Privacy Policy

This version of this policy takes effect on 28 October 2026.

The short version

This summary gives the main points. The rest of this policy explains them in full.

• Modelhive Limited, trading as Lavoop, is responsible for the personal data we use to run Lavoop. You can contact us about privacy at privacy@lavoop.com.
• Employers can see your profile only if you make it discoverable. If you do, Employers can view your profile, view an anonymised copy of your CV, with your name, contact details, address and photo removed, see a score comparing your profile with their Job Listing and contact you through Lavoop. If you accept an Employer's message, you can also choose to let that Employer view your original CV, and stop at any time. Your salary expectation is never shown unless you separately choose to show it.
• If you add a CV, we score it against Job Listings. The scores power your personalised job feed and, if your profile is discoverable, Employers can see them. Scoring is designed not to use sensitive information, such as information about your health, ethnic origin or religion. The only way not to be scored is not to add a CV. If you object to Employers seeing your scores, we make your profile not discoverable, so Employers can no longer find you.
• We do not use your CV or profile to train AI models unless you agree. When our AI Features use outside AI providers, we first remove your name, contact details and other information that directly identifies you.
• We do not sell your personal data. We store it in the United Kingdom and in the European Union.
• You have rights over your personal data, including to access, correct and delete it and to object to how we use it. You can complain to us, to the Information Commissioner's Office or, if you are in the EU, to your local data protection authority.

1. Who we are and how to contact us

Lavoop is run by Modelhive Limited, a company registered in England and Wales under company number 12199066, whose registered office is at Flat 18, Eyot House, London, England, SE16 4BN ("Lavoop", "we", "us" and "our"). We are the controller of the personal data described in this policy, which means that we decide how and why it is used.

For any question or request about your personal data, or to make a complaint, email privacy@lavoop.com.

We are registered with the Information Commissioner's Office (ICO) under registration number ZC280322.

Because we offer the Services to people in the European Union, the EU General Data Protection Regulation (EU GDPR) also applies to our use of their personal data. Our representative in the EU is Antonia La Verghetta, who can be contacted at privacy@lavoop.com. If you are in the EU, you can contact our representative instead of us about anything in this policy.

In this policy, "data protection law" means the UK GDPR and the Data Protection Act 2018 and, where it applies, the EU GDPR.

2. Who this policy applies to

This policy explains how we use personal data about:

• Candidates, including people who use the Services without an account, for example to search for jobs;
• authorised users of Employer Accounts, such as recruiters, hiring managers and account administrators;
• people whose details appear in Job Listings, including Job Listings we aggregate from online sources such as company career sites and applicant tracking system feeds (Section 14);
• people whose details a user includes in content, such as referees named in a CV (Section 14); and
• anyone who contacts us, for example with a question, report or complaint.

This policy does not cover what Employers do with personal data they obtain through the Services. Each Employer decides how it uses that information and is responsible for that use under its own privacy notice (Terms of Service, Section 7.2). The same applies to information you give an Employer on its own website or application system, which is where applications are made (Terms of Service, Section 4.3).

Our Cookie Policy explains how we use cookies and similar technologies. Section 5 of this policy explains how our AI Features use personal data.

3. Information we collect

3.1 Information you give us

• Account information: your name, email address, password (stored only in securely hashed form, never in readable form), mobile number if you give it, and your confirmation that you are 18 or over.
• Candidate profile and CV: your work history, education, qualifications, skills, job preferences (such as the roles and locations you are interested in), a base salary expectation if you choose to enter one, the CVs you upload and anything else you choose to add, such as a photo or links.
• Employer account information: the names and work contact details of authorised users and their roles, the organisation's name and details, billing contacts, and information or documents we ask for to verify the organisation or a user's authority to act for it.
• Content you create: Job Listings, Employer profiles, messages you send through Lavoop, reports, appeals and feedback.
• Payment information: when you pay, our payment service provider collects your card or other payment details. We receive limited information from it, such as the card type, the last four digits, the expiry date and whether the payment succeeded, but never your full card number.
• Choices you make: your visibility and notification settings, your marketing preferences, the channels you choose for messages from us (email, SMS, WhatsApp or Telegram), Employers you have blocked, whether you have agreed to us using your CV or profile to train AI models, and the Employers you have chosen to share your original CV with.
• Communications with us: emails and other messages you send us, and our replies.

