LEGAL

PRIVACY POLICY

BonaFide Pro ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store and protect your personal data when you use the BonaFide Pro platform at bonafide-pro.com. It applies to all users — candidates, clubs, and visitors.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions about this policy, contact us at: bonafideproadmin@gmail.com

1. WHAT DATA WE COLLECT

We collect the following categories of personal data:

Candidates:

  • Full name, email address, password (hashed — never stored in plain text)
  • Role, years of experience, country of residence
  • Bio, tool stack, project descriptions, uploaded files and attachments
  • Avatar/profile image (if uploaded)
  • Tier status, verification history, and gap analysis activity
  • Messages sent and received on the platform
  • Notification records

Clubs:

  • Club name, email address, password (hashed)
  • Country, league, pricing tier
  • Search history and search filters used
  • Job postings created on the platform
  • Messages sent and received on the platform

All users:

  • Login session data (stored in a secure HTTP-only cookie)
  • Feedback messages submitted via the platform

2. HOW WE USE YOUR DATA

We use the data we collect for the following purposes:

  • To create and manage your account on the platform
  • To verify candidate projects and update tier status
  • To enable clubs to search for and contact verified candidates
  • To show candidates the gap analysis between their skills and club search requirements
  • To facilitate direct messaging between clubs and candidates
  • To deliver notifications about project verification outcomes
  • To respond to feedback and support enquiries
  • To maintain the security and integrity of the platform
  • To improve the platform based on usage patterns

We do not sell your personal data to third parties. We do not use your data for advertising purposes. We do not share your data with any third party except where required by law.

3. LEGAL BASIS FOR PROCESSING

Under UK GDPR, we rely on the following legal bases for processing your data:

  • Contract performance: Processing necessary to provide the services you have signed up for — account management, verification, messaging, search.
  • Legitimate interests: Processing necessary for the security of the platform, fraud prevention, and improving services, where these interests are not overridden by your rights.
  • Consent: Where you have provided explicit consent, such as uploading optional profile information like a bio, avatar, or project attachments.
  • Legal obligation: Where we are required to process data to comply with applicable law.

4. HOW WE STORE YOUR DATA

Your data is stored on secure servers. Passwords are hashed using a one-way hashing algorithm (bcrypt) and are never stored in plain text or recoverable by us.

Uploaded files (project attachments, avatar images, message attachments) are stored on the server file system under access controls. We do not share these files publicly beyond what is visible within the platform.

Session authentication uses a secure, HTTP-only cookie that expires after a period of inactivity.

We retain your data for as long as your account is active. If you delete your account, your personal data is removed from our systems within 30 days, except where we are required by law to retain it for longer.

5. DATA TRANSFERS

BonaFide Pro is operated in the United Kingdom. If you are accessing the platform from outside the UK, please be aware that your data may be processed in the UK. We take reasonable steps to ensure that your data is protected to the standards required under UK GDPR regardless of where it is processed.

6. COOKIES

We use a single authentication cookie to keep you logged in between sessions. This cookie is:

  • HTTP-only (not accessible to JavaScript)
  • Secure (only transmitted over HTTPS)
  • Used solely for authentication — not for tracking or advertising

We do not use third-party tracking cookies, analytics cookies, or advertising cookies.

7. YOUR RIGHTS UNDER UK GDPR

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of all personal data we hold about you.
  • Right to rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to erasure: You can ask us to delete your personal data. Candidates can delete their account directly from their dashboard. Clubs can contact us to request deletion.
  • Right to restriction of processing: You can ask us to limit how we process your data in certain circumstances.
  • Right to data portability: You can request your data in a structured, machine-readable format.
  • Right to object: You can object to processing based on legitimate interests.
  • Rights related to automated decision-making: We do not make any solely automated decisions that significantly affect you.

To exercise any of these rights, email us at: bonafideproadmin@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data appropriately.

8. THIRD-PARTY LINKS

The platform includes links to external course providers and tools. We are not responsible for the privacy practices of these third-party websites. We recommend you review their privacy policies before submitting any personal data to them.

9. CHILDREN

BonaFide Pro is not intended for use by persons under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a person under 16 has registered on the platform, please contact us immediately.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify registered users of any material changes via the platform. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. CONTACT

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at:

bonafideproadmin@gmail.com