Legal

Privacy Policy

Last updated: April 2026

CVCraft AI ("we", "us", "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and protect your data when you use our website at cvcraft-ai.co.uk and purchase our services.

We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

CVCraft AI is a sole trader business operating in the United Kingdom. If you have any questions about this policy or how we handle your data, you can contact us via our order form on the website.

2. What information we collect

When you place an order, we collect the following information:

• Your name and email address
• The job title and job description you provide
• Your CV content and any additional instructions you submit
• Payment information — this is handled entirely by Stripe and we never see or store your card details

When you visit our website, we may also collect basic technical information such as your browser type and approximate location, used only for improving the site.

3. How we use your information

We use your information solely for the following purposes:

• To create and deliver the CV or cover letter you have ordered
• To communicate with you about your order
• To process your payment via Stripe
• To improve our service

We do not use your information for marketing purposes unless you have explicitly opted in. We do not sell your data to any third party.

4. Legal basis for processing

We process your personal data on the basis of contractual necessity — we need your information in order to fulfil the service you have purchased. We also process data where we have a legitimate interest in improving our service.

5. How long we keep your data

Your order details and CV content are retained for up to 30 days after your order is fulfilled, after which they are permanently deleted. We retain basic transaction records (name, email, product purchased) for up to 12 months for accounting and dispute resolution purposes.

6. Who we share your data with

We share your data only with the following trusted third parties, where necessary to fulfil your order:

• Stripe — to process your payment securely. Stripe's privacy policy is available at stripe.com/gb/privacy.
• Formspree — to transmit your order details to us securely. Formspree's privacy policy is available at formspree.io/legal/privacy-policy.

We do not share your data with any other third parties.

7. Cookies

Our website uses cookies in the following ways:

• Essential cookies — required for the website to function correctly. These cannot be disabled.
• Analytics cookies — used to understand how visitors use our site. These are only set if you accept cookies.
• Advertising cookies — used to measure the effectiveness of our advertising. These are only set if you accept cookies.

You can change your cookie preference at any time by clearing your browser's local storage or contacting us.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Request restriction of processing
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please contact us through the order form on our website and we will respond within 30 days.

9. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is transmitted over encrypted HTTPS connections.

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.