3.2 Information we collect when you use the Services

• Usage information: searches you make, filters you use, Job Listings you view, save or share, alerts you set up, and when you click an application link that takes you to an Employer's website. For Employers, this includes searches of Candidate profiles, profiles viewed, CVs viewed and activity on sponsored Job Listings.
• Connected AI assistants: if you connect an AI assistant: that you connected it, which one, and when. We record which Job Listings a connected assistant returns and which Job Listings you click to apply for after following an assistant-provided link. We do not store or log the words of searches you make through it.
• Device and technical information: IP address, browser and device type, operating system, approximate location worked out from your IP address, and log information such as the date and time of each request.
• Product-usage records: we record basic information about how the Services are used, such as the screens viewed, buttons pressed and searches that return no results. When you are signed in, these records are linked to your account. When you are signed out, no identifier is attached, and we review the records only in aggregate.
• Cookies and local storage, including analytics cookies if you accept them, as explained in our Cookie Policy.

3.3 Information we create

• Scores that compare your CV and profile with Job Listings, which power your personalised feed and, if your profile is discoverable, are shown to Employers (Section 5).
• Anonymised copies of your CV, which Employers can view, but not download, if your profile is discoverable. We make a new copy each time an Employer opens your CV and do not keep it. The copy replaces your name with "[Name removed]" and removes your contact details, links to your online profiles, your street address (keeping your town or city), your date of birth, details such as your nationality or marital status, identity numbers, the names of your referees and your photo. If we cannot remove these reliably, for example because your CV is a scanned image, we do not show your CV to Employers. Other information in your CV, such as your employers, dates and education, can still identify you, so we treat the anonymised copy as personal data.
• Gap analyses and CV suggestions that you ask for.
• Structured information we derive from profiles, CVs and Job Listings, such as skills, job categories and experience, which we use for search, matching and recommendations.
• Information about how you use the Services, which we use to personalise your feed (Section 5).
• Records we need to keep the Services safe, such as signals about suspected fraud, spam or misuse, the outcome of age and verification checks, and records of reports, moderation decisions and appeals.

3.4 Information we receive from others

• Sign-in services: if you sign in with Google or Apple, we receive your name and email address from that service.
• Our payment service provider: whether a payment succeeded, and information it uses to prevent fraud.
• Employers: messages they send you, and information an Employer's administrator gives us about its authorised users.
• Sources of aggregated Job Listings: Job Listings we aggregate from various online sources, such as company career sites and applicant tracking system feeds, may include the name or work contact details of a recruiter or hiring contact (Section 14.1).
• Public sources used for verification: for example, information about an organisation from Companies House or from the organisation's own website.

3.5 Sensitive information

You do not need to include special category data in your profile or CV. This means information about your health, ethnic origin, religious or philosophical beliefs, sex life or sexual orientation, political opinions or trade union membership, and genetic or biometric data. Nor do you need to include information about criminal convictions or offences.

If you choose to include any of this information in your profile or CV, Employers may see it in line with your visibility settings. If you make your profile discoverable, the legal condition we rely on for this information is that you have deliberately made it public to Employers on the Services. If you do not want Employers to see it, do not include it. You can remove it at any time.

Candidate scoring is designed not to use special category data or criminal offence data, even if you include it, and we test it for unfair bias (Section 5).

4. How we use information and our lawful bases

Data protection law requires a lawful basis for each way we use personal data. We rely on these bases:

• Contract: the use is necessary to provide the Services you have asked for under our Terms of Service.
• Legitimate interests: the use is necessary for our legitimate interests, or those of others, and those interests are not overridden by your rights. You can object to these uses (Section 9).
• Legal obligation: the law requires the use.
• Consent: you have agreed. You can withdraw your consent at any time, which does not affect what we did before you withdrew it.

The table below sets out what we use personal data for and the lawful basis we rely on.

