Joblar🇮🇪
Your Data, Protected

Privacy Policy

Last updated: 25 October 2026

EU-Hosted

Secure cloud infrastructure within the European Union

Best Practices

Following cloud security best practices

Data Protected

Passwords, emails & PII fully safeguarded

1. Introduction

Joblar Limited ("Joblar", "we", "us", "our") is a private limited company registered in Ireland (CRO no. 785821), with its registered office at 76 Bushy Park House, Terenure, Dublin 6W, D6W TX34, Ireland. Joblar Limited is the data controller for personal data processed on the Joblar platform at joblar.com and its subdomains, which connects construction professionals with companies across Ireland.

This Privacy Policy describes what information we collect, why we collect it, the legal bases we rely on, how we protect it, and your rights regarding your data.

2. Information We Collect

Account Information

  • Full name, email address, and phone number
  • Account type (professional or company)
  • Password (stored using secure one-way hashing — never in plain text)

Authentication Data

  • Professional accounts sign in with a mobile number and password. When you create your account or reset your password, a one-time verification code is sent to your mobile number. Your number is processed by our verification messaging platform solely to deliver that code and verify that you control the number — nothing more. We do not use this channel for marketing or notifications. The platform processes this data as a processor under its own data processing terms. Company accounts sign in with an email address and password, optionally protected by an authenticator app.

Professional Profiles

  • Profession, skills, and years of experience
  • Availability, preferred locations, and hourly rate
  • Certifications (Safe Pass, CSCS, etc.) — including uploaded certificate images
  • CV / resume uploads
  • Identity documents (e.g. passport or driving licence), where requested for verification — see Section 3

Certification Documents

  • Workers upload images of trade certifications for verification. These images are reviewed by Joblar staff only and are not shared with companies. Companies see only the verified status of a certification, not the underlying document.

Company Profiles

  • Company name, registration number, and contact details
  • Job listings including role, location, rate, and requirements
  • Company verification signals: your company name, CRO number (if given), the domain of your email address and the public content of your company website — see Section 11

Payment Information

  • Company subscription payments are processed by our PCI-compliant payment processing provider.
  • Joblar does not store, process, or have access to your full card number, CVV, or bank details — these are handled entirely by the payment processing provider.
  • We may store a payment provider customer reference, subscription status, and the last four digits of your card for display purposes only.

Notifications & Preferences

  • In-app notifications about your account, certifications, support requests, professional interest, mutual matches and the status of roles you have shown interest in
  • Your communication preferences (which optional messages you have asked for, and when you changed them), kept as a consent record
  • If you enable notifications in the Joblar mobile app, the device token Apple or Google issues so we can deliver them — removed when you sign out of the app

Automated Processing

  • Joblar uses a rules-based matching algorithm to assess suitability between professional workers and job opportunities (profession, experience, certifications, job requirements, location and availability). AI does not calculate candidate match scores or make recruitment decisions — see Section 11
  • Certification verification is performed by human reviewers — AI is not used to validate the authenticity of certifications
  • Company verification is decided by authorised Joblar administrators, supported by AI-assisted review of company information and publicly available website content — see Section 11

Usage Data

  • Device type, browser, and IP address (for security and analytics)
  • Pages visited and features used within the platform

3. Verification of Users

Joblar is intended exclusively for construction companies hiring directly for their own projects and for individual construction professionals. To keep the platform genuine and safe, we verify both types of users.

Company verification. We may verify that a registering company is a legitimate, directly-hiring construction business and not a recruitment agency or intermediary. To do this we may process: the company registration (CRO) number you provide, your business email domain and website, and publicly available information such as Companies Registration Office records, the employment agency licence register, and your public web presence. This processing is carried out under our legitimate interest in keeping the platform limited to its intended users and preventing misuse.

Professional verification. We may verify the identity, certifications, and work eligibility of professionals. This can include reviewing uploaded certification documents and, where needed, requesting additional identification documents. Verification documents are reviewed by Joblar staff only, stored securely, and never shared with companies — companies see only a verification status.

Contact for verification & service messages. We respect your contact consent. By registering, you agree that we may contact you using the contact methods you have provided (such as phone, messaging, or email) or through the platform itself to: verify your information or certifications, request clarification or additional documents, and share important service announcements (such as updates to these terms or this policy). We may also occasionally invite your feedback on the service. These contacts exist to keep the platform secure, verified, and valid — they are never marketing.

Accounts that cannot be verified, or that are found to belong to recruitment agencies or other intermediaries, may be rejected, suspended, or deleted as set out in our Terms of Service.

4. How We Protect Your Data

We take data security seriously. Joblar is built on secure cloud infrastructure within the European Union, following best practices designed for security and privacy to safeguard your information.

