Privacy Policy

Last updated: October 11, 2026

Please read this Privacy Policy carefully before using Our Service.

This Privacy Policy describes how We collect, use, store, and share Personal Data when You use the Service, and the rights and choices You have. It applies to information collected through the Website. It does not cover information collected offline, or the practices of third-party websites that the Service links to.

By accessing or using the Service, You agree to this Privacy Policy. If You do not agree, please do not use the Service. Your use of the Service is also governed by Our Terms and Conditions.

Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
  • Company (referred to as either "the Company", "We", "Us" or "Our" in this Privacy Policy) refers to BruKerja, Brunei Darussalam. The Company is the data controller for Personal Data processed through the Service.
  • Cookies means small files placed on Your Device. The Service also uses similar storage on Your Device, such as local storage, as described in this Privacy Policy.
  • Country/State refers to: Brunei
  • Device means any device that can access the Service such as a computer, a cell phone or a digital tablet.
  • Personal Data means any information that relates to an identified or identifiable person, including a name, email address, phone number, IP address, and online identifiers.
  • Processing means any operation on Personal Data, including collection, storage, use, disclosure, and deletion.
  • Service refers to the Website.
  • Service Provider means any natural or legal person who processes Personal Data on behalf of the Company. Service Providers help Us operate, host, and improve the Service.
  • Usage Data means data collected automatically when You use the Service, such as Your IP address, browser type, Device type, pages visited, and the date and time of Your visit.
  • Website refers to BKerja, accessible from https://bkerja.radiant-lab.com
  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using the Service, We may ask You to provide Personal Data that can be used to contact or identify You. This may include:

  • Name, email address, phone number, and message content that You submit through a contact form
  • A curriculum vitae (CV) and any details You include when You email Us for the talent pool
  • Name, email address, and account credentials for people authorised to operate the Service
  • Details You choose to include in a job listing, company profile, or application link, which may be published on the Website

Do not include private information in a public job listing. Information published in a listing can be viewed by visitors to the Service.

Usage Data

Usage Data is collected automatically when You visit the Service. Usage Data may include:

  • Your IP address, browser type and version, operating system, and Device type
  • Pages You visit, the time and date of Your visit, how long You stay, and the referring address
  • HTTP request headers and server log data
  • A visitor identifier used to count unique clicks on an Apply button
  • Cookie identifiers and similar storage described below

Apply clicks

When You use an Apply button, the Service may store the job You selected together with a random visitor identifier. This is used to count unique applications for that listing. The identifier does not include Your name or email address. The application itself is sent to the employer through the link or email address shown on the listing. We do not receive the contents of that application unless it is sent directly to Us.

Talent pool

If You email a CV to the talent pool address shown on the Website, We use that message to review Your interest in roles and to reply to You. Please send only information You are comfortable sharing for that purpose.

Tracking Technologies and Cookies

We use Cookies and similar technologies to operate the Service and, where You allow it, to remember how You use the job listings. On Your first visit, the Service shows a cookie notice. You can accept all, reject non-essential Cookies, or set Your own preferences. Your choice is stored on Your Device and is used on later visits. You can open the cookie settings again from the Service.

You can also control or delete Cookies through Your browser settings. If You disable strictly necessary Cookies, parts of the Service may not work.

  • Strictly necessary. These Cookies operate the Service, keep the site secure, and count unique Apply clicks. They cannot be switched off in the cookie notice. Examples include session and security Cookies, and the visitor identifier cookie (bkerja_vid). Session Cookies last for the session. The visitor identifier lasts for up to 1 year.
  • Analytics. If You allow analytics, the Service remembers job posts You have already seen on this Device, so listings You have viewed can be treated accordingly. This preference is stored on Your Device (bkerja-seen-jobs, together with Your cookie choice) for up to 14 days.

We do not use third-party advertising Cookies, and We do not use Google Analytics, Google Ads, Meta Pixel, or similar ad-measurement tools on the Service.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

  • Operate the Service. To publish job listings, show the Website, and respond to messages You send Us. The legal basis is contract, or legitimate interests.
  • Applications and the talent pool. To count unique Apply clicks, and to review CVs You email to Us. The legal basis is legitimate interests.
  • Site preferences. To remember Your cookie choice and, if You allow it, job posts You have seen. The legal basis is consent.
  • Security. To detect abuse, protect the Service, and keep server logs. The legal basis is legitimate interests.
  • Legal compliance. To meet a legal duty, regulation, or binding request from a public authority. The legal basis is legal obligation.