5. Candidate scoring, personalisation and automated decisions

Candidate scoring. If you add a CV, we score it against Job Listings using an AI Feature that compares information in your CV and profile, such as your skills, experience, qualifications, job titles, languages, achievements and location, with each Job Listing's requirements. We score every Candidate who has added a CV, whether or not their profile is discoverable, because scoring is how your personalised feed matches you with Job Listings. If your profile is discoverable, Employers with access to candidate scoring can also see a score and related analytics comparing your profile with their Job Listing. Scoring is designed not to use special category data, criminal offence data or other information about protected characteristics, and we test it for unfair bias before release and monitor it afterwards (Terms of Service, Section 6.4). Before information is sent to an AI model provider, we remove names, contact details and other information that directly identifies you. This reduces what the provider sees but does not make the information anonymous, so we continue to treat it as personal data.

Employers can view scores only within the Services and cannot download them. Scores are calculated centrally by us; Employers can filter Candidates by criteria such as location or skills, but filtering does not change a score. Employers make their own recruitment decisions and must not reject, shortlist or progress a Candidate based solely on a score (Terms of Service, Section 6.3). Scores can also be used to order and suggest discoverable profiles when Employers look for Candidates, and they order the Job Listings in your own personalised feed. They do not affect the all jobs page, your ability to apply for jobs or the status of your account. A score helps an Employer decide whom to look at more closely; it is not a decision about you.

Your choices about scoring. The only way not to be scored is not to add a CV, or to remove it; you can still search and browse every Job Listing on the all jobs page. Scoring for your own personalised feed relies on contract, because it is how the feed works. Showing your scores to Employers, and suggesting your profile to them, rely on legitimate interests, so you can object to them (Section 9). Employers can find discoverable Candidates through several features, some of which use scoring, and scoring cannot be switched off separately. So if you object, we will make your profile not discoverable: Employers will no longer be able to find your profile through search or any other feature, and will no longer see scores about you. Before we do, we will tell you this. You can still search and apply for jobs, receive job alerts and use career tools, and you can make your profile not discoverable yourself at any time in your settings.

Personalisation. Your personalised feed recommends Job Listings based on your profile, the scores for your CV and your activity on the Services. The all jobs page lets you search and browse every Job Listing without personalisation based on your profile, your CV or your activity. The personalised feed is part of the Services you sign up for (Terms of Service, Sections 5.1 and 5.2), so we rely on contract for it rather than legitimate interests. If you prefer results that are not personalised, use the all jobs page.

Automated decisions. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing. In particular, we do not suspend or close an account, or remove content, based solely on an automated system. Our automated systems may place a temporary hold on an account or content that appears to involve fraud, spam or other misuse, for example by pausing an account, hiding a Job Listing or asking you to verify your identity. A person reviews each temporary hold within 72 hours and decides whether to lift it, change it or take further action. If the review needs more time, for example because we need information from you or the issue is complex or involves a security risk, the hold may stay in place while we finish it, and we will tell you. You can give us information to help, for example by verifying your identity, and you can appeal any action we take (Terms of Service, Sections 2.8.5 and 16).

6. Who we share information with

Employers. If you make your profile discoverable, Employers can view your profile and the anonymised copy of your CV, see scores about you and contact you through Lavoop. Employers based outside the UK can see your profile only if your job search includes their country. Your email address and phone number are hidden from Employers by default: Employers contact you through Lavoop messaging, and you decide whether to reply and whether to give them your contact details. Your base salary expectation is also hidden unless you choose to show it. If you do, Employers who can find your profile can see it, and you can hide it again at any time in your settings, which does not affect anything an Employer has already seen. The minimum salary you use to filter your own job feed is never shown to Employers. Employers see the anonymised copy of your CV (Section 3.3), within the Services; they cannot download it. After you accept an Employer's message, you can choose to share your original CV with that Employer. The Employer can then view your CV as you uploaded it, including your name and contact details, within the Services and without downloading it, until you stop sharing, which you can do at any time in your conversation with that Employer. We record when you share and when you stop, and tell the Employer each time. Sharing with one Employer does not share your CV with any other, and if you upload a new CV it is not shared until you choose to share it. Like anything shown on screen, an Employer could note down or take a screenshot of what it sees while you share, and stopping sharing cannot undo that. You can block an Employer, which stops it messaging you. Employers are independent controllers: each decides how it uses Candidate information for its own recruitment, must give you its own privacy information and deals with requests about what it does with your information. Our Terms of Service allow Employers to use Candidate information only to consider you for work, and a recruitment agency may share it with its client only with your agreement for that role (Section 2.3.3(k)). We cannot control what an Employer does with information after receiving it.

