Your privacy controls
Teachers and schools can change or withdraw cookie consent here, and ask us for a copy, correction or full deletion of their data. Requests are logged and answered by our privacy officer.
1. Information we collect
- Account data: email address, password hash, role, sign-in metadata.
- Teacher profile data you choose to provide: display name, photo, nationality, location, languages, education, qualifications, experience, availability, desired salary and location, introduction.
- Documents you upload: CV/résumé, certificates, references. These are stored privately.
- Employer data: organisation name, address, contact details, logo, listings.
- Usage data: aggregate job and profile view counts, search terms, basic device data.
- Payment records: order ID, amount, currency, status and provider transaction ID.
Visa type, and any other sensitive detail, is only collected where you voluntarily choose to disclose it.
2. How we use it
- to operate accounts, profiles, listings, search and moderation;
- to process payments for paid products and keep tax and accounting records;
- to prevent fraud, abuse and misuse of the platform;
- to improve the service using aggregate, non-identifying statistics.
3. Visibility and sharing
You control whether your profile is discoverable and which fields are public. Contact details and uploaded documents are not public by default; they are shared only when you apply to a job or explicitly grant access. TWIX does not sell personal information. Data is shared with service providers (hosting, database, storage, payment processing) only as needed to operate the platform.
4. Storage, retention and security
Data is stored in a managed PostgreSQL database with row-level access controls. Documents are stored in a private bucket and served only through short-lived signed links. Access is restricted by role. Account and profile data is kept while your account is active; after deletion, personal data is removed or anonymised except where records must be retained under Korean tax, e-commerce or consumer-protection law.
5. Legal bases
- contract: running your account, listings, profiles and applications;
- legal obligation: tax, accounting and e-commerce record keeping;
- legitimate interests: security, fraud prevention, and keeping the site working;
- consent: analytics and marketing cookies, optional emails, and any sensitive detail you volunteer. Consent can be withdrawn at any time, as easily as it was given.
6. Your rights
Wherever you live, you may access, correct, export or delete your personal information, withdraw consent, object to or restrict processing, and hide or deactivate your profile.
- Korea (PIPA): rights of access, correction, deletion, suspension of processing and withdrawal of consent; access requests answered within 10 days.
- EU/UK (GDPR): access, rectification, erasure, restriction, portability, objection and the right to complain to your supervisory authority; answered within 30 days.
- United States (CPRA and similar state laws): know, delete, correct, and opt out of sale or sharing; answered within 45 days. TWIX does not sell or share personal information for cross-context behavioural advertising, and does not use sensitive information for inferring characteristics.
Use the Privacy Centre to withdraw consent or submit an access, correction or deletion request. We never charge for this and never treat anyone differently for exercising a right.
7. Children
TWIX is for adults seeking or offering employment. We do not knowingly collect data from anyone under 14 (Korea) or under 16 (EEA). Accounts found to belong to a child are deleted.
8. Cookies and consent
Strictly necessary cookies keep you signed in and remember your choice. Analytics and marketing cookies load only after you allow them in the consent banner, and your decision is logged with its date and policy version. Full list in the Cookie Policy.
9. Where your data is processed
Hosting, database, file storage, email delivery and analytics are provided by processors under written Data Processing Agreements, with EU Standard Contractual Clauses for international transfers. The full list, storage regions and retention periods are on the Data Processing page.
10. Breach notification
If personal data is compromised we notify affected users and the relevant authority without undue delay — within 72 hours under the GDPR and as required under PIPA.
11. Contact
Privacy officer: TWIX, admin@twixwork.com. Requests submitted through the Privacy Centre reach the same inbox and are tracked until they are closed.