Privacy Policy
Learn how we collect, use, and protect your personal information when you use ProResume Ltd services.
Privacy Policy
1. Introduction
At ProResume Ltd (Company Number: 16455316, registered address: 129 Wycliffe Road, Northampton, NN15JJ, United Kingdom) ("we," "our," or "us"), we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (proresume.co.uk), mobile application, or any of our services, including CV/resume writing, cover letter creation, LinkedIn profile optimization, and career consulting services (collectively, the "Services").
Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by all terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.
We are committed to complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.
2. Information We Collect
2.1 Personal Information You Provide to Us
To provide our Services, we need to collect certain personal information from you. This may include:
- Identity and Contact Information: Name, email address, postal address, phone number, and other similar contact information.
- Professional Information: Employment history, education details, skills, certifications, achievements, career goals, and other information typically included in CVs, resumes, or professional profiles.
- Account Information: Username, password, and account preferences when you create an account with us.
- Payment Information: Credit/debit card details, billing address, and other financial information needed to process your payments. Note that we do not store complete payment card information on our servers and instead rely on secure third-party payment processors.
- Communication Data: Information you provide when you communicate with us, including through our customer support channels, surveys, or feedback forms.
2.2 Information We Collect Automatically
When you use our Services, we may automatically collect certain information about your device and how you interact with our Services, including:
- Device Information: IP address, device type, operating system, browser type and version, language preferences, and other technical information.
- Usage Information: Pages or features you access, time spent on pages, navigation paths, timing of interactions, and other information about how you use our website or app.
- Location Information: General location information based on IP address or more precise location information if you grant permission through your device settings.
- Cookies and Similar Technologies: Information collected through cookies, web beacons, pixels, and similar technologies. See our Cookie Policy for more details.
2.3 Information from Third Parties
We may receive information about you from third parties, such as:
- Business partners, including our affiliate partners.
- Service providers who help us with identity verification, fraud prevention, or marketing.
- Public sources, such as publicly available professional profiles on LinkedIn or other professional networking sites (if you've linked these to our services).
3. How We Use Your Information
We use your personal information for various purposes, including:
- Providing and Improving Our Services: To create and deliver the Services you request (such as writing CVs, cover letters, or optimizing LinkedIn profiles), manage your account, process payments, and enhance our Services.
- Communication: To communicate with you about your account or our Services, respond to your inquiries, and provide customer support.
- Personalization: To personalize your experience with our Services, including recommending features or services that might interest you.
- Marketing and Promotion: With your consent where required, to send promotional communications, such as email marketing, about our Services, special offers, or events. You can opt out of these communications at any time.
- Analytics and Improvement: To analyze usage patterns, conduct research, and improve our Services, content, and user experience.
- Security and Fraud Prevention: To detect, prevent, and address technical issues, fraud, security breaches, and other potentially illegal activities.
- Legal Obligations: To comply with applicable laws, regulations, and legal processes.
4. Legal Basis for Processing
Under the UK GDPR, we must have a legal basis for processing your personal information. Our legal bases for processing include:
- Performance of a Contract: Processing necessary to deliver the Services you've requested or to take steps at your request before entering into a contract.
- Legitimate Interests: Processing necessary for our legitimate interests or the legitimate interests of a third party, provided these interests don't override your fundamental rights and freedoms. Our legitimate interests include providing, improving, and promoting our Services; ensuring security; and preventing fraud.
- Consent: Processing based on your specific consent, such as for sending marketing communications or processing certain types of sensitive information.
- Legal Obligation: Processing necessary to comply with our legal obligations.
Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on your consent before its withdrawal.
5. Information Sharing and Disclosure
We may share your personal information with the following categories of recipients:
- Service Providers: Companies that provide services on our behalf, such as payment processing, data analysis, email delivery, hosting, customer service, and marketing assistance.
- Professional Experts and Contractors: CV writers, career coaches, and other professionals who help deliver our Services. These individuals are bound by confidentiality obligations.
- Business Partners: Partners with whom we may jointly offer products or services, or whose products or services may be offered alongside our Services.