Other users and the public. Job Listings and Employer profiles can be seen by anyone using the Services and may include the names of an Employer's staff if the Employer includes them. Job Listings may also appear on partner job sites, search engines and social networks (Terms of Service, Section 2.3.6).

Service providers who act for us. We use providers for hosting and data storage, security and fraud prevention, sending emails and text messages, analytics, customer support, payment processing and AI models. They may use personal data only on our instructions and under contracts with us. If you accept analytics cookies, our analytics provider receives information about how you use our pages; before it is sent, we remove job IDs, company names and match scores. Before profile information is sent to an AI model provider, we remove names, contact details and other information that directly identifies you; this does not make it anonymous.

Our payment service provider also uses payment information for its own purposes, such as preventing fraud and meeting its legal obligations, under its own privacy notice.

Services you choose to use. If you sign in with Google or Apple, or choose to receive messages by WhatsApp or Telegram, we share the information needed for that service with its provider, whose own privacy notice applies. If you connect an AI assistant, such as Claude or ChatGPT, a provider that verifies your sign-in to it receives your account ID and email address, and records which assistant you authorised and when. The assistant can search Lavoop's job listings and read a job's details. The assistant does not receive your CV file or a copy of your Lavoop profile. When you use the enabled features (available with a subscription or the free trial, when switched on in Settings), it may receive match scores, fit information and requirement-analysis results, including short evidence phrases drawn from your redacted CV. Messages we send through WhatsApp and Telegram only tell you that something needs your attention, such as a new message on Lavoop, and do not include its content.

Employers' websites. When you click an application link, you leave Lavoop. The Employer's website may be able to see that you arrived from Lavoop, but we do not send it your profile or CV.

Professional advisers and insurers, such as lawyers, accountants and auditors, where needed.

Authorities and others where the law requires it, for example in response to a court order or a lawful request from the police or a regulator, or where needed to protect someone's safety, prevent fraud or establish, exercise or defend legal claims.

A buyer or successor if we reorganise or sell all or part of our business. We will tell you before your personal data becomes subject to a different privacy policy.

We do not sell your personal data.

7. Transfers outside the UK and the EU

We store personal data in the United Kingdom and in the European Union. If you are in the EU, we can receive your personal data in the UK because the European Commission has decided that the UK protects personal data adequately. That decision currently runs until 27 December 2031.

We transfer personal data outside the UK in these cases:

• Employers in the EEA. We currently offer the Services only to Candidates and Employers in the UK and the EEA. If your profile is discoverable and your job search includes an EEA country, Employers based there can view your profile and the anonymised copy of your CV. The UK recognises EEA countries as protecting personal data adequately, so no further safeguards are needed.
• Hosting and email. We store personal data in the United Kingdom and in the European Union, and send our emails from the United Kingdom. The UK recognises EU countries as protecting personal data adequately, so no further safeguards are needed for the personal data we store in the European Union. Our hosting provider may access information from other countries to support its services. It does so under binding corporate rules and standard contractual clauses approved under data protection law.
• Payments. Our payment service provider processes payment information in the United States. For this, it relies on the UK Extension to the EU–US Data Privacy Framework and, for information from the EEA, on the EU–US Data Privacy Framework, with standard contractual clauses as a fallback.
• AI models. Our AI model providers process the information we send them in the United States. For this, we rely on the EU standard contractual clauses and the UK Addendum. An AI assistant you connect is separate from the AI model providers Lavoop uses for its own features. When you use a connected assistant, Lavoop makes the information described in Section 6 available through the connector in response to your request; the assistant provider may then process it under its own privacy notice.
• Text messages. Our text message provider processes information in the United Kingdom or the European Union. The UK recognises EU countries as protecting personal data adequately, so no further safeguards are needed.
• Analytics. If you accept analytics cookies, our analytics provider may process analytics data outside the UK, including in the United States. For this, we rely on the UK Extension to the EU–US Data Privacy Framework and, for information from the EEA, on the EU–US Data Privacy Framework.
• AI assistant sign-in. The provider that verifies your sign-in when you connect an AI assistant processes your account ID and email address in the United States. For this we rely on the EU Standard Contractual Clauses and the UK Addendum, incorporated into our agreement with that provider.
• Services you choose. If you use WhatsApp, Telegram, a sign-in service or a connected AI assistant, its provider may process information in other countries under its own privacy notice.

