Privacy Policy

1. Introduction

Life2CV Ltd (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use Life2CV (“the Service”). We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We collect the following categories of personal data:

• Account information: Name, email address, and hashed password.
• Profile data: Your life story, age range, location, current situation, work preferences, and skills you provide during onboarding.
• Generated content: Career documents, skill profiles, job matches, and business ideas produced by our system.
• Payment data: Processed securely by Stripe. We store only your Stripe customer ID, not your payment card details.
• Usage data: Basic interaction data to improve our service.

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide and improve the Life2CV service, including skill extraction and document generation.
• To process your payments securely via Stripe.
• To communicate with you about your account or respond to your enquiries.
• To ensure the security and integrity of our platform.

4. Lawful Basis for Processing

We process your data on the following bases: Contractual necessity (to provide the Service you have requested), Legitimate interest (to improve our Service and prevent fraud), and Consent (where you have explicitly consented to data processing, such as providing your life story for analysis).

5. Data Sharing

We do not sell your personal data. We share data only with: Stripe for payment processing, technology partners for document generation (your data is processed but not stored by these providers), and hosting providers for secure data storage. If you access Life2CV through a partner organisation, we may share anonymised outcome data with that partner as agreed in their partnership terms.

6. Data Retention

We retain your account data and generated documents for as long as your account is active. If you delete your account, all personal data, including your life story, skill profile, and generated documents, will be permanently deleted within 30 days. Payment records may be retained for up to 7 years as required by financial regulations.

7. Your Rights

Under UK GDPR, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure: Request deletion of your personal data.
• Right to portability: Request your data in a machine-readable format.
• Right to object: Object to processing of your data for certain purposes.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us via our Contact page.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS) and at rest, secure password hashing (bcrypt), and access controls. No system is completely secure, and we cannot guarantee the absolute security of your data.

9. Cookies

We use essential cookies required for authentication and session management. We do not use third-party advertising or tracking cookies. Essential cookies cannot be disabled as they are necessary for the Service to function.

10. Children's Privacy

Life2CV is not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date.

12. Contact

For any privacy-related enquiries, please reach out via our Contact page.