Skip to main content
Role CV

Privacy Policy

Version 1.0 — effective 2026-01-01

This page is a working draft prepared for the Role CV pilot and has not yet been reviewed by a qualified legal professional. Do not treat it as final legal advice.

Who controls your data

Role CV is operated by Phil Martin ("we", "us"). We are the data controller for the personal information described in this policy.

Contact details

You can contact us about privacy matters using the support email address shown in the footer of this site.

Information we collect

Contact details you provide, such as your name and email address.

Career information you provide, including your current role, career situation and biggest concern about your application.

The target role details you provide, including job title, employer, vacancy URL and job description.

Your CV and any supporting notes you upload.

Consent choices and their timestamp and version.

Payment confirmation details from Stripe (we do not receive or store your card details).

Technical and analytics information such as UTM parameters, referrer and coarse usage events.

Why we process your information

To assess your role match and, where you have purchased the paid Application Pack, to prepare a tailored CV draft.

To communicate with you about your submission and, where applicable, your payment.

To operate, secure and improve the Role CV pilot service.

To send you occasional marketing updates only if you have separately opted in.

Lawful basis

We process your information on the basis of your consent (service and, separately, marketing) and, where applicable, to perform the contract formed when you purchase the Application Pack. Final lawful-basis wording is subject to legal review.

Who else processes your information

Supabase (database and private file storage).

Stripe (payment processing).

Postmark (transactional email delivery).

Google Analytics (aggregate usage analytics; no CV content, job-description text, names, emails or filenames are sent to analytics).

Cloudflare Turnstile (bot protection on form submission).

If AI tools are used during fulfilment of a paid Application Pack, this will be disclosed separately before your documents are processed, per the AI disclosure section of this policy.

International transfers

Some processors listed above may process data outside the United Kingdom. Where this occurs, we rely on the processor's standard contractual safeguards. Final wording is subject to legal review.

Retention

Uploaded CV and job-description documents are retained while your service is being fulfilled and deleted 30 days after completion, unless you request earlier deletion.

Minimal transaction and consent records are retained for the period required for legitimate operational, accounting and legal purposes.

Your rights

You may ask us to access, correct, delete or export your personal information, and you may withdraw marketing consent at any time. Contact us using the support email address to make a request.

Deletion requests

During the pilot, deletion requests are handled manually by the founder. Email the support address with your public reference (if known) and we will confirm once your documents and personal data have been deleted.

Complaints

If you are unhappy with how we have handled your personal information, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) in the United Kingdom.

Marketing consent

We only add you to marketing communications if you tick the separate, unchecked-by-default marketing consent box. This is never required to receive the service you requested.

Analytics and cookies

See our Cookie information page for details of the essential and non-essential cookies used on this site.

AI disclosure

If AI services are used to help prepare your Role Match or Application Pack, we will disclose what information is processed, confirm that outputs are reviewed by a person before delivery, and ensure no unsupported claims are introduced into your CV.