Work Hub privacy policy
Contents
Who we are
We are the Work Hub service, part of the Department for Work and Pensions (DWP).
You can choose whether you use this service.
When you do, we may collect, keep and use your personal information in line with this policy.
Personal information is any data that can identify you. This includes things like:
- your name
- your email address
- anything linked to you when you use the service, such as your CVs or job searches
DWP is the data controller. This means we decide what personal information we collect and how we use it.
We may use your information for any of our purposes. We will treat it carefully.
To learn about how we use your information, see DWP's personal information charter (opens in a new tab).
The service contains links to other websites. Check other organisations' privacy policies before sharing personal information.
Read this policy along with Work Hub's terms of use and cookies policy.
Information we collect
You can sign in with GOV.UK One Login to use this service.
The controller for One Login's sign‑in and identity‑check data is the Government Digital Service. It is part of the Department for Science, Innovation and Technology.
Read the GOV.UK One Login privacy notice (opens in a new tab) for how they use that information.
We receive your email address from One Login so that you can use this service.
All other personal information we collect comes from you. We do not get it from anywhere else.
The kinds of information we collect are:
- the email address linked to your GOV.UK One Login account
- information generated when you use the tools, like your CVs and job searches
- technical data like your IP address or device type (this does not identify you as an individual to us)
- technical data about how you use the service
We collect this information so we can run the service safely and make it work well for you.
We only collect the information we need to:
- provide the tools, like Build a CV and the AI work assistant
- keep improving the service
- keep everything secure
- keep everything working properly
For AI work assistant, we use Anthropic's Claude models hosted on AWS Bedrock within DWP-controlled accounts.
When you contact us
Your contact details are deleted in 24 months if you:
- choose to give them when reporting a job (using the link on each advert)
- contact us to ask a question or report a problem
Why we use it
We will use your information to:
- help you search and apply for jobs
- maintain your account
- personalise guidance
- improve the service
- understand general UK employment trends
- understand how people use the service
Our legal basis
The Employment and Training Act 1973 allows DWP to run employment services for the public.
So that we can do that, GDPR Article 6(1)(e) contains our legal basis for collecting and using your personal information.
DWP collects and uses your information when it needs to do a job that is in the public interest, or when the law gives DWP the power to do so.
Who we share it with
We host and process your data in the UK.
We only share your personal information with organisations and suppliers that work with us.
Amazon Web Services
Amazon Web Services (AWS) provide a private cloud infrastructure for DWP. AWS host and process your data under DWP's instructions to protect your information.
As the data processor, AWS is not permitted to use your information for any other purpose.
DeskPro
DeskPro provides a platform for DWP to respond to messages when you contact us. If you choose to share contact details, they will be deleted in 24 months.
Employers
When you choose to apply for a job through the service, we will send the employer your:
- name
- CV
- email address
- cover letter if you choose to write one
Your information is then processed under that employer's privacy policy.
For more details see DWP's personal information charter (opens in a new tab).
How long we keep it
We keep your personal information for as long as you use Work Hub. This is so that you return to your saved CVs, job search history and favourite jobs whenever you want to.
When we no longer need your personal information to run the service, we delete it or anonymise it. Anonymised data has all personal details removed so no one can identify you.
We keep anonymised records of your chat history and account activity for up to 24 months to:
- check safety and quality
- help people who report problems with their account
- protect the service from misuse
We then delete this information.
We do not use it for benefit claims.
We remove inactive accounts and delete your information after 24 months to:
- make sure your personal information is safe
- we are not holding it for longer than necessary
Some information may stay for a short time in secure backup systems. We stop it from being used and delete it as soon as possible.
Your rights
You have rights over your personal information. These include:
- seeing it
- asking us to change it
- asking us to delete it
Our tools may suggest jobs or give information based on what you do in the service, but you are always in control. You can change or ignore it.
Read more about your rights in DWP's personal information charter (opens in a new tab).
How to use your rights
For a full explanation, see Your rights when DWP uses your information (opens in a new tab) in the personal information charter.
Deleting your personal information
You are in control of your personal information. You can delete personal information in your account, such as CVs, whenever you want.
Deleting your account
You can delete your account at any time. Doing so immediately removes:
- your personal information
- your CVs
We delete your chat history and account history 24 months later. Your account history includes things like when you logged in or applied for a job.
Taking part in research
We may contact you to ask if you'd like to take part in research, such as interviews, surveys and usability testing. It's up to you whether you take part. You can opt out when we contact you.
Contact DWP's data protection officer
If you have questions or comments about how we use your information, contact DWP's data protection officer (Personal information charter) (opens in a new tab).
Do not contact the data protection officer to ask for a copy of information that DWP holds about you.
Instead, Request your personal information from the Department for Work and Pensions (opens in a new tab).