Impjieg — Find your next opportunity

Privacy Policy

Last updated: May 2026

Impjieg ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and the Maltese Data Protection Act (Chapter 586 of the Laws of Malta).

1. Data Controller

The data controller responsible for your personal data is Impjieg. You can contact us at hello@impjieg.com.

2. Information We Collect

We collect the following categories of personal data:

  • Account data: Name, email address, password (hashed), company name, and company details when you create an account.
  • Profile data: CV/resume, cover letter, skills, work history, and preferences when you apply for jobs or create a candidate profile.
  • Job listing data: Job descriptions, salary ranges, company information, and employer contact details.
  • Payment data: Billing information processed securely through Stripe. We do not store full credit card numbers.
  • Usage data: IP address, browser type, device information, pages visited, and interaction data collected via cookies and similar technologies (only with your explicit consent).
  • Communication data: Messages, support requests, and email correspondence.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract performance: To provide our services, process job applications, and manage employer listings.
  • Legitimate interests: To improve our platform, prevent fraud, and ensure security.
  • Consent: For marketing communications, analytics cookies, and any optional features you opt into.
  • Legal obligation: To comply with applicable laws, including tax and employment regulations in Malta and the EU.

4. How We Use Your Information

We use your data for the following purposes:

  • Creating and managing your account
  • Processing job applications and connecting candidates with employers
  • Publishing and managing job listings
  • Processing payments through Stripe
  • Sending job alerts and notifications (with your consent)
  • Improving our services and user experience
  • Complying with legal obligations
  • Detecting and preventing fraud

5. Data Sharing and Third Parties

We do not sell your personal information. We may share data with the following categories of recipients:

  • Supabase: Database hosting and authentication (EU-hosted, GDPR-compliant).
  • Stripe: Payment processing (PCI DSS compliant).
  • Resend: Email delivery service.
  • Anthropic (Claude): AI-powered job description generation (data is not used for model training).
  • Vercel: Application hosting (GDPR-compliant).

All third-party processors are bound by Data Processing Agreements (DPAs) and are required to process data only for the purposes specified by us.

6. Data Retention

We retain your personal data for the following periods:

  • Account data: Retained until you delete your account or request erasure.
  • Job listings: Retained for 30 days after listing expiry, then anonymised.
  • Application data: Retained for 12 months after the application date, unless the candidate requests earlier deletion.
  • Payment records: Retained for 7 years as required by Maltese tax law.
  • Analytics data: Retained for 26 months, then automatically deleted.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access: Request a copy of your personal data.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of your personal data ("right to be forgotten").
  • Right to restrict processing: Request that we limit how we use your data.
  • Right to data portability: Receive your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interests or direct marketing.
  • Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at hello@impjieg.com. We will respond within 30 days.

8. Cookies

We use cookies and similar technologies on our platform. Essential cookies are required for the site to function. Analytics and marketing cookies are only placed with your explicit consent. You can manage your cookie preferences at any time using our cookie consent banner or by visiting our Cookie Preferences page.

9. International Data Transfers

Your data is primarily hosted within the European Union (EU). If any data is transferred outside the EU, we ensure appropriate safeguards are in place through Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption, access controls, and regular security assessments.

11. Supervisory Authority

You have the right to lodge a complaint with the Maltese Information and Data Protection Commissioner (IDPC) at idpc.org.mt if you believe your data protection rights have been violated.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our platform. Continued use of our services after changes constitutes acceptance of the updated policy.