Privacy policy

Who we are

uwork360.com is operated by UWork360, a technology company based in Pakistan. UWork360 is responsible for the personal information described in this policy.

Questions and requests about privacy go through our contact form. Write “privacy request” in your message and the person responsible for privacy at UWork360 will answer it.

This policy covers this website, its forms, our careers pages and our website chat. It does not cover the systems we build and run for our clients: in a customer deployment, the customer decides what data is processed and under which policies, and our written agreement with that customer applies.

Information we collect

When you contact us

Through the contact form: your name, email address, phone number, company and the message you write, together with what you tell us about your requirements and timing.

When you apply for a role

Your name and contact details, your CV and any other documents you upload, the information you give in your application, and the consent you gave (including the version of this notice you agreed to).

When you use the website chat

Your messages, your name and email address if you give them, and basic information about the conversation. Details are in “Website chat” below.

Automatically

• Technical information sent by your browser, such as IP address, browser type and the page you came from. Our servers use it to deliver the site, keep it secure and limit abuse.
• The page address and any campaign tags (for example utm_source) of the visit in which you sent a form, so we know which page an enquiry came from.
• Security signals when you submit a form, such as rate-limit counters (see “Security checks on forms” below).

We do not use advertising cookies, and we do not currently use analytics. If that changes, we will update this policy first.

How we use your information

• To reply to your enquiry, understand your requirements and prepare a proposal.
• To review applications, contact applicants and run our hiring process.
• To send the messages you would expect, such as a confirmation that we received your enquiry or application.
• To protect the website, our systems and our users against spam, fraud and abuse.
• To meet our legal obligations and to establish or defend legal claims.

We collect only what we need for these purposes and use it only for them, unless you agree otherwise or the law requires it. We do not sell personal information, and we do not use it for targeted advertising.

No application is rejected automatically. A person reviews every application and makes every decision.

Consent

Each form asks for your consent before you send it, and explains what it is for. You can withdraw your consent at any time through the contact form. Withdrawing consent does not affect what we did before, and we may not be able to continue with your enquiry or application without the information.

Who we share it with

Only people at UWork360 who need your information for the purposes above can see it. We share it outside UWork360 only as follows:

• Service providers that run parts of our service for us under contract and may use the information only to do so: our hosting provider, our email delivery provider, and — if you use the website chat — the platform that runs it.
• Authorities or others where the law requires it, or where needed to protect the rights, property or safety of UWork360, our users or others.
• A buyer or successor if UWork360 is involved in a merger, acquisition or sale of assets, under the same protections as this policy.

Where your information is stored

Information you send through this website — enquiries, applications and chats — is stored on our systems and those of our hosting and email providers.

The systems we build and run for our clients are different: where the agreement provides for it, UWork360 deploys and operates them on infrastructure the customer controls, including private and self-hosted setups. In those deployments, the customer’s data stays on the customer’s infrastructure and under the customer’s control.

How long we keep it

• Enquiries (contact form): kept in our secure internal systems while we work on your enquiry and for a reasonable period afterwards, then deleted.
• Applications: if we do not take your application further, your details and documents are deleted after the hiring process for the role has ended. If you take part in our hiring process, we keep your information as a record of that process until you ask us to delete it.
• Website chats: kept only as long as needed to answer you and follow up, then deleted together with the contact details you gave in the chat.
• Backups: deleted information may remain in our encrypted backups for a short period before those backups are overwritten.
• Security records (such as rate-limit counters and audit logs) are kept only as long as needed to protect the service.

We may keep information longer where the law requires it or to deal with a legal claim.

How we protect it

• All traffic to the website is encrypted (HTTPS).
• Enquiry details are stored encrypted on our servers (AES-256-GCM), and connections to our databases are encrypted.
• Uploaded documents are kept in private storage and are scanned for malware; they cannot be opened until the scan has passed.
• Access to our systems is restricted to the people who need it, with individual accounts and role-based permissions, and important actions are logged.
• Forms are protected against automated abuse with rate limits and protected form tokens.

No system is perfectly secure. If a breach of security creates a real risk of significant harm to you, we will notify you and the authorities as the law requires.

Your rights

You can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is inaccurate or incomplete;
• delete your information, or stop contacting you;
• withdraw a consent you gave.

Send your request through the contact form and mark it as a privacy request. We may need to confirm your identity before acting on it, and we do not charge for reasonable requests.

Security checks on forms

Our forms use security checks to tell people from automated abuse: rate limits, and single-use protected form tokens that our server issues to your browser and checks when you submit. These checks process only the technical signals needed to protect the form (such as a rate-limit counter). They are used only for security and never to track you for advertising.

Cookies and browser storage

This website sets no advertising or analytics cookies. We use only strictly necessary items:

• A session cookie that protects our forms against forged submissions. It is HttpOnly, limited to the form’s address and expires on its own.
• A short-lived form token and security (CSRF) token that the form fetches from our server and sends back when you submit. They store nothing about you.
• If you use the website chat, a cookie that keeps your conversation open while you browse (see “Website chat”).
• In our staff sign-in area, cookies that keep staff signed in securely.

The website also uses your browser’s own storage: your answers in the contact form are kept in session storage for your visit so they are not lost if you close and reopen the form, and reading progress on our insights articles is kept in local storage on your device. This data stays in your browser and is removed when you clear it.

Website chat

The website chat is a way to reach our team. Messages are read by the people who answer the chat.

• We use your messages and any contact details you give to answer you and to follow up on your enquiry.
• You do not have to give your name or email address to chat with us. If we are away, we ask for them so we can reply.
• Please do not share sensitive information, such as health details or passwords, in the chat.
• Chats are kept only as long as needed to answer you and follow up. You can ask us to delete a chat sooner through the contact form.

The chat runs through our chat platform, which processes your messages so that our team can read and answer them.

Children

This website is for businesses and job seekers. It is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has sent us information, please contact us and we will delete it.

Applicant privacy notice

This notice applies when you apply for a role with UWork360. It sits alongside the rest of this policy.

• What we collect: the details and documents you give us in your application — your name, contact details, CV and any other files you upload — plus the notes and stage history our team adds while considering you.
• Why: to assess your application against the role and to contact you about it.
• Who sees it: the UWork360 team members involved in hiring.
• Documents: uploaded files are kept in private storage and scanned for malware before anyone opens them. Please upload only documents you have the right to share.
• Decisions: nobody is rejected automatically. A person reviews every application.
• How long: if your application is not taken further, your details and documents are deleted after the hiring process for the role has ended. If you take part in our hiring process, we keep them as a record of that process until you ask us to delete them — you can ask at any time.
• Your choices: to correct your details, withdraw an application or have your information deleted, use the contact form and mark your message as a privacy request.

When you apply, we record the version of this notice you agreed to.

Changes to this policy

We will update this policy when our practices change. The date at the top shows when it was last updated. If a change significantly affects how we use information we already hold, we will ask for your consent where the law requires it.

Contact us

Questions or requests about privacy go through the contact form. Mark your message as a privacy request and we will route it to the person responsible for privacy at UWork360.