Privacy notice

What we collect, why, who sees it, how long we keep it, and your rights. We collect as little as we can. Last updated 11 November 2026.

Who is responsible for your information

Eternal Raine Ltd runs The Job Well Done and is the controller of your personal information. We are registered in England and Wales, company number 16505815, and our registered office is 1 Bluebell Drive, Lower Stondon, Henlow, England, SG16 6NN.

For anything about your information, use the contact and complaints form at thejobwelldone.com/contact.

What we collect

When you sign in. You sign in with Google or LinkedIn. They send us your name, your email address, the web address of your profile photo, and an account number that identifies you to them. We never receive or hold a password. We never receive your contacts or connections.

Your declaration. That you are 18 or over, and when you said so.

Your profile. The display name or username you choose, a line about your work, your field, and what you are here for (for example job hunting or hiring). If you choose to add them: a few lines about you, what you can help with, what you are open to, and one link. If you post under your own name, you can choose to show the photo from your Google or LinkedIn account; we never show it beside a username.

What you do on the service. Your posts, replies, questions, answers, votes and "Well done" reactions, with the time of each.

Roasts. When you ask The Roast Council to roast something, we keep what you pasted, what kind of work it was, and what the Council said, with your account, for 12 months. We use it to check and improve the quality of the roasts. Nobody else sees it unless you share your own card. To write the roast, the text is sent to Anthropic, which provides the AI model; Anthropic processes it for us and does not use it to train its models.

Duels. If you start a duel, your version and the Council's are shown, unlabelled, to anyone who has the link, and on the Duel Board only if you tick that box. Duel pages are kept out of search engines. A vote records which version was picked, with a scrambled code for the browser and for the connection so one person cannot vote many times; we never store the address itself. You can delete a duel at any time, which deletes its votes.

The IQ test and The Greats. If you take the free IQ test or The Greats, we keep every answer you give: which question, which option you chose, whether it was right, how long you took and whether you changed it, with the time, whether you were on a phone or a computer, and your room. If you take it before joining, the answers are held against a scrambled code for your browser and become part of your account when you join. Your score and your standing are shown only to you. No employer, recruiter or other member ever sees them, and we never use them to decide what you are shown or to match you to a job. We use the answers, added together, to measure and improve the questions and to publish figures about groups, never about a group of fewer than 100 people and never about you. Your country is asked once, is optional, and is used only for a country ranking. Sharing your result is your choice: the picture and the message are made in your browser and sent only where you send them. The answers are deleted with your account, or sooner if you ask.

View records. To keep the Reach Promise, we record which signed-in member was shown which post, and when. Authors see totals by the readers' fields. They never see who saw their post.

Invites. Your personal invite link, and who joined through whose link.

Reports and moderation. Reports you make or that are made about your content, the reasons given, and any decision we take: hiding, restoring, removing, suspending or closing an account.

Posts our filter refuses. When the tender filter refuses a post, we keep a record that it did, so we can handle complaints about it.

Messages to us. Your name, email address and message when you use the contact and complaints form.

Technical information. Cloudflare, which hosts the service, processes your IP address and basic details of each request (such as your browser type) to deliver and protect the site.

How the site is used. We count the steps people take on the site so we can improve it: which page was opened, which button was pressed, which link was followed, how long a visit lasted, whether it was on a phone or a computer, the country Cloudflare reports for the connection, and the site or campaign link a visit came from. We do this ourselves, on our own server. It uses no cookie and stores nothing in your browser: a visit is given a random number that lives only in the open page and is forgotten when you close or reload it. If you press a sign-in button, that number travels with the sign-in request so we can count how many visits become accounts. When you are signed in, the steps are recorded against your account. We never record what you type in this count, and we never store your IP address in it. These records are deleted after 400 days.

We do not collect your contacts, your precise location, or payment details. We do not use advertising, analytics cookies, tracking pixels or any outside analytics company.

What is public

Posts, replies, questions and answers can be read by anyone, including people without an account, and can be found by search engines. Your display name or username, your line about your work and your field appear beside them, and your photo if you chose to show it. Your public profile page shows what you chose to add to your profile.

If you post under a username, we do not show your real name or your sign-in email beside your posts. We still know who you are from your sign-in, and we would act on that if the law required it.

Think before posting anything about your health, beliefs or other sensitive matters, or about other people. It will be public.