- Affiliates: Our subsidiaries and affiliated companies, if applicable.
- Corporate Transactions: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, where personal information may be among the assets transferred.
- Legal Compliance: When required by law, regulation, legal process, or governmental request, or to protect our rights, privacy, safety, or property, or that of our users or others.
We require all third parties to respect the security of your personal information and to treat it in accordance with applicable laws. We do not allow our third-party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.
We do not sell your personal information to third parties.
7. Data Security
We have implemented appropriate technical and organizational measures to protect the security of your personal information. These include:
- Encryption of sensitive data both in transit and at rest
- Regular security assessments and vulnerability scanning
- Access controls and authentication requirements for our systems
- Regular staff training on data protection and security
- Physical security measures for our premises and servers
While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.
In the event of a data breach that might pose a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, as required by applicable law.
8. Data Retention
We will retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including to satisfy legal, accounting, or reporting requirements.
Our retention periods are determined based on:
- The amount, nature, and sensitivity of the personal information
- The potential risk of harm from unauthorized use or disclosure
- The purposes for which we process the information and whether we can achieve those purposes through other means
- Applicable legal, regulatory, tax, accounting, or other requirements
In general, we retain your account information for as long as your account remains active. For service-related data (such as CVs, cover letters, or other documents we produce), we typically retain this information for up to 3 years after service completion to assist with future updates, revisions, or related services.
For marketing purposes, we retain your information until you opt out or withdraw consent. After that, we may keep minimal information to record your opt-out preference.
When personal information is no longer needed, we will securely delete or anonymize it.
9. Your Rights
Under the UK GDPR and other applicable data protection laws, you have certain rights regarding your personal information. These include:
- Right of Access: You have the right to request a copy of the personal information we hold about you.
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
- Right to Erasure (Right to be Forgotten): In certain circumstances, you have the right to request that we delete your personal information.
- Right to Restrict Processing: In certain circumstances, you have the right to request that we restrict the processing of your personal information.
- Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that information to another controller.
- Right to Object: You have the right to object to our processing of your personal information, including for direct marketing purposes or where we are relying on a legitimate interest.
- Right Not to Be Subject to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or significantly affects you.
To exercise any of these rights, please contact us using the details provided in the "Contact Us" section below. We will respond to your request within one month, unless the request is complex or numerous, in which case the period may be extended by up to two additional months.
Please note that some of these rights may be limited where we have compelling legitimate grounds to process your information or where we are legally required to retain information.
If you are not satisfied with how we have handled your request or complaint, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).
10. International Data Transfers
We primarily store and process your personal information within the United Kingdom. However, some of our service providers or partners may be located outside the UK or the European Economic Area (EEA), which means that your personal information may be transferred to countries with different data protection laws.
When we transfer your personal information outside the UK or EEA, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards, such as:
- Transferring to countries that have been deemed to provide an adequate level of protection by the UK government or the European Commission
- Using specific contracts approved by the UK government or the European Commission that give personal data the same protection it has in the UK and EEA (known as Standard Contractual Clauses)
- Where we transfer data to the US, ensuring our partners participate in and have certified their compliance with approved data protection frameworks
If none of these safeguards is available, we may request your explicit consent to the specific transfer. You have the right to withdraw this consent at any time.
Please contact us using the details provided in the "Contact Us" section if you want further information on the specific mechanism used by us when transferring your personal information out of the UK or EEA.
11. Children's Privacy
Our Services are not intended for use by children under the age of 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will promptly take steps to delete that information.
If you believe we might have any information from or about a child under 16, please contact us using the details provided in the "Contact Us" section.
12. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.
For significant changes that materially alter your rights or our obligations, we will provide additional notice, such as a prominent website notice or an email notification. We encourage you to review this Privacy Policy periodically for any changes.
Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the changes.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Contact us about privacy:
Web Form
Contact Form (please select "Privacy Feedback" as the inquiry type)
Phone
+447838914278
We aim to respond to privacy-related inquiries within 2 business days, and to propose a solution within 10 business days. For more complex issues, we may need additional time to implement appropriate solutions.