Privacy Policy | Career Expert AI

Privacy Policy

Effective Date: 30 September 2025

1. Introduction

careerexpert.ai (the "Site") is owned and operated by Varadium Limited, trading as Career Expert AI.
Varadium Limited acts as the data controller for all personal data processed through the Site.

Registered office: 71–75 Shelton Street, London WC2H 9JQ, United Kingdom
Data Privacy Officer: privacy@careerexpert.ai
Type of website: E-commerce and digital education.

This Privacy Policy explains how we collect, use, disclose, and protect your personal data.
It applies in addition to our Terms & Conditions.

2. Legal Framework

We comply with:

  • the UK General Data Protection Regulation (UK GDPR),
  • the Data Protection Act 2018, and
  • where relevant, the EU GDPR for individuals located in the EEA.

3. Lawful Bases for Processing

We process personal data only where a lawful basis exists under Article 6 UK GDPR:

Purpose Lawful Basis
To fulfil an order or provide purchased digital content Contract performance
To respond to enquiries or support requests Legitimate interests / Contract performance
To send marketing emails to existing customers Legitimate interests (soft opt-in)
To send marketing emails to new subscribers Consent
To comply with legal or tax obligations Legal obligation
To improve our Site and services Legitimate interests

Failure to provide data necessary for a contract may prevent us from fulfilling your order.

4. Personal Data We Collect

4.1 Data You Provide

  • Name, email address, billing address
  • Payment information (processed securely by Stripe; we never store card details)
  • Account login credentials, where applicable
  • Marketing preferences and communication consents

4.2 Data Collected Automatically

  • IP address, browser type, device information
  • Pages visited, links clicked, time on page
  • Marketing identifiers (e.g. Meta Pixel, Google Analytics IDs)
  • Purchase history and transaction amounts

Automatic collection uses cookies, pixels, and similar technologies. See Section 13 (Cookie Policy).

5. Third-Party Services and Processors

We use trusted third parties under written data-processing agreements:

Category Provider Function
Analytics & Advertising Google Analytics; Meta Pixel; Ahrefs; Microsoft Clarity Site usage & ad measurement
Payment Processing Stripe (Payment Card Industry DSS compliant) Secure payments
Transactional Email Postmark Order confirmations & receipts

Each processor acts only on our documented instructions. Their own privacy policies apply in addition.

Where data is transferred outside the UK/EEA (for example to US-based providers), it is safeguarded by UK International Data Transfer Agreements (IDTAs) or EU Standard Contractual Clauses.

6. How We Use Personal Data

We use your personal data to:

  • process and deliver orders;
  • communicate with you about purchases or account activity;
  • send optional marketing communications (subject to opt-out);
  • maintain Site security and performance;
  • analyse aggregate behaviour to improve products and content.

We never sell personal data.

7. Marketing Communications

If you make a purchase or opt-in to our newsletter, we may send you:

  • essential service emails (order confirmations, updates);
  • optional marketing (career guidance content, offers).

You may withdraw consent or object to marketing at any time via the unsubscribe link or by emailing privacy@careerexpert.ai.
Unsubscribing will not affect essential service messages.

8. Data Sharing and Disclosure

We may disclose personal data:

  • to authorised employees and contractors who need it to perform their duties;
  • to service providers listed in Section 5;
  • to regulators, law-enforcement, or courts where legally required;
  • to prospective buyers in connection with a business sale (subject to confidentiality).

We do not otherwise share or sell your data.
Links from our Site to third-party websites are provided for convenience only; we are not responsible for their privacy practices.

9. Data Retention

We retain personal data only as long as necessary for the purposes collected:

Data Type Retention Period
Transaction records 6 years (HMRC requirement)
Marketing contact details Until consent withdrawn or inactive > 24 months
Support correspondence Up to 2 years
Website analytics data Up to 26 months (Google Analytics default)
User behaviour analytics (Clarity session recordings) 30 days

We securely delete or anonymise data once retention periods expire.

10. Data Security

We apply industry-standard technical and organisational measures, including:

  • data minimisation and restricted access;
  • TLS encryption of data in transit;
  • PCI DSS compliant payment processing;
  • regular access review and staff training.

While no internet service is entirely secure, we maintain appropriate safeguards and will notify the ICO and affected users of any data breach as required by law.

11. Your Rights

Under the UK GDPR you have:

  1. Right to be informed
  2. Right of access
  3. Right to rectification
  4. Right to erasure ("right to be forgotten")
  5. Right to restrict processing
  6. Right to data portability
  7. Right to object
  8. Rights related to automated decision-making and profiling

To exercise any right, email privacy@careerexpert.ai.
We will respond within one month as required by the Data Protection Act 2018.

12. Children

Our services are not directed to children under 16 years of age.
If we discover that a child under 16 has provided personal data, we will delete it promptly.
Parents or guardians may contact us to request deletion.

13. Cookies and Tracking Technologies

A cookie is a small text file placed on your device to help operate and analyse the Site.
You can manage cookies through your browser settings at any time.

We use:

Type Purpose
Essential Enable core Site functions such as checkout
Analytics Understand visitor behaviour and improve content
Marketing Measure advertising effectiveness and personalise offers

For browser-based control:

Disabling essential cookies may limit Site functionality.

14. International Transfers

If personal data is transferred outside the UK or EEA, we ensure appropriate safeguards under Article 46 UK GDPR, such as Standard Contractual Clauses or IDTAs.
Copies of relevant transfer mechanisms are available upon request.

15. Updates to This Policy

We may revise this Privacy Policy from time to time to reflect changes in law or practice.
The new version will take effect on publication with an updated "Effective Date."
If material changes occur, we may also notify you by email.
Please check this page periodically for updates.

16. Complaints and Supervisory Authority

If you have a concern or complaint about our data handling, contact us first at privacy@careerexpert.ai.
We will try to resolve it promptly.

If you remain dissatisfied, you may complain to the Information Commissioner's Office (ICO):
ico.org.uk | 0303 123 1113

17. Contact Information

Data Privacy Officer
Career Expert AI (Varadium Limited)
71–75 Shelton Street, London WC2H 9JQ, United Kingdom
Email: privacy@careerexpert.ai