Job on a Plate
LEGAL

Privacy Policy

Last updated: 23 September 2026.

1. Controller and contact

The Job on a Plate service currently operates under the name Job on a Plate (“Job on a Plate”, “we”, “us”). For privacy questions and requests, contact support@jobonaplate.com. We will update the controller information as necessary if the legal or business organisation of the service changes.

2. What personal data we process

We do not store passwords in readable form. Passwords and verification/reset tokens are stored as cryptographic hashes.

3. Purposes and legal bases

We process account, authentication, professional-profile and uploaded-content data where necessary to create and operate your account, save and edit your profile, create Profile Views, process and store images, provide previews and exports, publish and share through links or QR codes, provide profile analytics, and publish or unpublish your website. The legal basis is performance of our contract with you (Article 6(1)(b) GDPR).

We may process limited technical, administrative, analytics and security data to prevent abuse, protect accounts, moderate content, troubleshoot, maintain reliable operation and understand use of service features on the basis of legitimate interests (Article 6(1)(f) GDPR), where appropriate. We use Google Analytics 4 only with your consent, as described in the Cookie & Browser Storage Policy. Where processing is required by law, the legal basis is compliance with a legal obligation (Article 6(1)(c) GDPR).

4. Profile content and sensitive data

You decide what to include in your professional profile. Do not include sensitive or special-category personal data unless it is genuinely necessary and you understand the consequences of storing or publishing it. Job on a Plate does not require such data for the core service. If you include another person's personal data, for example in a testimonial, reference, project or image, you are responsible for having an appropriate legal basis and any necessary permissions.

5. Guest drafts and browser storage

You can use the builder without an account. A guest working draft may be stored locally in your browser rather than in a Job on a Plate account. The builder is designed to remove an unsaved guest draft after approximately two hours of inactivity. Closing the browser does not necessarily delete local storage immediately.

On sign-out, Job on a Plate is designed to remove local working profile data from the device while retaining non-sensitive preferences such as language. Details are provided in the Cookie & Browser Storage Policy.

6. CV import and uploaded images

Supported CV files may be read in your browser to populate builder fields. Profile data is sent to our server when you use server-side account features such as saving the profile.

For signed-in users, profile photos and project/gallery images may be uploaded to our server, validated and technically processed before storage. The service may resize an image and convert it to an optimised format such as WebP. Image files are stored using Bunny.net infrastructure and may be delivered through its content-delivery network (CDN). The Job on a Plate database stores information needed to associate an image with an account and profile, such as an image identifier, storage path or public URL, purpose, format, dimensions and file size. We may apply limits on file size, quantity and upload frequency to protect the service.

Guest images that have not been saved to an account may remain only in the browser as part of a temporary local draft. They are not intended to be uploaded to persistent image storage until a signed-in account feature requires it.

7. Published profiles, Profile Views and QR codes

A profile is not public merely because it is saved to your account. When you choose Publish, the selected profile content becomes publicly accessible at your URL. You may also create Profile Views that show selected content for a particular audience. A published profile or Profile View can be shared through a direct link or QR code. The QR code or its link may use a randomly generated identifier intended to keep the link working while the relevant Profile View exists.

Public content may include images, projects, services, references, links and contact details. Anyone who knows or discovers a public URL or QR link may view, copy or share the data. Search engines, archives and other third parties may independently index, cache or copy public data. Unpublishing stops further public display through Job on a Plate, but we cannot guarantee deletion of copies already obtained by third parties. Public image URLs may remain temporarily in CDN or other caches after content is changed or removed.

8. Contact-detail protection

If contact-detail protection is enabled, an email address or phone number may be omitted from the initial public HTML and provided only after a visitor requests its reveal. This feature reduces direct exposure of contact details but cannot guarantee that automated systems or third parties will not obtain, store or further share the information after it is revealed.

9. Profile analytics

Job on a Plate may record limited events related to visits to or use of published profiles and Profile Views in order to provide statistics to the profile owner and protect the analytics feature from abuse. This first-party analytics is separate from Google Analytics 4. Google Analytics 4 is used only with consent as described in the Cookie & Browser Storage Policy.

10. Recipients and processors

We disclose data only where needed to operate the service or where required by law. Current categories include:

We do not sell personal data and do not use professional-profile content for third-party advertising.

11. International transfers

Some providers may process data outside Slovenia or the European Economic Area, depending on the provider and service configuration. Where required, transfers are protected by a valid adequacy decision or another GDPR mechanism, such as European Commission Standard Contractual Clauses and supplementary safeguards. You can request more information at support@jobonaplate.com.

12. Retention

Backups and CDN caches may retain limited copies until the relevant provider or cache cycle expires.

13. Your GDPR rights

Depending on the circumstances, you may have rights of access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights, contact support@jobonaplate.com. We may need to verify your identity before acting on a request. You may also lodge a complaint with the Information Commissioner of the Republic of Slovenia or another competent supervisory authority.

14. Deleting profile content and your account

You can remove content from your profile and delete your saved profile using the options available in your account. You can also permanently delete your Job on a Plate account directly from the account page. For security, account deletion must be confirmed with your current password.

When an account is deleted, the system is designed to delete the saved professional profile, associated Profile Views, any websites currently published through Job on a Plate, image-ownership records and the user-account record used to provide the service. Images associated with the account are also scheduled for deletion from Bunny.net storage. Deletion cannot be undone. Temporary copies may remain in backups or CDN caches until normal expiry. Data already copied, indexed or cached by unrelated third parties while a profile was public may remain outside Job on a Plate's control. We may still retain limited data where required by law or necessary to establish, exercise or defend legal claims.

15. Security and administration

We use measures such as password hashing, hashed verification/reset tokens, HTTP-only session cookies, access controls, validation and processing of uploaded files, and rate limiting for sensitive requests to protect account and profile data. Authorised administration may review limited account data, change account status or unpublish content where necessary for security, abuse prevention or support. No online service can guarantee complete security.

16. Children

Job on a Plate is intended for people creating a professional profile and is not directed to children. If the service is later offered directly to children, we will review and implement additional legal requirements before doing so.

17. Automated decision-making

Job on a Plate does not currently make decisions about you solely through automated processing that produce legal or similarly significant effects, and professional-profile data is not used for advertising profiling.

18. Changes to this policy

We may update this policy when the service, providers or legal requirements change. The current version and last-updated date will be published on this page.