except where we are required to retain certain records for legal or accounting purposes (for example, payment records which may be kept for up to seven years under Dutch tax law).

Job alert subscriptions are retained until you unsubscribe. If a job alert email address bounces repeatedly, we will remove it from our mailing list.

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights. You can exercise any of these by contacting us at privacy@fashionworkplace.com.

Right of access (Article 15)

You have the right to request a copy of the personal data we hold about you and information about how we use it.

Right to rectification (Article 16)

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it.

Right to erasure (Article 17)

You have the right to request that we delete your personal data in certain circumstances, for example if the data is no longer necessary for the purpose for which it was collected.

Right to restriction of processing (Article 18)

In certain circumstances, you have the right to ask us to restrict how we process your personal data, for example while a dispute about the accuracy of your data is being resolved.

Right to data portability (Article 20)

Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

Right to object (Article 21)

Where we process your personal data on the basis of legitimate interests, you have the right to object. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to lodge a complaint

You have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (AP), if you believe we are not handling your personal data in accordance with GDPR. The AP can be reached at autoriteitpersoonsgegevens.nl.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our database is hosted in the EU, access is restricted to authorised personnel, and all data is transmitted over HTTPS.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact

For any questions about this Privacy Policy or how we handle your personal data, please contact us at privacy@fashionworkplace.com.