Privacy Notice

Who is responsible?

UK AI Laboratories Ltd (company number 17568050, registered in England and Wales), trading as Kettle Jobs, is the data controller for the personal information described here.

Business correspondence address: 14 Arran Place, Worcester, WR5 3UL, United Kingdom.
Email: hello@kettlejobs.co.uk.

This notice covers our coming-soon website, related enquiries and the email subscription service described below. It does not cover CV uploads, recruitment accounts, applications or payments. We will update our privacy information before introducing those services.

Current availability

Website signup is currently closed. This website does not load the Brevo subscription forms while signup is disabled. The subscription sections below explain the policy that will apply when we open signup, after checking the forms and email settings.

What we collect

If you contact us, we receive your email address, message and any information you choose to include. Please do not send sensitive personal information unless we specifically explain why it is needed.

When subscriptions open, the forms collect your email address, your audience choice (job seeker or employer), and subscription, consent, confirmation and unsubscribe records. These may include timestamps, form identifiers and IP addresses recorded by the form service.

Website and security services process connection information such as IP address, requested page, access time, browser/user-agent information and error or security events. This supports delivery, fault investigation and protection against misuse.

Why we use information

• Email subscriptions — consent: job seekers can request launch announcements, job alerts and relevant job-seeker updates; employers can request launch announcements, hiring updates and information about Kettle's employer services.
• Enquiries — legitimate interests: responding to correspondence and managing business enquiries.
• Website delivery and security — legitimate interests: making the website available, resolving faults and preventing bots, fraud and misuse.
• Consent and suppression records — legitimate interests and applicable legal obligations: demonstrating subscription choices, handling complaints and preventing unwanted marketing.
• Rights requests and legal requirements — legal obligation: complying with applicable data-protection duties.

Subscription is voluntary. Without your email and consent, we cannot send subscription updates; you can still browse the website.

Consent and withdrawal

When signup opens, an unticked checkbox and a confirmation email will be used. Confirming your address completes double opt-in. We will not treat an unconfirmed signup as permission to send marketing.

Withdraw consent using the unsubscribe link in a marketing email or by contacting hello@kettlejobs.co.uk. Withdrawal does not affect earlier lawful processing.

You can object to direct marketing at any time. We do not sell subscription lists or give employers subscriber details for their own marketing.

Providers and access

Within Kettle Jobs, access is limited to Omar Kayani working from the UK. This does not restrict the separate processing locations of service providers.

• Fasthosts Internet Limited: the chosen website hosting and business email provider. Hosting and email services process connection logs and messages needed to provide their services. See the Fasthosts Privacy Notice and data processing agreement.
• Brevo: the chosen subscription and mailing provider. When enabled, it processes form submissions, subscription records and emails on our behalf. It also describes separate security and service-administration processing in its own privacy information. See Brevo's Privacy Policy and Terms of Service and DPA.
• Cloudflare, Inc.: Turnstile protects the Brevo forms against bots. Its technical signals include IP address, user-agent, TLS fingerprint, site key and origin. Cloudflare describes acting as a processor for site protection and as a controller for improving bot detection. See the Turnstile Privacy Addendum.

We may also disclose information where necessary to comply with law or establish, exercise or defend legal claims. Provider subcontractors may assist with infrastructure, delivery and support.

International processing

Kettle Jobs is operated from the UK. Brevo states that its database servers are in the EU, including France, Germany and Belgium. UK transfers to the EEA can rely on UK adequacy regulations.

EU database hosting does not establish EU-only processing by all supporting services. Fasthosts' DPA describes processing mainly in the UK or EU and permits other-country processing where necessary to provide a service, subject to transfer requirements.

Cloudflare is a US company with international infrastructure. Its published DPA provides for applicable Data Privacy Framework transfers and, for restricted UK transfers, standard contractual clauses amended by the UK Addendum. See Cloudflare's DPA.

Before opening subscriptions, we will verify the applicable Brevo contracting entity, subprocessors and transfer arrangements, and update this notice if they add relevant destinations or safeguards. You can request information about the safeguards relevant to your information at hello@kettlejobs.co.uk.

Retention policy

We apply the following rules to records under our control. Reviews and deletions are manual unless a verified provider feature automates them.

• Unconfirmed signups: reviewed weekly; deleted once 30 days old, so routine removal occurs no later than 37 days after signup.
• Confirmed subscribers: reviewed annually. Removed from active marketing after 24 months without a new subscription confirmation, reply or explicit preference update. Email opens are not used to measure activity. We review a launch list after 12 months if launch has not occurred.
• Consent evidence: kept while subscribed and for up to 24 months after withdrawal or removal to handle complaints and demonstrate the choices made. Any longer retention must relate to an identified legal dispute or legal duty and is reviewed annually.
• Suppression records: minimum email identifier, opt-out status and date retained while we operate email marketing, to prevent accidental re-contact. These records are not used for marketing.
• General enquiries: deleted 12 months after resolution unless they become part of a continuing business relationship, complaint or legal matter.
• Log copies we download: deleted within 30 days unless needed to investigate a specific incident; incident records are reviewed when the investigation ends.
• Provider-managed logs and backups: retained according to their operational, security and legal purposes and deletion cycles. We do not claim a fixed account-specific period that we cannot control. Information in backups is restricted to recovery and removed through the provider's normal overwrite/deletion process.

Cookies, external content and tracking

The supplied static coming-soon pages contain no analytics tracker, advertising pixel, first-party cookie-setting code or browser storage for subscriber emails. Fonts use the device's installed fonts; these pages make no Google Fonts requests.

While signup is closed, no Brevo iframe or Turnstile widget is loaded by these pages. If you separately visit a Brevo-hosted form, that service receives your connection information and its own form and security technologies operate there.

When signup is enabled, the embedded form will connect to Brevo and Cloudflare. Their technical processing must not be described as zero data collection or guaranteed cookie-free operation. Optional tracking will not be enabled without appropriate notice and any required consent. We will check the live forms before enabling embedding.

Our policy is not to use email-open tracking or optional click tracking in Kettle marketing. Confirmation, delivery-error and unsubscribe processing remain necessary to operate subscriptions. Actual email settings will be checked before sending.

You can manage cookies in your browser. Blocking security technologies may prevent a hosted form from working. You can contact us about subscription difficulties without consenting to marketing.

Your rights

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal information; object to processing based on legitimate interests; and withdraw consent. Conditions and exceptions may apply.

Email hello@kettlejobs.co.uk. We may request proportionate identity information before releasing or changing records. We will respond within the applicable statutory time limit and explain any lawful extension.

We do not make solely automated recruitment decisions using launch-list information. Automated bot checks help protect forms; contact us if they prevent a genuine request.

Complaints and changes

You can raise concerns with us at hello@kettlejobs.co.uk. You can also complain directly to the UK Information Commissioner's Office; contacting us first is not a condition.

We will update this notice when processing changes, including before opening subscription collection or introducing recruitment features. We will provide further notice or seek fresh consent where required.