Secure Infrastructure

Our platform is hosted on enterprise-grade cloud services within the European Union, with built-in security controls, redundancy, and compliance certifications. All infrastructure follows cloud security best practices.

Data Protection in Transit

All data transmitted between your device and our servers is protected using TLS 1.2+ (HTTPS). No data is ever sent unprotected.

Password Protection

Passwords are hashed using strong one-way cryptographic algorithms. We can never view or access your actual password.

Secure File Storage

Uploaded certifications, CV documents, and images are stored in private, secure cloud storage within the European Union. Access is controlled via time-limited signed URLs — files are never publicly accessible.

Personal Data Protection

All personally identifiable information (PII) including email addresses, phone numbers, and personal details is encrypted at rest and in transit, following cloud security best practices. Passwords are one-way hashed and can never be viewed by anyone, including us.

Access Controls

Database and infrastructure access is restricted to authorised application services only. We follow the principle of least privilege for all access.

Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Commission within 72 hours where required under GDPR Article 33, and will inform affected users without undue delay where the breach is likely to result in a high risk to their rights and freedoms, in accordance with GDPR Article 34.

5. How We Use Your Information

We use your information to:

  • Create and manage your Joblar account
  • Match professionals with relevant job opportunities using our rules-based matching algorithm
  • Verify professional certifications and qualifications (by human review)
  • Verify that a company is a genuine employer eligible to use the platform (decided by Joblar administrators, supported by AI-assisted review — see Section 11)
  • Facilitate mutual matching — contact details are only shared when both parties express interest
  • Process subscription payments securely through our payment processing provider
  • Send platform notifications — account, certification and support updates, professional interest, mutual matches and role status changes — in your dashboard and in the Joblar mobile app where you have enabled notifications, and, for companies that choose it, by email when a new mutual match happens
  • Show a role publicly, only when the employer has explicitly chosen to publish it — see Section 7
  • Improve and maintain the platform
  • Ensure platform security and prevent fraud

We do not sell your personal data to third parties. We do not share your contact details until a mutual match is confirmed. We do not use your data to train external AI models.

6. Legal Bases for Processing

Under GDPR, we rely on the following legal bases:

PurposeLegal basis
Creating and operating your account, matching, and sharing contact details upon mutual matchPerformance of a contract (Art. 6(1)(b))
Verifying companies and professionals, preventing fraud and misuse, platform security, rate limitingLegitimate interests (Art. 6(1)(f)) — keeping the platform genuine, safe, and limited to its intended users
Retaining payment and billing recordsLegal obligation (Art. 6(1)(c)) — Irish tax law
Marketing emails and optional communicationsConsent (Art. 6(1)(a)) — withdrawable at any time
Service notifications (matches, account and security updates)Performance of a contract

7. Data Sharing

We only share your data in these limited circumstances:

  • Mutual Matches: When both a professional and a company express interest, limited contact details are shared between the matched parties only. See Section 8 below.
  • Payment Processing: Subscription billing is handled by our payment processing provider. The provider receives only the data necessary to process your payment. We never see or store your full card details.
  • Public Vacancies: Vacancies are private by default. When an employer chooses to publish a vacancy publicly, the selected job information (role title, the employer's name, logo, description and location, employment type, requirements and qualifications and — only if the employer chooses — pay) may be accessible through a public link and may be shared on third-party platforms such as LinkedIn or WhatsApp. No information about professionals, applicants or their contact details is ever shown publicly. Employers can unpublish vacancies from Joblar at any time, which disables public access to the vacancy through Joblar; a paused, closed or deleted vacancy is also removed from public access. However, Joblar cannot guarantee removal of posts, screenshots or cached previews retained by third-party platforms or other users: Joblar-hosted public pages are controlled by Joblar; posts on Joblar's own social accounts can be removed by Joblar separately on request; posts created by employers or third parties, and link previews or cached copies held by other platforms or search engines, are outside Joblar's control.
  • Service Providers: We use trusted service providers for cloud hosting, secure file storage, messaging delivery, mobile push delivery, payment processing and — for company verification only — AI model inference hosted in the European Union. They process data on our behalf under strict data processing agreements (DPAs).
  • Legal Requirements: We may disclose data if required by law, regulation, or valid legal process.

International Transfers

Where any of our service providers operate outside the European Economic Area, data transfers are governed by appropriate safeguards including Standard Contractual Clauses as approved by the European Commission.

8. Contact Sharing on Mutual Match

When both a worker and a company express interest in each other, each party's contact details are shared with the other. This is the primary purpose of the platform. By participating in the matching process, both parties consent to this exchange occurring upon mutual confirmation of interest.