You can ask us for more information about these safeguards by emailing privacy@lavoop.com.

8. How long we keep information

We keep most personal data for as long as your account is open, because we need it to provide the Services. If you close your account, your profile stops being visible to Employers straight away. We delete your personal data, or irreversibly anonymise it, and ask the service providers that hold it for us to delete it immediately, except as set out below. Back-up and archive copies are deleted according to each provider's data-retention schedule, and a provider may keep data where the law requires it.

We keep some information after your account closes, or for longer than we otherwise would, only where we need it:

• to meet legal obligations, for example keeping payment and invoice records for six years after the end of the financial year they relate to, as tax law requires;
• to keep the Services safe, for example keeping the information we need to stop someone whose account we closed for a serious breach of our Terms of Service from opening a new account;
• to deal with complaints, disputes or legal claims; and
• to respect your choices, for example keeping your email address on a list so that we do not send you marketing after you unsubscribe.

If you have not signed in for 24 months and do not have a paid subscription, we may close your account after giving you 30 days' notice (Terms of Service, Section 15.3). Job Listings we aggregate, and any recruiter or hiring contact details in them, are deleted when the Job Listing is removed (Section 14.1). Analytics cookie data is deleted automatically after 14 months, and our Cookie Policy explains how long cookies stay on your device. A record that you have connected an AI assistant is kept while the connection is active and deleted 30 days after you disconnect it. If a sign-in is not completed, we delete the connection record when our daily deletion process runs after the record is more than one day old. We do not store or log the words of searches you make through a connected assistant.

If you have shared your original CV with an Employer, anything the Employer noted down or kept from it is held by that Employer under its own privacy notice. We keep the record of when you shared your CV and when you stopped for as long as that CV is in your account. We may keep information in a form that no longer identifies you, for example to produce statistics.

9. Your rights

You have the following rights over your personal data. Some of them apply only in certain circumstances.

• Access: you can ask for a copy of your personal data and information about how we use it. You can also download your data from your account settings at any time, including before you close your account.
• Correction: you can ask us to correct inaccurate or incomplete information. You can update most of your information yourself in your account.
• Deletion: you can close your account or ask us to delete your personal data, except where we need to keep it (Section 8).
• Restriction: you can ask us to limit how we use your personal data, for example while we check a complaint that it is inaccurate.
• Objection: you can object to any use of your personal data that relies on legitimate interests. This includes showing your scores to Employers and suggesting your profile to them (Section 5), and recording which Job Listings a connected AI assistant returns to you or which of those listings you click to apply, where we use those records to improve the service or prepare reports for Employers (Sections 3.2 and 4). We stop the relevant processing unless we can show compelling legitimate grounds to continue that override your interests, rights and freedoms, or we need the information for legal claims. To object, email privacy@lavoop.com. If you object to Employers seeing your scores or to suggestions to Employers, we make your profile not discoverable, as explained in Section 5. If you object to recording connected-assistant activity, we stop recording that activity for your account and delete existing records linked to your account. For connected-assistant records, we keep them after an objection only where needed to investigate fraud, abuse or security, or for legal claims. This does not disconnect your assistant or, by itself, change whether your profile is discoverable. We may keep information that has been irreversibly anonymised and can no longer identify you. You can always object to direct marketing. If you do, we stop using your personal data for direct marketing.
• Portability: you can ask for information you gave us, which we use under a contract or with your consent, in a commonly used, machine-readable format, or ask us to send it to another organisation where this is technically feasible.
• Withdrawing consent: where we rely on your consent, for example for marketing, AI training or sharing your original CV with an Employer, you can withdraw it at any time.
• Automated decisions: we do not make decisions about you that have legal or similarly significant effects based solely on automated processing, and a person reviews any temporary hold our systems place on your account or content (Section 5).

How to make a request. Email privacy@lavoop.com or, where available, use the settings in your account. We may need to confirm your identity first. We will respond within one month. If your request is complex, or you make several requests, we may extend this by up to two further months; if so, we will tell you within the first month and explain why. If we need to confirm your identity or ask you to clarify your request, the time limit starts when we receive what we need. When you ask for a copy of your data, we will carry out reasonable and proportionate searches. You do not normally have to pay a fee.

