Privacy Policy

1. Introduction

Welcome to Mapplicant, a product of ZDTech Group Ltd ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Platform"). This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The data controller responsible for your personal information is:

3. Information We Collect

3.1 Personal Information You Provide

We collect personal information that you voluntarily provide when you register and use the Platform:

• Account Information: Name, email address, password
• Contact Information: Phone number, WhatsApp number (Pro Seeker subscribers only)
• Professional Information: CV/resume, education history, work experience, skills, job preferences
• Location Data: Current location, search location preferences, job location searches
• Profile Content: Profile photos, avatars, biographical information
• Business Information: For Business Pro users - company name, business details, job postings
• Communication Data: Messages between employers and candidates, application data

3.2 Automatically Collected Information

When you use our Platform, we automatically collect certain information:

• Device Information: Device type, operating system, unique device identifiers, mobile network information
• Usage Data: App features used, pages viewed, time spent on Platform, search queries, clicks, and interactions
• Location Data: Precise geolocation when you use location-based features (with your permission)
• Log Data: IP address, browser type, access times, referring URLs

3.3 Information from Third Parties

We collect job listing data from third-party job boards and aggregators to display opportunities on our Platform. This data may include job titles, descriptions, company names, locations, and application instructions. We do not control the accuracy or content of third-party job listings.

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our services and fulfill our Terms & Conditions
• Consent: Where you have given explicit consent (e.g., location tracking, marketing communications)
• Legitimate Interests: For improving our services, security, fraud prevention, and analytics
• Legal Obligations: To comply with legal requirements and respond to lawful requests

5. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Platform services
• Create and manage user accounts
• Process and manage subscriptions (Pro Seeker and Business Pro)
• Display job opportunities on the map based on location and preferences
• Connect job seekers with employers and facilitate applications
• Enable direct communication between employers and candidates
• Send notifications about job matches, applications, and account activity
• Send transactional emails related to your account and services
• Analyze usage patterns and user behavior to improve the Platform
• Provide customer support and respond to inquiries
• Prevent fraud, abuse, and ensure Platform security
• Comply with legal obligations and enforce our Terms

6. Third-Party Services and Data Sharing

We use the following third-party services to operate our Platform:

• Firebase (Google): Authentication, cloud storage (Firestore), and hosting services
• Google Cloud Platform: Cloud Run for backend services, data storage and processing
• Google Maps API: Map display and location-based features
• Google Geocoding API: Converting addresses to coordinates
• Mailjet: Transactional email delivery
• Job Aggregators: Third-party job boards (including Careerjet) for job listing data
• Apple App Store / Google Play Store: Payment processing and subscription management

6.1 Information Sharing Circumstances

We may share your information in the following circumstances:

• With Employers: When you apply to jobs, employers can view your profile information. Pro Seeker subscribers have enhanced profile visibility to employers.
• With Service Providers: We share information with third-party service providers who assist in operating our Platform (as listed above)
• For Legal Purposes: When required by law, legal process, or to protect our rights, property, and safety
• Business Transfers: In connection with any merger, sale, acquisition, or transfer of our company or assets
• With Your Consent: When you explicitly consent to sharing with specific third parties

7. Data Storage and International Transfers

Your personal data is stored on Google Cloud Platform (Firebase Firestore) in the default Firebase location, which may be in the United States or other regions. When we transfer your data outside the UK or EEA, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office
• Adequacy decisions for countries with appropriate data protection laws
• Relying on service providers with certified compliance (e.g., Google's EU-U.S. Data Privacy Framework)

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Your data is retained while your account remains active
• Deleted Accounts: Upon account deletion, your personal data is permanently deleted within 30 days, except where we must retain data for legal obligations
• Job Applications: Application data is retained for 12 months or until you delete it
• Job Listings: Expired job listings are retained for 90 days for analytical purposes
• Transaction Records: Subscription and payment records are retained for 7 years for tax and accounting purposes
• Support Communications: Customer support records are retained for 3 years

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of data at rest in Firebase Firestore
• Secure authentication mechanisms through Firebase Authentication
• Regular security assessments and updates
• Access controls and authentication for our team members
• Monitoring for suspicious activities and unauthorized access

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

10. Your Rights Under UK GDPR

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your data in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with the UK Information Commissioner's Office (ICO)

10.1 Exercising Your Rights

To exercise any of these rights:

• Access and manage your data through the Mapplicant app or at https://mapplicant.com/account
• Contact us at contact@zdtech.co.uk with your request
• We will respond to your request within 30 days

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website to:

• Maintain your session and keep you logged in
• Remember your preferences and settings
• Analyze how you use our Platform
• Improve Platform performance and user experience

You can control cookies through your browser settings. Note that disabling cookies may affect your ability to use certain features of the Platform.

12. Children's Privacy

Our Platform is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us at contact@zdtech.co.uk, and we will take steps to delete such information.

13. Marketing Communications

We may send you promotional emails about new features, special offers, or other information we think you may find interesting. You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or by adjusting your account settings. Please note that you cannot opt out of transactional emails related to your account and services.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also send you a notification via email or through the Platform. Your continued use of the Platform after changes become effective constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your data, please contact us at:

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at https://ico.org.uk or by calling 0303 123 1113.