Privacy Policy

1. Who we are

sg.hire.moi is a jobs board for Singapore. This policy explains what personal data we collect when you use sg.hire.moi, the purposes we use it for, who we share it with, and how you can ask to see or correct it under Singapore's Personal Data Protection Act 2012 (the "PDPA"). The operator is a company registered in England and Wales, so UK data protection law (the UK GDPR and the Data Protection Act 2018) also applies to how we handle your data, and gives you the additional rights set out in section 8.

The organisation responsible for your personal data is the operator of sg.hire.moi, set out below and in the Legal Notice. You can reach our data protection officer at hello@hire.moi.

• Operator: HireMoi Ltd
• Registered office: 20-22 Wenlock Road, London, N1 7GU, England
• Registered in England and Wales, company number 17506640
• Email: hello@hire.moi

2. The personal data we collect

When you browse

Our hosting provider receives your IP address, browser and device details, the pages you request and the page that referred you. It uses them to deliver pages and protect the site from abuse, and records requests in logs that we use to find and fix faults.

Analytics

We may use Google Analytics to understand how sg.hire.moi is used. If you accept analytics cookies, it sets cookies that recognise your browser across visits. Before you choose, and if you decline, it sets no cookies and writes nothing to your device, but still sends measurement signals (such as the page viewed and browser details) that Google uses for aggregated, modelled reports. We keep advertising features switched off. See the Cookie Policy.

When you contact us

The contact form collects your company name, work email address and message. If you send feedback about a page, we collect your message, the page and, where relevant, the advert it concerns; an email address is optional and used only to reply to you. In both cases we also record the IP address and browser details sent with the form, only to prevent spam and abuse. We store submissions in our database and forward them to our inbox by email. Using either form is voluntary; the contact form needs every field it asks for, and without them we cannot reply to you.

Searches

Some searches may be interpreted by an AI model run by our hosting provider, which receives only the search text and filters. When a search finds no jobs, or we cannot match a location you typed, we record the search text and the date, with no identifier, to improve search. Please do not type personal details into the search box.

Error reports

If a page fails in your browser, it sends us the error message, technical details and the page address, without any query string, so we can fix it.

On your device

Saved jobs and some display preferences are stored in your browser, not by us. When you open your saved jobs, your browser sends us the list of saved adverts so we can show them; we do not keep that list.

We do not collect CVs or applications

sg.hire.moi links to each advert on the employer's own careers site. You apply there, under the employer's own terms and privacy policy. We do not ask for, receive or keep your CV or NRIC number, and we do not pass your details to employers.

People named in job adverts

sg.hire.moi republishes adverts from employers' own careers sites and recruitment platforms, with a link to apply at the source. An advert can include the name or work contact details of a recruiter or hiring manager, as the employer published it. If you are named in an advert and want it corrected or removed, contact us at hello@hire.moi.

3. What we use it for

We use personal data only for the purposes below. For each we say what allows it: under the PDPA, your consent or an exception the Act provides; under UK law, a lawful basis.

• Delivering and securing the site, and fixing faults: the PDPA's legitimate interests exception; under UK law, our legitimate interests in running a reliable, safe service.
• Replying to your enquiry or feedback: your consent, given by sending the form; under UK law, our legitimate interests, or steps you ask us to take before entering into a contract.
• Preventing spam and abuse: the legitimate interests exception; under UK law, our legitimate interests.
• Analytics cookies: your consent, which you can withdraw at any time.
• Measurement without cookies, before or without consent: the legitimate interests exception; under UK law, our legitimate interests in understanding, in aggregate, how the site is used. You can object at any time.
• Republishing publicly advertised jobs so candidates can find them in one place: the PDPA's exception for publicly available data; under UK law, our legitimate interests, and those of candidates.
• Meeting legal obligations, where they apply.

Where we rely on the legitimate interests exception, we have assessed that the benefit outweighs any adverse effect on you. You can ask us about that assessment at hello@hire.moi.

We do not use your personal data for marketing messages, and we do not sell it.

4. Who we share it with

We use these service providers, who process data for us under their data processing terms:

• Cloudflare: hosting, content delivery, security, storage, request logs, cookie-free page-view statistics and the AI model behind search
• Neon: our database, hosted on Amazon Web Services in Germany, with an older recovery copy in the United States
• Resend: delivering enquiries and feedback to our inbox
• Google: Google Analytics, and Google Maps when a job page shows an office map

We may also disclose data where the law requires it.

5. Data held outside Singapore

Our operator is in the United Kingdom, and our providers store and process data outside Singapore, including in the United States and Europe. We choose providers whose contractual terms require them to protect the data they process for us to a standard comparable to the PDPA. For transfers out of the UK, we rely on the UK Extension to the EU–US Data Privacy Framework where a provider is certified under it, and otherwise on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses in the provider's data processing terms.

6. How long we keep it

• Request and error logs: up to 30 days.
• Enquiries and feedback: for as long as we need to handle them and any follow-up, and no longer than 24 months.
• Analytics: Google Analytics keeps event-level data for at most 14 months.
• Search records hold no identifiers and are kept to improve search.
• Data in your browser stays there until you clear it.

7. Your choices: access, correction and withdrawing consent

Under the PDPA you can ask for the personal data we hold about you and how it has been used or disclosed in the past year, and ask us to correct it if it is inaccurate. You can also withdraw your consent at any time; for analytics cookies, use Cookie Settings in the site footer. Withdrawing consent to analytics cookies does not affect how the site works; withdrawing it for an enquiry means we can no longer reply to it.

Send access, correction or withdrawal requests to our data protection officer at hello@hire.moi. We will reply as soon as we reasonably can, and within 30 days; if we need longer, we will tell you within that time when we expect to reply. We do not charge for access or correction.

If you are not satisfied with how we handle your personal data, you can complain to the Personal Data Protection Commission, Singapore, at www.pdpc.gov.sg. We would appreciate the chance to deal with your concern first.

8. Your rights under UK law

Because the operator is in the UK, you also have the right to:

• have your data erased
• restrict our use of your data
• object to processing based on our legitimate interests
• receive data you gave us in a portable format

Send these requests to the same address; we reply within one month. You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

We do not make decisions about you based solely on automated processing. Search results are ranked automatically, but that ranking is not a decision about you.

9. Security

Data is encrypted in transit, and our providers encrypt the data they store. Access to the database and logs is restricted to the operator. If a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as the PDPA requires, and the UK Information Commissioner's Office where UK law requires.

10. Changes to this policy

We will update this policy when our processing changes, and change the date at the top of the page.