GDPR Policy

(a) Consent: For AI processing, email communications, analytics, and optional features where you have opted in.

(b) Legitimate Interest: For service improvement, fraud prevention, and security measures.

(c) Legal Obligations: To comply with applicable laws and regulations.

(d) Contract Performance: To provide our CV creation and job application services.

(d1) Consent (Expert Apply Assist Service): Where Job Seekers enrol in the Expert Apply Assist Service, we process their Personal Data based on their express consent to apply for jobs on their behalf, create and manage email addresses for application purposes, and utilise the CVSense platform and AI Technology to carry out these activities.

(e) Contract Performance (Recruiter Services): To provide job posting, CV screening, candidate scoring, application management, and related recruitment services to Recruiters.

(f) Legitimate Interest (Recruiter Data Processing): For the processing of Candidate Data uploaded by Recruiters through Screening Projects, where the Recruiter has a legitimate interest in evaluating candidates for employment purposes.

(a) AI and Large Language Model processing is based on your explicit consent.

(b) All system-generated content is advisory and requires your review.

(c) You can withdraw consent for AI and Large Language Model processing at any time.

(d) Your content is processed securely and in accordance with data protection laws.

(e) In Recruiter Services, Artificial Intelligence (AI), including Large Language Models (LLMs) and Natural Language Processing (NLP), is used to analyse candidate CVs, generate match scores, extract skills and qualifications, and produce candidate summaries. This processing constitutes profiling under the UK GDPR.

(f) Recruiters must ensure that automated AI analysis is supplemented with human review before making any employment decisions. CVSense AI outputs are advisory only and must not form the sole basis for rejecting or selecting candidates.

(a) We will notify you within 72 hours of becoming aware of the breach.

(b) The notification will include the nature of the breach and potential consequences.

(c) We will provide information about steps taken to address the breach.

(d) We will notify the Information Commissioner's Office (ICO) as required by law.

(a) Our services are not directed at children under 16 years of age.

(b) Users must be at least 16 years old to create an account.

(c) If we become aware that we have collected data from a child under 16 without parental consent, we will delete such information.

(d) Parents or guardians may contact us to request deletion of their child's data.

(a) Account data is retained while your account is active.

(b) After account closure, personal data is deleted within a reasonable timeframe.

(c) Some data may be retained for legal compliance or legitimate business purposes.

(d) Anonymised data may be retained for research and service improvement.

(d1) Data collected under the Expert Apply Assist Service, including application records and managed account credentials, is retained for the duration of the service and for two (2) years following service termination or withdrawal.

(e) Recruiter account data is retained while the account is active and for three (3) years after closure.

(f) Candidate Data uploaded through Screening Projects is retained for two (2) years from the date of upload, unless the Recruiter requests earlier deletion.

(g) Credit and billing transaction records are retained for seven (7) years in accordance with UK accounting and tax obligations.

(h) Job posting data and associated application records are retained for three (3) years from the vacancy closing date.

(a) Adequacy decisions by the UK or European Commission.

(b) Standard Contractual Clauses (SCCs).

(c) Other appropriate safeguards as required by law.