We may also use Personal Data for another purpose when You have given Your consent. You may withdraw that consent at any time. Withdrawal does not affect Processing that took place before the withdrawal.

Retention of Your Personal Data

We keep Personal Data only for as long as needed for the purposes in this Privacy Policy, or for as long as the law requires.

  • Cookie choice and analytics preference. Kept until You clear site data on Your Device, or change Your choice, so We can honour the choice You made.
  • Seen job posts. Kept for up to 14 days on Your Device, so We can remember listings You have already viewed.
  • Visitor identifier cookie. Kept for up to 1 year, so We can count unique Apply clicks.
  • Apply-click records. Kept while needed to measure interest in a listing, and for a reasonable period afterwards for operation of the Service.
  • Contact form messages and talent-pool emails. Kept while needed to handle Your enquiry and keep a record of the correspondence, unless You ask Us to delete them sooner and We have no duty to keep them.
  • Account data for people who operate the Service. Kept while the account is active, and for a short period afterwards where needed for security or legal duties.
  • Server logs. Kept for a limited period set by Our hosting provider, for security and troubleshooting.

When Personal Data is no longer needed, We delete it or anonymise it.

Transfer of Your Personal Data

Your information may be processed in the Country/State and in other countries where the Company or its Service Providers operate, including where Our hosting, email, or image-delivery providers store data. Those countries may have data-protection rules that differ from the rules where You live.

Where the law requires a safeguard for a transfer, We use an appropriate mechanism, such as a contract with the Service Provider. By using the Service, You understand that Your information may be transferred in this way.

Disclosure of Your Personal Data

We do not sell Your Personal Data. We share it only in these cases:

  • Service Providers. Trusted providers who host the Website, deliver images (including Cloudflare Images, where enabled), send email, or otherwise help Us operate the Service. They may process Personal Data only on Our instructions.
  • Employers and public listings. Information You place in a public job listing, and the destination of an Apply link, is available to visitors or to the employer who receives the application.
  • Legal requirements. Where required by law, regulation, subpoena, or court order. Where the law allows it, We will tell You before We disclose.
  • Safety. To protect the rights, property, or safety of the Company, Our users, or the public.
  • Business transfers. If the Company is involved in a merger, acquisition, or sale of assets, Your Personal Data may be transferred. We will post a clear notice on the Website and, where feasible, email You.
  • With Your consent. For any other purpose, only with Your prior consent.

Security of Your Personal Data

We use appropriate technical and organisational measures to protect Personal Data, including encryption in transit (HTTPS) and access limits so that only people who need the data to operate the Service can use it. The visitor identifier cookie is stored as an HTTP-only cookie.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

If a Personal Data breach is likely to result in a risk to Your rights, We will notify affected people and the relevant authority within the time the applicable law requires.

Your Privacy Rights

Depending on where You live, You may have the right to access, correct, delete, restrict, or receive a copy of Your Personal Data, and to object to certain Processing. You can exercise these rights by emailing brukerja@gmail.com. We will respond within the time required by applicable law. We will not penalise You for exercising a privacy right.

We may need to confirm Your identity before We act on a request.

For European Union (EU) and EEA Users

If You are in the European Union or the European Economic Area, the General Data Protection Regulation (EU) 2016/679 gives You these rights:

  • Access (Art. 15). Ask for a copy of the Personal Data We hold about You and for information about how it is processed.
  • Rectification (Art. 16). Ask Us to correct inaccurate or incomplete Personal Data.
  • Erasure (Art. 17). Ask Us to delete Your Personal Data where it is no longer needed, where You withdraw consent, or where Processing is unlawful, subject to any duty to keep it.
  • Restriction (Art. 18). Ask Us to limit Processing in the circumstances the law allows.
  • Portability (Art. 20). Receive Personal Data You provided to Us in a structured, commonly used, machine-readable format, and ask Us to transmit it to another controller where this is technically feasible.
  • Objection (Art. 21). Object to Processing based on legitimate interests, including for direct marketing. Where You object to direct marketing, We will stop that Processing.
  • Automated decisions (Art. 22). Not be subject to a decision based solely on automated Processing, including profiling, that produces a legal effect or a similarly significant effect, without human review. The Service does not make that kind of decision about You.
  • Withdraw consent (Art. 7(3)). Withdraw consent at any time where Processing is based on consent. This does not affect Processing that was lawful before the withdrawal.

