In short: we use your details and documents only to write your CV and provide the services you order. We don't sell your data, we never send your CV to employers without your permission, and you can ask us to delete your data at any time.
Who we are
CV Factory is based in Bristol, United Kingdom. We are the "controller" of your personal data, which means we decide how it's used and are responsible for protecting it. You can contact us about privacy at any time at info@cvfconsultants.com.
What we collect
- Details you give us when you order: your name, email address, phone number, career level, target and current job titles, job links, qualifications, achievements and any notes.
- Documents you upload: your current CV, certificates, references and anything else you send us. These can contain your employment history, education and other personal information.
- Payment information: handled by our payment provider or your bank. We see confirmation that you've paid, but we never see or store your full card details.
- Messages: emails and other messages you send us, and notes from coaching sessions if you use CVFactory Recruiter.
- AI CV Builder: the details you type into the builder, including any photo. While you work, these are saved only in your own browser. When you buy a download, we store your CV and email address with the order so we can create your PDF and email it to you. If you use an AI button, the text of that section (and a summary of your job titles) is sent to our AI provider to rewrite it.
- Technical information: to show prices in your currency, your browser sends your IP address to a location service (GeoJS), which tells us your country. We don't store your IP address.
Please don't send us special category information, such as health details, religion or ethnicity, unless you want it in your CV. If you do, we'll use it only for that purpose.
How and why we use it
| What we do | Our legal basis |
|---|---|
| Write your CV, cover letter and LinkedIn content, and provide coaching and job sourcing | To perform our contract with you |
| Reply to your questions, confirm orders and send payment links and renewal reminders | To perform our contract with you |
| Keep records of orders and payments | To meet our legal obligations, such as tax and accounting |
| Create, deliver and email your AI CV Builder PDF, and rewrite text when you ask the AI to | To perform our contract with you |
| Limit how often the AI can be used by each visitor (using your IP address for one day) | Our legitimate interest in preventing misuse |
| Show prices in your local currency | Our legitimate interest in showing you accurate prices |
| Send occasional news or offers (only if you opt in) | Your consent, which you can withdraw at any time |
Who we share it with
We never sell your data or send your CV to employers or recruiters without your permission. We share data only with service providers who help us run the business, under contracts that require them to protect it:
- our CV writers and coaches, who work on your order under confidentiality agreements
- our website host, Netlify, which also stores AI CV Builder orders
- our email and file storage provider, Google Workspace
- our payment provider, Stripe, and our bank
- our AI provider, Anthropic (Claude), which rewrites text when you use an AI button in the CV builder. It processes the text to give you a response and doesn't use it to train its AI models.
- GeoJS (country lookup) and Google Fonts (website fonts), which receive your IP address when you visit the site
Some of these providers may store data outside the UK, for example in the EU, the US or Sri Lanka. Where they do, we make sure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement or an adequacy decision.
How long we keep it
- Your documents and order details: for 12 months after your order is complete, so you can come back for updates. After that we delete them, unless you ask us to keep them.
- Payment and invoice records: for 6 years, as required by UK tax law.
- Unfinished enquiries: for 6 months.
- AI CV Builder orders: deleted automatically after 30 days. AI usage counters are deleted after 2 days.
You can ask us to delete your documents sooner at any time.
Your browser storage and cookies
We don't use advertising or tracking cookies. The site stores your currency choice in your browser (local storage) so it's remembered next time, and the AI CV Builder saves your draft CV there so you don't lose your work. Use "Clear everything" in the builder to remove it, and briefly stores your detected country for your visit (session storage). Neither is shared with us or anyone else. If we add analytics in future, we'll update this policy and ask for your consent where required.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct anything that's wrong
- ask us to delete your data
- ask us to limit how we use it, or object to how we use it
- ask for your data in a format you can take elsewhere
- withdraw consent, where we rely on it
Email info@cvfconsultants.com to use any of these rights. We'll reply within one month. If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. If you live in Sri Lanka, you may also have rights under Sri Lanka's Personal Data Protection Act.
Keeping your data safe
We keep your documents in secure, password-protected systems, give access only to the people working on your order, and use encrypted connections. No system is perfectly secure, but we'll tell you promptly if a breach affects you and the law requires us to.
Changes to this policy
We'll update this page if anything changes and show the date at the top. If a change affects you significantly, we'll email you.