Privacy Policy
Privacy Policy — The CV Edit
Last updated: 06/11/2025
Introduction
The CV Edit (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Policy explains how we collect, use, disclose and retain personal data when you use our services, including when you submit documents via our Google Form.
Controller
The CV Edit is the data controller for the personal data you provide.
Contact: contact@thecvedit.com.
Personal data we collect
Contact information (name, email).
Career information (job titles, LinkedIn URL, CV content).
Files you upload (CVs, cover letters, supporting documents).
Any other information you provide in forms or correspondence.
Lawful basis for processing
Under the UK General Data Protection Regulation (UK GDPR) and the Data
Protection Act 2018, our lawful bases for processing are:
Contractual necessity: to perform the service you requested (editing your documents).
Consent: where we ask for explicit consent (for example, to use anonymised versions of your documents for marketing).
Legitimate interests: for improving our services, record keeping, and preventing abuse, provided this does not override your rights.
How we use your data
To provide document review and editing services.
To communicate with you about the service and deliver files.
To store a copy of your submitted documents while delivering the project.
Only with explicit consent, to use anonymised extracts of your documents for marketing (see Consent section).
Storage and retention
Uploaded files are stored in the Google Drive account of The CV Edit. Access is restricted to authorised personnel only.
We retain your submitted documents and related communications for 12 months after project completion, unless you request earlier deletion. If you request deletion, we will permanently delete files within 14 days (unless there is a legal reason to retain them).
Security
We use administrative and technical measures to secure data (Google Workspace security, strong passwords, two-factor authentication). No internet transfer or storage can be 100% secure; we will notify you promptly of any personal data breach where required by law.
Sharing and disclosure
We will not sell or share your personal data with third parties for marketing. We may disclose data:
To service providers under contract (e.g., payments, website hosting) who process data on our behalf.
To comply with legal obligations.
Consent to anonymised promotional use
If you tick the consent box in our submission form, you agree that The CV Edit may use an anonymised version of your submitted documents for promotional purposes (for example: before/after portfolio images, social media, case studies). Anonymised means all personal identifiers — such as names, contact details, employer names, addresses, and any other uniquely identifying information — will be removed or sufficiently altered. You may withdraw this consent at any time by emailing contact@thecvedit.com; withdrawal will not affect marketing materials already published prior to withdrawal where removal is impractical, but we will not use your material in future promotions.
Your rights
Under UK GDPR you have the right to: access your data, request correction, request deletion (“right to be forgotten”), restrict processing, object to processing, and request data portability. To exercise these rights, email contact@thecvedit.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
International transfers
Your data may be stored on Google servers and may be subject to international transfers. We ensure appropriate safeguards are in place (Google’s standard contractual clauses) where necessary.
Contact
For questions or requests about this policy or your data, contact contact@thecvedit.com.