1. ABOUT THIS POLICY
1.1 Purpose. This Cookie Policy explains how Jobmerger Support Services Ltd ("Jobmerger", "we", "us", "our") uses cookies and similar technologies on our website at https://jobmerger.com (the "Website"), our web platform and our mobile application (together with the web platform, the "Platform"), and how you can control them.
1.2 Legal framework. Our use of these technologies is governed by the Privacy and Electronic Communications Regulations 2003 ("PECR"), as amended by the Data (Use and Access) Act 2025, and, where they involve personal data, by the UK GDPR and the Data Protection Act 2018.
1.3 Related documents. This policy should be read with our Privacy Policy, which explains how we use personal data, and our Mobile App Use Policy.
2. WHAT COOKIES AND SIMILAR TECHNOLOGIES ARE
2.1 Cookies. Cookies are small text files placed on your device when you visit a website. They can be "first-party", set by us, or "third-party", set by another organisation whose services we use. They can last only for your browsing session or remain for a set period.
2.2 Similar technologies. We use "cookies" in this policy to include similar technologies that store or access information on your device, such as local storage in your browser, pixels, and, in the mobile app, software development kits ("SDKs"), device identifiers and push notification tokens.
3. HOW WE DECIDE WHEN WE NEED YOUR CONSENT
3.1 Consent by default. Under PECR we must ask for your consent before storing or accessing information on your device, unless an exemption applies.
3.2 Exempt technologies. We do not ask for consent for technologies that are strictly necessary to provide the Website or Platform you have requested, or that fall within the other exemptions in PECR, for example technologies used solely to keep the Platform secure, to remember choices you make about how the Platform looks or works, or to install necessary software updates.
3.3 Analytics. PECR now permits certain analytics used solely to produce statistical information to improve a service, provided that clear information and a simple way to object are given. Unless and until we confirm in this policy that a particular analytics tool meets every condition of that exemption, we ask for your consent before using analytics cookies. If we later rely on the exemption for a tool, we will update this policy, explain it in our cookie settings and give you an easy way to object.
3.4 Non-essential technologies. Performance, analytics and marketing technologies that are not exempt are used only if you accept them.
4. CATEGORIES OF COOKIES WE USE
4.1 Overview. We use the following categories. Our cookie settings tool lists each individual cookie by name, provider, purpose and duration, and is kept up to date as our tools change.
Category | What it does | Where used | Consent needed |
Strictly necessary | Keeps you signed in, keeps sessions secure, balances server load, remembers your cookie choices and protects forms against misuse | Website and Platform | No |
Security | Detects suspicious log-in activity, enforces multi-factor authentication and protects against fraud and attacks | Platform | No |
Functionality | Remembers your language, display preferences and the last screen or service user you viewed | Platform | No, where used only for choices you make |
Performance and analytics | Measures visits, page performance, feature use and errors, so that we can improve the Website and Platform | Website and Platform | Yes, unless Section 3.3 is updated to state that an exemption applies |
Marketing | Measures the effectiveness of our advertising campaigns and may show you relevant adverts about our services on other sites | Website only | Yes |
4.2 No marketing cookies in the Platform. We do not use marketing or advertising cookies, or advertising SDKs, inside the web platform or the mobile app, where care records are viewed and created.
5. STRICTLY NECESSARY AND SECURITY COOKIES
5.1 Why they are needed. These technologies allow you to log in, move between pages without signing in again, and keep health and care information protected. The Platform cannot work properly without them.
5.2 Controls. You can block them in your browser, but parts of the Website and the Platform will then not work.
6. PERFORMANCE AND ANALYTICS COOKIES
6.1 Purpose. These help us understand which pages and features are used, how long pages take to load and where errors occur.
6.2 Data minimisation. We configure analytics tools to avoid collecting the content of care records, and we do not allow analytics providers to use the data for their own advertising purposes where their settings let us prevent it.
7. MARKETING COOKIES
7.1 Purpose. On the Website only, and only with your consent, marketing technologies help us understand which campaigns bring visitors to the Website and may allow advertising platforms to show you adverts about our services.
7.2 Third parties. These are set by advertising platforms that may combine the data with other information they hold about you, under their own privacy notices.
8. MOBILE APP TECHNOLOGIES
8.1 Necessary SDKs. The app uses SDKs and device identifiers to authenticate you, deliver push notifications about visits and messages, store data securely on your device for offline working and report crashes so that we can fix them.
8.2 Optional analytics. Where we use in-app analytics that are not exempt from consent, we ask for your agreement in the app and you can change your choice in the app's privacy settings.
8.3 Device permissions. Permissions such as location, camera, microphone, notifications and biometric unlock are controlled through your device settings and are explained in our Mobile App Use Policy.
8.4 No cross-app tracking. We do not track you across other companies' apps or websites for advertising purposes from within the app.
9. HOW LONG COOKIES LAST
9.1 Duration. Session cookies are deleted when you close your browser. Persistent cookies remain for the period shown in our cookie settings tool, after which they expire. We set the shortest duration that serves each purpose, and we ask you to renew your consent choices at least every 12 months.
10. MANAGING YOUR CHOICES
10.1 Our cookie banner. When you first visit the Website, our banner lets you accept all, reject all non-essential cookies, or choose by category. Rejecting is as easy as accepting.
10.2 Changing your mind. You can change or withdraw your consent at any time through the "Cookie settings" link in the Website footer or in the Platform's account settings. Withdrawal does not affect use that took place before it.
10.3 Browser and device settings. Most browsers let you block or delete cookies. Your device settings let you reset your advertising identifier and control app permissions. Guidance is available at https://ico.org.uk.
11. CHANGES TO THIS POLICY
11.1 Updates. We will update this policy when we change the technologies we use or when the law changes. The effective date at the top shows when it was last updated. Where a change requires new consent, we will ask for it.
12. CONTACT
12.1 Questions. If you have questions about this policy, email info@jobmerger.com or write to Jobmerger Support Services Ltd at St. James House, Hollinswood Road, Central Park, Telford, England, TF2 9TZ. You also have the right to complain to the Information Commissioner's Office at https://ico.org.uk.
Cookie list
This list covers everything the Jobmerger website and web platform store on your device today. We do not use analytics or marketing cookies on the website or in the platform at present. If that changes we will update this list and this policy first, and ask for your consent before using them.
| Name | Where | Type | What it is for | How long | Category |
|---|---|---|---|---|---|
| jm_consent | jobmerger.com (website) | Browser storage | Remembers your cookie choice so we do not ask again on every visit. | 12 months | Strictly necessary |
| accessToken | Web platform | Cookie (HttpOnly, Secure, same-site strict) | Keeps you signed in and secures your requests. | 45 minutes, renewed while you work | Strictly necessary |
| refreshToken | Web platform | Cookie (HttpOnly, Secure, same-site strict) | Renews your sign-in without asking for your password again. | Up to 7 days, or until you sign out | Strictly necessary |
| Session details | Web platform | Browser storage | Your signed-in session, role and organisation, so the platform can show the right screens. | Until you sign out or clear your browser data | Strictly necessary |
| Display choices (for example the rota view and columns you chose) | Web platform | Browser storage | Remembers how you like screens laid out. | Until you clear your browser data | Functionality |
| Onboarding and assistant conversation | Web platform | Browser storage | Remembers that you have finished the welcome steps, and keeps your current assistant conversation on this device. | Until you clear your browser data | Functionality |
The mobile app stores your sign-in, the records you need offline and your push notification token securely on your device. It uses no advertising or analytics software.