Legal

Privacy Policy

Last updated: May 2026 · UK GDPR compliant

Your data rights matter. This policy explains plainly what we collect, why, and how you can access, correct, or delete it at any time, without needing to contact us.

1. Who we are

Career Playbook is operated by QuantumPass Tech LLP. We are the data controller for personal data processed through this service. Contact: contact@thecareerplaybook.co.uk

2. What data we collect

We collect: your name and email address when you register; CV content you upload or create using our tools; ATS scoring history and job descriptions you submit; billing information processed by Stripe (we never see or store card numbers); consultation booking data processed by Cal.com; and standard server logs (IP address, browser type, pages visited).

3. Legal basis for processing

We process your personal data on the following UK GDPR bases: contract performance (providing the service you signed up for); legitimate interests (improving our scoring models and fraud prevention); legal obligation (tax and financial records); and consent where we ask for it explicitly (e.g. marketing emails).

4. How we use your data

Your data is used to: provide and personalise the Career Playbook service; generate ATS scores and AI-assisted content; process payments and manage your subscription; send transactional emails (receipts, booking confirmations); and improve our AI scoring models (using anonymised, aggregated data only; individual CVs are never used to train third-party models without explicit consent).

5. Data storage and transfers

All personal data is stored in Microsoft Azure UK South (London). Data does not leave the UK except where you access third-party services (Stripe, Cal.com, SendGrid) that are subject to appropriate Standard Contractual Clauses and adequacy decisions. Azure OpenAI is configured to use UK South endpoints with no data retention by Microsoft.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, all personal data is permanently erased within 30 days, except where retention is required by law (e.g. financial records retained for 7 years under UK tax law). ATS scoring history is deleted immediately on account deletion.

7. Your rights under UK GDPR

You have the right to: access your personal data (download from Account → Your data); rectify inaccurate data; erase all your data (Account → Delete account, which triggers a permanent, immediate cascade); restrict or object to processing; data portability (JSON export available); and withdraw consent at any time. To exercise any right, email contact@thecareerplaybook.co.uk or use the in-app tools. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk.

8. Cookies

We use strictly necessary authentication cookies to keep you signed in and protect your account. With your consent, we also use Azure Application Insights to understand page views, performance, browser/device information, and client-side errors. Analytics is optional, does not start unless you accept it, and can be changed from Cookie Settings on this page. We do not use advertising cookies or retargeting pixels.

9. Third-party processors

Stripe (payment processing): Stripe Inc, EU/UK Standard Contractual Clauses in place. Cal.com (booking scheduling): data processed on Cal.com infrastructure, subject to their privacy policy. SendGrid / Twilio (transactional email): UK-based sending infrastructure. Microsoft Azure (hosting, AI): UK South region, Data Processing Agreement in place.

10. Changes to this policy

We may update this policy to reflect changes in our practices or law. Material changes will be notified by email to registered users at least 14 days before taking effect. The current version is always available at careerplaybook.co.uk/privacy.

Questions about this policy? Email contact@thecareerplaybook.co.uk or write to: QuantumPass Tech LLP.