Once contact details have been exchanged, the receiving party becomes an independent controller of that personal data and is responsible for handling it in compliance with applicable data protection law. Use of shared contact details is restricted to discussing the relevant job opportunity, as set out in our Terms of Service.

9. Data Retention

We retain data for the following periods:

  • Account and profile data: retained while your account is active. When you delete your account (or ask us to), your profile, authentication identity, certifications, notifications, communication preferences, mobile notification tokens, interests, matches, roles and their public listings are deleted or anonymised as described in Section 10, subject to the lawful retention obligations listed here.
  • Certification documents: deleted within 30 days of account closure. A pseudonymised record of the deletion (containing no name, email, phone number, or documents) is retained for the defence of legal claims.
  • Payment records: retained for 7 years as required by Irish tax law.
  • Usage and activity logs: retained for 12 months.
  • Login and authentication records: retained for 6 months.
  • Notifications, communication preferences and mobile notification tokens: kept while your account exists and deleted with it; a notification token is also removed when you sign out of the app.
  • Email opt-outs: if you unsubscribe from our emails, we keep a one-way hashed record of the address (not the address itself) so that we respect your choice and do not email you again.

Personal data is deleted or anonymised when it is no longer necessary for the purposes described in this policy. Where we are required by law or regulation to retain certain data beyond these periods, or need it for the establishment, exercise or defence of legal claims, we retain only what is required for the minimum period required. Operational alerts shared with our internal support team (for example a new company registration or a support request) are retained in that team tool for a limited period under its retention settings.

10. Your Rights

Under GDPR and Irish data protection law, you have the right to:

  • Access — Request a copy of the personal data we hold about you
  • Rectification — Request correction of inaccurate data
  • Erasure — Request deletion of your personal data
  • Restriction — Request that we limit how we process your data in certain circumstances
  • Portability — Request your data in a machine-readable format
  • Objection — Object to certain types of processing, including processing based on legitimate interests
  • Withdraw Consent — Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@joblar.com. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

11. AI & Automated Processing

Matching is not AI

Joblar uses a rules-based matching algorithm to assess suitability between professional workers and job opportunities. The assessment considers relevant factors such as profession and experience, professional qualifications and certifications, job requirements, location and availability. Our matching algorithm is developed around criteria that matter to both professional workers and employers, and the same rules are applied equally to everyone. AI does not calculate candidate match scores, rank or recommend workers, or make recruitment decisions. A match only becomes a connection when both parties independently express interest.

AI-assisted company verification

Joblar primarily connects genuine employers directly with professional workers, and recruitment agencies may be ineligible under our eligibility rules. To support our internal company verification process, Joblar may use AI-assisted tools to review company information and publicly available website content to identify potential concerns, including whether an organisation operates as a recruitment agency. The information sent to the AI tool is the company name, the CRO number (if provided), the domain of the registration email address and the public text of the company website. Publicly available information can still include personal data (for example a sole trader's name on their own website), and we process it on the basis of our legitimate interest in keeping the platform limited to genuine employers (Article 6(1)(f)), applying the same fairness safeguards as other verification steps.

  • AI-generated findings are reviewed by authorised Joblar administrators, who make the final verification decisions. The AI tool flags potential concerns; it does not automatically approve, reject or ban companies
  • No information about professionals or applicants is sent to the AI tool
  • The AI tool runs on cloud infrastructure in the European Union under a data processing agreement; the provider does not retain this data to train its models, and we do not use your data to train any AI model
  • Certification verification is always performed by human reviewers, not AI
  • Where a verification outcome affects your access to the platform, you can ask for it to be reviewed by a person (see Right to Human Review below)

Right to Human Review

Verification decisions are made by Joblar administrators, not solely by automated means. If you believe an automated step (such as the AI-assisted check or the rules-based matching) has affected your access to opportunities, you may ask for a person to review it, express your point of view and contest the outcome. To exercise this right contact privacy@joblar.com.

12. Children's Data

Joblar is a professional platform for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has registered, contact privacy@joblar.com and we will delete the account.

13. Cookies

We use essential cookies, which keep you logged in and maintain your session, and a cookie consent management service that records your cookie preferences. Where you use location search fields, your query is processed by a mapping service provider to offer suggestions. The location you choose is stored in your profile and used solely for distance-based matching between professionals and companies — it is never sold or used for advertising. We do not use advertising cookies, third-party tracking cookies, or analytics cookies that identify individual users. If this changes, we will update this policy and, where required, ask for your consent first.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Joblar Limited

Registered in Ireland — CRO no. 785821

Registered office: 76 Bushy Park House, Terenure, Dublin 6W, D6W TX34, Ireland

Email: privacy@joblar.com

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via email or a prominent notice on the platform. Your continued use of Joblar after any changes constitutes acceptance of the updated policy.