_1779075991224-Cfp6YoyO.png){kind=logo}
This policy explains what we collect when you use our website ("Site") or the service we provide through it (the "Service"), how we use it, and the rights you have over your data. Personal data means any information that can identify you, such as your name, email address, postal address or phone number. Please read this policy carefully so you understand how we handle your data. By using the Site or the Service, you agree to this policy.
We may update this policy from time to time to reflect changes in how we collect, use or store data. When we make material changes we will update the date at the top of this page, so please check back now and then.
How we protect your data
RefeRec is Cyber Essentials certified, a UK government-backed scheme that checks an organisation's defences against the most common cyber attacks. Certification covers our whole organisation and was assessed by an accredited body under the IASME Consortium.
Because RefeRec runs on referrals, people trust us with information about their own networks and contacts. We treat that trust as the heart of the product, not an afterthought. Certification is one of the ways we prove our security is independently checked, not just claimed.
Certificate no. 82340595-4626-4f17-b62e-65d0d86682c2 · Certified 17 September 2025 · Valid to 17 September 2026 · Verify
The information we collect
We collect and store information you give us when you register for or use the Site and Service. This can include your name, email address, postal address, phone number, payment details and anything else you choose to share. If you contact us by email, live chat or a support ticket, we keep that correspondence too.
We collect this information when you register, place orders, subscribe to a newsletter, respond to a survey, complete a form, use live chat or open a support ticket. We also collect some data automatically when you use the Site, such as your browser type, IP address and the date and time of your visit.
Referral and platform data
When you register through a referral or company invite, we also collect data tied to how the platform works. This can include your trust score, the status of your invite token, your exclusivity tier and your referral interactions. We use this to run the referral and exclusivity model that the Service is built on.
Cookies
Yes, we use cookies. Cookies are small files stored on your device by your browser (with your permission). They let the Site recognise your browser and remember certain information, such as your preferences, and help us understand how the Site is used so we can improve it.
You can control cookies through your browser settings. Please note that turning cookies off may limit some features of the Site.
Google Analytics
We use Google Analytics to understand how visitors use the Site. It collects data such as your IP address and stores it on Google's servers, which helps us analyse activity and improve the Service. If you would rather your activity was not tracked, you can install the Google Analytics opt-out browser add-on.
Do Not Track
We respect "Do Not Track" signals. If that setting is active in your browser, we will not track you, set tracking cookies or serve advertising.
How we use your information
We may use your information to:
- Run and improve the Site and Service
- Process your transactions
- Send you updates about our products and services
- Respond to your questions, requests and support needs
- Personalise your experience and understand your preferences
- Meet our legal obligations
- Enforce exclusivity tiers and control candidate visibility on the platform
- Calculate and update trust scores, process referral logs and manage attestations
We process your data on the legal grounds set out in UK GDPR, which include your consent, the need to perform a contract with you, and our legal obligations.
Sharing your information
We do not sell, trade or rent your personal information to third parties. We only share it where it is needed to run the Site, meet a legal obligation or protect our rights. That can include trusted partners such as our hosting and service providers, who are contractually required to keep your information confidential and secure.
We may share anonymised, non-identifying information for analytics or marketing purposes.
Your rights under UK GDPR
As a data subject, you have the right to:
- Access the personal data we hold about you
- Ask us to correct inaccurate or incomplete data
- Ask us to delete your personal data
- Restrict how we process your data
- Object to us processing your data
- Ask us to transfer your data to another provider
- Withdraw your consent at any time
To exercise any of these rights, email us at support@referec.com. We will respond within one month, as UK GDPR requires.
Keeping and deleting your data
We keep your personal data only for as long as we need it for the purposes we collected it, or for as long as the law requires. You can ask us to delete your data by emailing support@referec.com. We will confirm we have received your request within 10 business days and process it within 30 calendar days.
Security
We take data protection seriously and use a range of measures to protect your personal information, backed by our Cyber Essentials certification. No system can ever be completely secure, so while we work hard to protect your data we cannot guarantee absolute security.
Links to other sites
The Site may link to other websites we do not control. We are not responsible for their content or privacy practices, so please check their privacy policies before sharing any personal information with them.
Children's privacy
The Site and Service are not intended for anyone under 16, and we do not knowingly collect data from children under 16. If we learn we have collected such data by mistake, we will delete it promptly. If you think we may hold information about a child under 16, please contact us at support@referec.com.
Contact us
If you have any questions about this policy or want to exercise your rights, email us at support@referec.com.