We rely on these legal bases under Article 6(1): consent, contract, legal obligation, and legitimate interests.

If You are in the EU or EEA and We transfer Personal Data outside that area, We use a lawful transfer tool under Chapter V of the GDPR, such as Standard Contractual Clauses or an adequacy decision, where that transfer requires one.

We aim to respond to GDPR requests within 30 days. That period may be extended by up to two further months for complex requests. You may also lodge a complaint with the supervisory authority in Your EU Member State.

For California Residents

If You are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives You these rights:

  • Know. Ask Us to disclose the categories and specific pieces of Personal Data We have collected, the sources, the purposes, and the categories of third parties We share it with.
  • Delete. Ask Us to delete Personal Data, subject to exceptions such as completing a transaction, security, and legal duties.
  • Correct. Ask Us to correct inaccurate Personal Data.
  • Opt out of sale or sharing. We do not sell Personal Data, and We do not share it for cross-context behavioural advertising. If that changes, We will provide a "Do Not Sell or Share My Personal Information" link.
  • Limit use of sensitive Personal Data. Ask Us to limit use of sensitive Personal Data to what is necessary. We use contact details You send Us only to operate the Service and to respond to You.
  • Non-discrimination. We will not deny the Service, charge a different price, or provide a lower quality of service because You exercised a privacy right.

In the past 12 months, the categories of Personal Data the Service may collect are: identifiers (such as name, email, phone number, and IP address); internet or network activity (such as pages visited and Apply clicks); professional information You choose to send, such as a CV; and inferences limited to which listings You have already seen on Your Device, if You allow analytics.

Send California requests to brukerja@gmail.com. We will verify Your identity and respond within 45 days, which may be extended by a further 45 days where the law allows. An authorised agent may submit a request for You with proper proof of authority.

Residents of other US states with similar privacy laws, including Virginia, Colorado, Connecticut, Texas, and Oregon, may exercise the equivalent rights those laws provide by contacting brukerja@gmail.com.

Children's Privacy

The Service is not directed to anyone under the age of 18. The Company does not permit those under 18 to use the Service.

We do not knowingly collect Personal Data from children under 13, or under 16 where a higher age applies, including under Article 8 of the GDPR. If We learn that We have collected Personal Data from a child under the applicable age without the consent the law requires, We will delete it. If You are a parent or guardian and You believe a child has submitted Personal Data on the Service, contact Us at brukerja@gmail.com. We will investigate and take the corrective action the situation requires.

Links to Other Websites

Our Service may contain links to third-party websites or services that are not owned or controlled by the Company, including an employer's application page, email link, or social media profile.

The Company has no control over, and assumes no responsibility for, the content, privacy policies, or practices of any third-party websites or services. You further acknowledge and agree that the Company shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any such content, goods or services available on or through any such websites or services.

We strongly advise You to read the terms and conditions and privacy policies of any third-party websites or services that You visit. Once You leave the Service, this Privacy Policy no longer applies.

Do Not Track

Some browsers send a "Do Not Track" signal. There is no single accepted standard for how websites must respond to that signal. The Service does not change its data collection in response to Do Not Track signals. You can still use the cookie notice to reject analytics storage on Your Device.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If a revision is material, We will make reasonable efforts to provide at least 30 days' notice before the new terms take effect, by updating the "Last updated" date and posting a clear notice on the Website. What constitutes a material change will be determined at Our sole discretion.

By continuing to access or use the Service after those revisions become effective, You agree to the revised Privacy Policy. If You do not agree to the new terms, please stop using the Service.

Contact Us

If you have any questions about this Privacy Policy, or if You want to make a privacy request, You can contact us:

We aim to answer general questions within 5 business days, and to meet the legal deadline that applies to a formal privacy request.