Data Protection

This page sets out the data-protection detail behind our Privacy Policy — our lawful bases for processing, how long we keep information, how we protect it, and how to raise a concern.

Our role

Career in Energy acts as the data controller for the personal data candidates and employer contacts give us directly through careerinenergy.com and the CIE app.

Lawful basis for processing

• Performance of a contract— creating and running your candidate profile, matching you to roles, and submitting your profile to a client once you've applied and a recruiter has reviewed it.
• Legitimate interests — using an AI model to help a recruiter assess fit faster, always with a human reviewing before any decision; keeping the service secure; improving how we match candidates to roles.
• Consent — where a paid service (CV Audit) asks for explicit consent to store and process your CV for that purpose.
• Legal obligation— where we're required to keep or disclose information by law.

Special category data

We don't ask for or intentionally collect special category data (health, religion, ethnicity, and similar). If a CV you upload happens to mention something of this kind, we only use it to the extent necessary to assess your application, and never for any other purpose.

How long we keep information

• Active account — kept for as long as your account is active, so your profile and application history remain usable.
• Deactivated account — your profile and records are retained (not erased) so we can still act on applications already in progress, but your login is blocked.
• Erasure on request — email hello@careerinenergy.com and we'll permanently delete your data, except where we're required to keep something by law.

International transfers

We recruit across West Africa, Guyana & Suriname, Southeast Asia, the Middle East, and the Caribbean. Submitting your profile to a client in one of these regions, where you've applied for a role there, necessarily involves transferring your data outside the UK/EEA to deliver that part of the service. Our core infrastructure (database, file storage) is hosted in the EU; where we use providers based elsewhere (e.g. our AI and payment providers), we rely on those providers' own data-protection safeguards and only send the minimum data needed for the purpose.

Security measures

• Row-level database access controls, so a candidate's account can only read and write their own data.
• Password storage handled by our authentication provider, never stored in plain text by us.
• Admin access to candidate data is restricted to a named allowlist and audited.
• Data in transit is encrypted (HTTPS) throughout the site and app.

Your rights

Under data-protection law, you have the right to:

• Ask what personal data we hold about you and get a copy of it.
• Have inaccurate data corrected — most of this you can do yourself at your profile.
• Ask us to erase your data, or restrict how we use it.
• Object to processing based on legitimate interests.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, where we rely on consent.

To exercise any of these, email hello@careerinenergy.com. If you're not satisfied with how we've handled your data, you also have the right to lodge a complaint with your local data-protection supervisory authority.

Contact

Data-protection questions: hello@careerinenergy.com.