Legal

GDPR and Data Rights

Information for users in the EEA/UK about data protection rights and how to exercise them.

Last updated: 12 March 2026

1. Your GDPR rights

Under GDPR, you may have the right to:

  • Request access to personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your personal data in certain circumstances.
  • Request restriction of processing in certain circumstances.
  • Object to processing based on legitimate interests.
  • Request data portability where processing is automated and contract/consent-based.
  • Withdraw consent where consent is the legal basis.

2. How to make a request

Email support@hireloom.app with the subject line "GDPR Request" and tell us which right you want to exercise. To protect account security, we may request identity verification before completing your request.

3. Response timelines

We aim to respond without undue delay and within one month, as required by GDPR. For complex requests, this period may be extended where law permits, and we will inform you accordingly.

4. International transfers

Some providers are located outside the EEA. Where required, we use transfer safeguards such as Standard Contractual Clauses and related supplementary protections.

5. Automated processing

Hireloom uses AI-assisted processing to generate and revise resume and cover-letter content. Final review and use of generated output remains your decision.

6. Supervisory authority complaint

If you are unhappy with how your data is handled, you can lodge a complaint with your local supervisory authority. In Ireland, this is the Data Protection Commission (DPC).