Privacy Policy

Legal framework

We comply with:

• the UK General Data Protection Regulation (UK GDPR);
• the Data Protection Act 2018; and
• where relevant, the EU GDPR for individuals located in the EEA.

Lawful bases for processing

We process personal data only where a lawful basis exists under Article 6 UK GDPR:

Failure to provide data necessary for a contract may prevent us from fulfilling your order.

Personal data we collect

4.1 Data you provide

• Name, email address, billing address;
• Payment information (processed securely by Stripe; we never store card details);
• Account login credentials, where applicable;
• Marketing preferences and communication consents.

4.2 Data collected automatically

• IP address, browser type, device information;
• Pages visited, links clicked, time on page;
• Marketing identifiers (e.g. Meta Pixel, Google Analytics IDs);
• Purchase history and transaction amounts.

Automatic collection uses cookies, pixels, and similar technologies. See Section 13 (Cookies).

Third-party services and processors

We use trusted third parties under written data-processing agreements:

Each processor acts only on our documented instructions; their own privacy policies apply in addition. Where data is transferred outside the UK/EEA (for example to US-based providers), it is safeguarded by UK International Data Transfer Agreements (IDTAs) or EU Standard Contractual Clauses.

How we use personal data

We use your personal data to:

• process and deliver orders;
• communicate with you about purchases or account activity;
• send optional marketing communications (subject to opt-out);
• maintain Site security and performance;
• analyse aggregate behaviour to improve products and content.

We never sell personal data.

Marketing communications

If you make a purchase or opt in to our newsletter, we may send you:

• essential service emails (order confirmations, updates);
• optional marketing (career guidance content, offers).

You may withdraw consent or object to marketing at any time via the unsubscribe link or by emailing privacy@careerexpert.ai. Unsubscribing will not affect essential service messages.

Data sharing and disclosure

We may disclose personal data:

• to authorised employees and contractors who need it to perform their duties;
• to service providers listed in Section 5;
• to regulators, law-enforcement, or courts where legally required;
• to prospective buyers in connection with a business sale (subject to confidentiality).

We do not otherwise share or sell your data. Links from our Site to third-party websites are provided for convenience only; we are not responsible for their privacy practices.

Data retention

We retain personal data only as long as necessary for the purposes collected:

We securely delete or anonymise data once retention periods expire.

Data security

We apply industry-standard technical and organisational measures, including:

• data minimisation and restricted access;
• TLS encryption of data in transit;
• PCI DSS compliant payment processing;
• regular access review and staff training.

While no internet service is entirely secure, we maintain appropriate safeguards and will notify the ICO and affected users of any data breach as required by law.

Your rights

Under the UK GDPR you have:

• the right to be informed;
• the right of access;
• the right to rectification;
• the right to erasure ("right to be forgotten");
• the right to restrict processing;
• the right to data portability;
• the right to object;
• rights related to automated decision-making and profiling.

To exercise any right, email privacy@careerexpert.ai. We will respond within one month as required by the Data Protection Act 2018.

Children

Our services are not directed to children under 16 years of age. If we discover that a child under 16 has provided personal data, we will delete it promptly. Parents or guardians may contact us to request deletion.

Cookies and tracking technologies

A cookie is a small text file placed on your device to help operate and analyse the Site. You can manage cookies through your browser settings at any time. We use:

For browser-based control, adjust cookie preferences in your browser settings, or use opt-out tools at www.youronlinechoices.com. Disabling essential cookies may limit Site functionality.

International transfers

If personal data is transferred outside the UK or EEA, we ensure appropriate safeguards under Article 46 UK GDPR, such as Standard Contractual Clauses or IDTAs. Copies of relevant transfer mechanisms are available upon request.

Updates to this policy

We may revise this Privacy Policy from time to time to reflect changes in law or practice. The new version will take effect on publication with an updated effective date. If material changes occur, we may also notify you by email. Please check this page periodically for updates.

Complaints and supervisory authority

If you have a concern or complaint about our data handling, contact us first at privacy@careerexpert.ai and we will try to resolve it promptly. If you remain dissatisfied, you may complain to the Information Commissioner's Office (ICO): ico.org.uk · 0303 123 1113.

Contact information

Data Privacy Officer, Career Expert AI (Varadium Limited), 71–75 Shelton Street, London WC2H 9JQ, United Kingdom. Email: privacy@careerexpert.ai.