AP Finder is in testing — things might break. Spotted a problem? Email hello@apfinder.co.uk.
AP Finder

Data Processing Terms

Last updated: 5 November 2026 · Applies to paid provider (listing owner) accounts

This page explains, plainly, how personal data flows between AP Finder and your provider account when someone enquires about your listing or applies for a job you've posted — and what that means under UK GDPR.

We're each independent controllers, not processor and client

When a member of the public submits an enquiry about your listing, we collect their name, email, phone (if given) and message because we decide to run an enquiry form and choose what it asks for — that makes AP Finder a data controller for that enquiry in our own right, not a processor acting on your instructions. We forward the enquiry to you by email so you can respond. Once you receive it, you become a separate, independent controller of that person's data for your own purposes (following up, record-keeping, etc.). This is the correct characterisation under UK GDPR — a formal Article 28 processor agreement wouldn't apply here, because we're not processing it only on your instructions. If your organisation's own compliance documentation needs a data-sharing statement rather than a processor agreement, this page is it; get in touch if you need it in a different format.

What this means for you, as the receiving controller

  • Use enquiry details only to respond to that enquiry — not for unrelated marketing unless the person separately consents.
  • Keep the data secure, and don't share it further without a lawful basis of your own.
  • Handle any request from that person to access, correct or delete their data as its own controller — you're responsible for your own UK GDPR compliance once you've received it.
  • If you believe an enquiry contains special category data (for example about a child's health or needs), handle it with the same care you'd apply to any sensitive referral information you receive in the course of your work.

Job postings

We don't handle job applications on your behalf — your job post can include your own contact email and application link, and applicants go directly to you. We hold no applicant data.

Your own listing and account data

For your own account and listing data (what we collect from you, why, and how long we keep it), see our main Privacy Policy — that relationship (us holding your account/listing data to run the service you've subscribed to) is us acting as controller under our contract with you, which is the normal position for any SaaS-style account, not a processor arrangement either.

Sub-processors

The providers we use to run AP Finder (and therefore who may handle an enquiry on its way to you) are listed in our Privacy Policy: AWS (hosting/database/auth), Brevo (email delivery), Stripe (payment), Cloudflare (bot protection), and Anthropic (AI matching features).

Questions

If your organisation needs a different form of documentation for its own data-protection records, contact us at hello@apfinder.co.uk and we'll work with you on it.