1. Data Controller

AJ Consulting UK ("we", "us", "our") is the data controller responsible for your personal data.

Contact: [email protected]

2. Data We Collect

We collect the following categories of personal data:

Information You Provide

Data Type	Purpose	Legal Basis
Name, Email	Account creation and communication	Contract performance
CV/Resume content	CV tailoring and job matching	Contract performance
Job preferences	Job search and matching	Contract performance
Employment history	CV generation and tailoring	Contract performance
Payment information	Subscription billing	Contract performance

Information Collected Automatically

• IP address and browser information
• Usage data and interaction patterns
• Session cookies for authentication

3. How We Use Your Data

Your data is used to:

• Provide and operate the Service
• Match you with relevant job opportunities
• Generate tailored CVs using AI technology
• Process payments and manage subscriptions
• Send service-related communications
• Improve and develop the Service
• Comply with legal obligations

4. AI Processing

Our AI processing involves:

• Local AI Processing: We use locally-hosted AI models (Ollama/LLaMA) on our infrastructure
• No third-party AI services: Your data is NOT sent to external AI providers like OpenAI or Google
• Purpose: CV tailoring, cover letter generation, job description matching
• Human oversight: You review and approve all AI-generated content before use

5. Data Sharing

We do NOT sell your personal data. We may share data with:

• Service providers: Payment processors (for billing only)
• Legal requirements: When required by law or to protect our rights
• Business transfers: In case of merger or acquisition (with notice to you)

6. International Transfers

Your data is stored and processed on servers located in the United Kingdom. We do not transfer your data outside the UK/EEA unless:

• You explicitly request it (e.g., applying to jobs in other countries)
• Adequate safeguards are in place (Standard Contractual Clauses)

7. Data Retention

Data Type	Retention Period
Account data	Duration of account + 30 days after deletion
CV and job preferences	Duration of account + 30 days after deletion
Generated applications	12 months from generation
Payment records	7 years (legal requirement)
Server logs	90 days

8. Your Rights (GDPR)

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restrict processing: Limit how we use your data
• Data portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent

To exercise these rights, contact: [email protected]

We will respond within 30 days.

9. Data Security

We implement appropriate security measures including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing (bcrypt)
• Access controls and authentication
• Regular security assessments
• Secure hosting infrastructure

10. Cookies

We use essential cookies for:

• Session management (authentication)
• Security (CSRF protection)

We do not use tracking or advertising cookies.

11. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this policy. We will notify you of significant changes via email or through the Service. The "Last updated" date indicates when changes were made.

13. Complaints

If you have concerns about our data practices, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk

14. Contact Us

For privacy-related questions or to exercise your rights:

Email: [email protected]