← Back to EosordLegalGDPR
How Erika Labs applies the UK GDPR and the EU GDPR to Eosord, including Eoslink. This page sits alongside our Privacy Policy.
Last updated: 6 October 2026
Operator: Erika Labs
Product: Eosord (eosord.com)
Who this notice is for
- This notice is for people in the United Kingdom and the European Economic Area, and for anyone else whose personal data we process under those laws.
- It covers recruiters and hiring teams, people who create an Eoslink profile, job applicants, and visitors to eosord.com.
- The full description of the data we handle is in the Privacy Policy. The Terms of Service also apply.
Who is responsible
- Erika Labs, based in Scotland, United Kingdom, operates Eosord and is the controller for recruiter accounts, Eoslink profiles, website visits, and billing records.
- When a recruiting organisation uses Eosord to review applicants for its own jobs, that organisation is the controller of its hiring process. Erika Labs processes that applicant data as a processor, on the organisation’s instructions.
- Questions about a specific application (status, interview, or outcome) should go to the organisation that posted the job. Questions about how Eosord stores data should come to us.
- We have not appointed a separate Data Protection Officer. Privacy requests go to contact@erikalabs.com.
Personal data we process
- Account data: name, email, phone, location, role, and sign-in details.
- Organisation data: name, careers page, members, invites, and roles.
- Hiring data: jobs, applicant name, email, phone, location, PDF résumé, application answers, pipeline status, notes, and outbound email records.
- Eoslink data: the profile you choose to publish, including name, @handle, headline, location, story, links, and visibility settings.
- Optional calendar data: if you connect Google Calendar or Microsoft Outlook, we store the connection and use it only to schedule interviews.
- Payment data: paid plans are charged by Creem, our merchant of record. Creem handles card and billing details. We keep the plan, organisation, and subscription status.
- Technical data: essential logs needed to run and protect the service, plus limited product analytics described below.
Why we use it
- Contract: to provide the account, job, application, Eoslink, and scheduling features you ask us to run.
- Legitimate interests: to keep the service secure, prevent misuse, understand which pages are used, and improve hiring tools. We balance this against your rights.
- Consent: where a choice is optional, such as publishing an Eoslink profile, marking yourself open to work, or connecting a calendar. You can change those settings or disconnect.
- Legal obligation: where we must keep or disclose information, for example tax or payment records.
- We do not sell personal data, and we do not use it for third-party advertising.
How long we keep it
- We keep personal data only for as long as we need it to run the service, meet legal duties, and resolve disputes.
- If a job is closed or archived, résumés, pipeline data, and AI features for that job are removed after 60 days while it stays closed or archived. Job details, post-hiring contacts (name and email), email activity, events, and client submittal history stay.
- You can unpublish or delete Eoslink profile content from the editor. Disconnecting a calendar removes the stored connection.
- Creem keeps payment records under its own retention rules.
Transfers outside the UK and EEA
- Erika Labs is established in the United Kingdom. Some providers process data in the UK, the EEA, or the United States.
- Where the law requires a safeguard for a transfer, we use it. That can include an adequacy decision or standard contractual clauses.
- PostHog analytics for this site are sent to an EU endpoint.
Your rights
- You can ask to access the personal data we hold about you, correct it, delete it, or restrict how we use it.
- You can object to processing based on legitimate interests, including analytics.
- Where the law gives you portability, you can ask for a copy in a common format.
- Where we rely on consent, you can withdraw it. That does not affect processing that already happened.
- If a recruiting organisation controls your application, we may need to refer your request to them, or help them answer it.
- We may ask you to confirm your identity before we act on a request. We aim to reply within one month.
Cookies and analytics
- Essential cookies keep you signed in and keep the service secure. The site does not work properly without them.
- We do not use third-party advertising cookies.
Children
- Eosord is not for anyone under 16. We do not knowingly collect personal data from children.