Requests about personal data held by an Employer, including information you gave an Employer on its own website, should be sent to that Employer.

10. Complaints

If you are unhappy with how we use your personal data, please tell us first by emailing privacy@lavoop.com. We will acknowledge your complaint within 30 days and respond without undue delay.

You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113. If you are in the EU, you can complain to the data protection authority in the country where you live or work, or where you think the problem happened. The European Data Protection Board lists these authorities at edpb.europa.eu.

11. Marketing, analytics and your choices

We send marketing, including newsletters, information about our products and recommended Job Listings sent on our initiative, only if you have agreed or, if you have bought something from us, about our own similar products, unless you opted out when we collected your details or in any message since. The marketing option at sign-up is never pre-ticked.

You can stop marketing at any time, free of charge, by using the unsubscribe link or opt-out instructions in each message, or in your settings. Job alerts that you set up yourself and service messages are not marketing. You can change or stop job alerts in your settings (Terms of Service, Sections 5.7 and 11).

We do not send marketing about other companies' products or services, apart from recommending Job Listings.

Analytics. We use analytics cookies only if you accept them. If you reject them, or do not make a choice, they are not set. Our Cookie Policy describes them. You can change your choice at any time using the Cookie settings link on Lavoop.com.

Browser privacy signals. If your browser sends a Global Privacy Control or Do Not Track signal, we honour it automatically: analytics cookies are not set and we stop recording product-usage information about you.

12. Security

We use technical and organisational measures designed to protect personal data against loss, misuse and unauthorised access, including encryption of data in transit, access controls that limit personal data to people who need it, and monitoring for misuse. Before profile information is sent to an AI model provider, we remove names, contact details and other information that directly identifies you.

You can help by keeping your password secure and not sharing your account (Terms of Service, Section 1.2). If a personal data breach happens, we will report it to the ICO where the law requires, and tell you without undue delay if it is likely to put you at high risk.

13. Age requirement

The Services are only for people aged 18 or over. We ask you to confirm that you are 18 or over when you register, and may take further steps to check your age. If we learn that a user is under 18, we close the account and delete the personal data associated with it, except where we must keep it to comply with the law or to establish, exercise or defend legal claims (Terms of Service, Section 15.5). If you think we have closed your account by mistake, you can appeal (Terms of Service, Section 16.2).

14. People who are not Lavoop users

14.1 Job Listings we aggregate from online sources

Job Listings in our search results include jobs posted directly by Employers on Lavoop and jobs we aggregate from various online sources, such as company career sites and applicant tracking system feeds.

Some Job Listings we aggregate include the name, job title or work contact details of a recruiter or hiring contact. We show this information as part of the Job Listing so that Candidates can understand and respond to the opportunity, relying on our legitimate interests. We do not use it for any other purpose. We delete it from our active systems when the Job Listing is removed, and from our back-ups when they are overwritten; we cannot remove copies held by others, such as search engines. If you are named in a Job Listing we have aggregated and want your details corrected or removed, want to object to our use of them, or want to exercise any of your other rights, email privacy@lavoop.com.

14.2 Authorised users of Employer Accounts

If your organisation has given you access to its Employer Account, we receive your details from you or from your organisation's account administrator, and we use them to run the account as described in this policy. Your organisation can see how its authorised users have used the account.

14.3 People mentioned in content

Users sometimes include information about other people, such as referees in a CV or colleagues in a message. We use that information only as part of the content it appears in. Users must have the right to share it (Terms of Service, Section 2.6.6).

14.4 People who contact us

If you contact us without having an account, we use your details to deal with your message, relying on our legitimate interests, and keep them as set out in Section 8.

15. Third-party services

The Services link to and work with services run by others, including Employers' websites, sign-in services, WhatsApp, Telegram and AI assistants that you connect. Those services have their own privacy notices, which apply when you use them (Terms of Service, Section 8). We are not responsible for how they use personal data.

16. Changes to this policy

We may update this policy, for example when we change the Services or when the law changes. Each version shows the date it takes effect. If we make a significant change, we will tell you by email or in the Services before it takes effect.