Privacy Policy

Last updated: 30 September 2026

1. Who we are

GoodJobs4U ("we", "us", "our") operates the HK Jobs Database at this website (the "Service"), an aggregated database of publicly advertised job vacancies in Hong Kong. For the purposes of applicable data-protection law, we are the data controller (or "data user") of the personal data described below.

2. Information we collect

a. Information you give us

• Account data: your email address, and a username if you provide one.
• Credentials: your password, which we store only as a one-way cryptographic hash — we never store or can recover your plain password.
• Optional profile data: a mobile number or comments, if you choose to supply them.
• Verification data: the one-time email verification code sent to you, together with its issue and expiry times.

b. Information created when you use the Service

• Account status: whether your account is Free or Pro, and your trial/upgrade status.
• Session data: a signed authentication token (JWT) that keeps you logged in, stored in your browser's local storage.
• Technical logs: server logs recording requests, timestamps, error messages and IP addresses, used for security and troubleshooting.

c. Payment information

• When you upgrade to Pro, our payment provider Waffo Pancake processes the transaction. We receive and store only the order reference, the amount, the payment status, and Waffo's transaction identifier — enough to confirm your purchase and provide support.
• We never receive or store your bank card, bank account or Waffo Pancake credentials.

d. Information we do not collect

• We do not collect sensitive personal data (such as health, biometric, political or religious information).
• We do not buy personal data from data brokers, and we do not use your data for third-party advertising.

3. How we use your information

• To create and manage your account and verify your email address.
• To authenticate you and keep you signed in.
• To provide the Service, including search, filtering and Apply links, and to enforce the free-trial limit.
• To process your Pro upgrade, confirm payment and provide related customer support.
• To send service messages (for example verification codes, and important notices about your account or these policies). These are transactional, not marketing, messages.
• To keep the Service secure, prevent abuse, investigate fraudulent or duplicate accounts, and enforce our Terms of Service.
• To comply with legal obligations and respond to lawful requests.

Our legal bases for processing (where required) are: performance of our contract with you (providing the account and the paid upgrade), our legitimate interests (security, abuse prevention, service improvement), your consent (where separately requested), and compliance with legal obligations.

4. Cookies and local storage

We do not use advertising or third-party tracking cookies. We use your browser's local storage to hold the authentication token and your account type so that you stay logged in and the interface can display the correct features. Clearing your browser storage or logging out removes this data.

Some pages load assets from third-party content-delivery networks (such as Font Awesome and Google Fonts). When those assets load, the provider may see your IP address and browser information. Their handling of that data is governed by their own privacy policies.

5. How we share information

We do not sell your personal data. We share it only with the following categories of recipients, and only as needed:

• Waffo Pancake — to process your payment and confirm the transaction.
• Email delivery provider (Aliyun DirectMail, via our sending domain) — to deliver verification codes and service emails to you.
• Infrastructure and hosting providers — who store and serve the Service on our behalf.
• Professional advisers and authorities — where we are legally required to disclose information, or where disclosure is necessary to establish, exercise or defend legal claims.

Where we engage service providers, we require them to protect your data and to use it only for the purposes we specify. We do not share your email address with employers; when you click an "Apply" link you leave our Service, and any information you then provide is given directly to that employer under their own privacy policy.

6. How long we keep data

• Account data is kept while your account is active and deleted or anonymised within a reasonable period after you request deletion.
• Verification codes are short-lived and expire automatically (currently after 15 minutes).
• Payment and transaction records are kept for as long as required for accounting, tax, dispute-resolution and anti-fraud purposes (typically up to 7 years).
• Server logs are kept for a limited period for security and troubleshooting.

7. How we protect data

• Passwords are stored as salted one-way hashes, never in plain text.
• Data in transit is protected with TLS/HTTPS.
• Access to production systems is restricted to authorised operators.
• Payments are handled entirely by Waffo Pancake's secure hosted checkout, so card and bank credentials never touch our servers.

No system can be guaranteed to be perfectly secure. Please choose a strong, unique password and keep it confidential.

8. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your account and personal data;
• object to or ask us to restrict certain processing;
• withdraw consent where processing is based on consent (this does not affect processing already carried out);
• complain to your local data-protection authority.

To exercise any of these rights, email us at service@goodjobs4u.com or contact us on WeChat at _scott0421. We will respond within a reasonable period, normally within 30 days, and may ask you to verify your identity first.

9. Children

The Service is intended for people who are old enough to work. It is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. International transfers

Our servers and some of our service providers may be located outside your country or region (for example, in mainland China, Hong Kong or Singapore). Where we transfer personal data internationally, we take steps to ensure it remains protected in accordance with this policy and applicable law.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always published on this page, with the "Last updated" date shown at the top. Material changes will be notified by email or by a notice on the site.

12. Contact us