Privacy Policy
Last updated: 17 August 2026
This policy explains how WorkinVirtual processes personal information when people search for jobs, create candidate or employer accounts, apply, recruit, purchase services, contact support, receive notifications, or use our editorial and AI-assisted features.
Who operates WorkinVirtual
The current website operator and data controller is WorkinVirtual (Private) Limited, Pakistan (company registration H219002). Contact: support@workinvirtual.com. WorkinVirtual CIC (UK company 16560537) was dissolved on 10 March 2026 and is not the current operator or controller.
Information we process
- Account, role, identity and contact details.
- Candidate profiles, resumes, skills, location and work-eligibility preferences.
- Job listings, employer and company-verification information.
- Applications, screening responses, application snapshots, messages, interview scheduling and outcome stages.
- Orders, package entitlements and limited payment records. Card details are handled by the payment provider, not stored by WorkinVirtual.
- Support conversations and tickets, including AI-assistant routing and human escalation.
- Email and browser-notification preferences, device push endpoints, delivery and suppression records.
- Security, fraud-prevention, consent, cookie, advertising and aggregated analytics signals.
Why we use it and our legal grounds
| Purpose | Ground |
|---|---|
| Accounts, applications, hiring tools, purchases and requested support | Performance of a contract or steps requested before a contract |
| Platform security, fraud prevention, quality, service measurement and enforcing rules | Legitimate interests, balanced against user rights |
| Tax, accounting, legal requests and dispute records | Legal obligation or legal claims |
| Optional marketing email, non-essential cookies and browser push | Consent where required; consent can be withdrawn |
Applications, employers and AI
When a candidate applies, relevant application information is shared with the employer responsible for that vacancy. External applications continue on the employer’s website; email applications are delivered to the stated employer address. Employers act independently for information they receive and must use it lawfully.
AI may assist with support triage, drafting, matching explanations or structured interview preparation. It must not make the final hiring, rejection, credit or legal decision. Users may request human support or an alternative process. Do not submit passwords, complete payment-card data, government identity documents or unnecessary sensitive information to the assistant.
Email and browser notifications
Account, application, security, billing and support messages are transactional. Optional job alerts and marketing are controlled separately. Browser notifications require an explicit device permission and a WorkinVirtual subscription; they can be disabled in Manage Subscriptions or browser settings. WorkinVirtual does not import unconfirmed or bounced legacy newsletter contacts into marketing.
Advertising, cookies and measurement
WorkinVirtual uses limited advertising and measurement technologies. Non-essential advertising or measurement storage is subject to the consent choices shown for the visitor where required. Employers and administrators do not receive WorkinVirtual job-application ads. Advertising does not buy editorial conclusions or employer verification.
Google Analytics and Consent Mode. Google Analytics may process device and browser information, approximate location, referring and visited pages, and interactions so we can understand aggregate use, diagnose problems and improve WorkinVirtual. Before Google tags load, WorkinVirtual sets advertising storage, analytics storage, advertising user data and ad personalization to denied by default. Where our Google consent message applies, a visitor’s choice updates those signals. When storage is denied, Google tags may send limited consent-aware, cookieless measurements rather than reading or writing advertising or analytics cookies. Visitors can change their choice through the privacy-options link shown on pages where the consent message applies.
Advertising and US-state choices. Google AdSense and eligible advertising partners may process device, browser, page and advertising-interaction information to deliver, limit, secure and measure ads. Personalized advertising is used only when the required permission is available. Visitors in all current and future US states supported by Google’s privacy-message system are offered a Do Not Sell or Share My Personal Information option. Selecting it sends an opt-out signal for applicable advertising processing. Privacy requests can also be sent to support@workinvirtual.com.
The Privacy Policy URL itself intentionally does not load advertising, Google Analytics or the consent-message tag. This keeps the policy available without requiring consent. See How Google uses information from sites or apps that use its services for more information about Google’s processing.
Service providers and international transfers
We use service providers for hosting and security, email delivery, payment processing, analytics/advertising, trust reviews and AI features. Examples may include Hostinger, the configured SMTP provider, Stripe, Google, Trustpilot and OpenAI. They receive only the information needed for their service and are subject to contractual and access controls.
WorkinVirtual operates from Pakistan and serves users internationally. Where UK data-protection law applies to a restricted transfer, WorkinVirtual must assess the transfer and use an appropriate UK mechanism and safeguards before enabling it. A feature must remain restricted if required safeguards have not been verified.
Retention and security
Notification and email-delivery records are normally retained for up to 120 days. Revoked or expired browser-device endpoints are removed after a shorter operational period. Account, application, support, payment and security records are kept while the workflow is active and afterwards only as necessary for legal, accounting, safety, dispute or fraud-prevention purposes. Backups expire under controlled backup schedules. Access controls, encryption in transit, logging, rate limits and least-privilege administration are used; no system can be guaranteed completely secure.
Your choices and rights
You can correct account information, withdraw optional consent, disable browser push, unsubscribe from optional marketing, request access or deletion, and object or restrict processing where applicable. Some records may be retained where legally required or needed for security and claims. Use Delete Account, Manage Subscriptions, or contact support. Where UK law applies, a person may also complain to the UK Information Commissioner’s Office.
Children and changes
WorkinVirtual is intended for adults aged 18 or older. We may update this policy when services, providers or law change; material changes will be dated and, where appropriate, notified.
Official references: ICO privacy information guidance, ICO direct-marketing checklist, Pakistan MOITT data-protection bill materials.