Why we use it, and our lawful basis

• To run your account and the service (sign-in, profile, posts, replies, answers, votes, well dones, rooms): because it is necessary for our contract with you, the terms you accept when you sign in.
• To keep the Reach Promise and show your receipt (view records): necessary for our contract with you, since the promise is part of the service.
• To count invites and the invite reward: necessary for our contract with you.
• To keep the service safe (the 18 and over declaration, reports, auto-hiding, moderation, suspensions, and preventing suspended members from returning): to comply with our legal duties under the Online Safety Act 2023, and in our legitimate interests in protecting members from harm.
• The tender filter: in our legitimate interests, and our members' interests, in keeping discussion within competition law.
• To answer messages and complaints: in our legitimate interests in replying to you, and to meet our legal duty to handle complaints.
• To choose your "Today for you" cards: necessary for our contract with you. The cards are the same for everyone on a given day, and each card says why it is shown.
• To keep records and deal with legal claims: to comply with the law, and in our legitimate interests in defending our position.

Where we rely on legitimate interests, we have weighed them against your rights. You can object, as set out below.

We do not sell your information, and we do not use it for advertising.

Who we share it with

Cloudflare hosts the site and the database (Cloudflare Pages and D1). It acts on our instructions as our processor, under a data processing agreement.

Google and LinkedIn provide sign-in. When you choose one, you deal with them under their own privacy policies. They know you signed in to The Job Well Done. We do not send them your posts or activity.

We may share information with the police, regulators such as Ofcom, or the courts when the law requires it, or to protect someone from serious harm.

If Eternal Raine Ltd or the service were ever sold or reorganised, your information would pass to the new owner, who would have to keep to this notice.

Information about companies in the record cards

"Today for you" cards are drawn from public records: company funding announcements from the AfterRaise record, and UK import figures from the BuzzBaboon record. They are about companies and trade, not about you. If a card names you and you want it changed or removed, tell us through the contact form.

Transfers outside the UK

Cloudflare runs a global network, so your information may be processed outside the UK, including in the United States. Where that happens, it is protected by the safeguards UK data protection law requires. Cloudflare's data processing agreement includes the UK's International Data Transfer Addendum to the EU standard contractual clauses. You can ask us for more detail through the contact form.

Google and LinkedIn handle sign-in data under their own arrangements, explained in their privacy policies.

How long we keep it

• Your account, profile and posts: while your account is open. When you close it, we delete them within 30 days.
• View records: kept in full for 90 days. After that, we keep only totals by post and field, with no member identified.
• Invite records: while either account is open, then deleted within 30 days.
• Reports and moderation decisions: 2 years from the decision, so we can handle appeals and show regulators what we did.
• Suspended accounts: we keep the sign-in account number and the reason for up to 2 years, only to stop the same person returning.
• Records of posts the filter refused: 1 year.
• Messages and complaints sent through the contact form: 2 years.
• Backups: overwritten within 30 days.

We may keep information longer if the law requires it, or if it is needed for a legal claim.

Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct information that is wrong;
• ask us to delete your information;
• ask us to limit how we use it;
• object to our use of it where we rely on legitimate interests;
• ask for the information you gave us in a format you can take elsewhere.

To use any of these, use the contact and complaints form. It is free. We will reply within one month, and tell you if we need longer. We may need to check it is really you.

Some decisions start automatically: the filter refuses tender talk, and content is hidden after three reports. A person reviews hidden content, and you can ask for a person to review a refused post by complaining through the contact form.

Complaining to the regulator

If you are unhappy with how we handle your information, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Cookies

We use one cookie. It keeps you signed in. It is strictly necessary for the service, cannot be read by scripts on the page, and ends when you sign out or when it expires. Because it is strictly necessary, we do not need to ask for consent.

We use no advertising cookies, no analytics cookies and no tracking pixels. Our own count of how the site is used, described above, uses no cookie and stores nothing on your device. If that changes, we will update this notice and ask for your consent first.

Adults only

The service is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If we learn that we have, we will close the account and delete the information.

Keeping it safe

The service runs over an encrypted connection. Only the named director accountable for safety can open the moderation page. No system is perfectly secure, but we take reasonable steps to protect your information, and we will tell you and the ICO about a serious breach when the law requires it.

Changes to this notice

We will update this notice when what we collect or why changes, for example when we add messages or Pro. The date at the top shows when it last changed. We will tell members about important changes on the site, and by email where we can.