Privacy Notice

1. Who we are

Controller: Stuart G. Rae Associates Limited ("we", "us"). Website: stuartrae.biz. Contact: webmaster@stuartrae.biz.

We primarily operate under the UK GDPR and the Data Protection Act 2018. Where we offer services to individuals in the EEA, the EU GDPR may also apply.

2. Roles & responsibilities

We act as a data controller for our website and for direct-to-consumer use of the Simulator. When organisations ask us to analyse CVs on their instructions, we act as a data processor and the organisation is the data controller.

When acting as a processor, we process personal data only on the controller's documented instructions, maintain confidentiality, implement appropriate security, and ensure sub-processors provide equivalent protections (Article 28 UK/EU GDPR).

3. What we process

• CV content you upload — text extracted from PDFs/DOCX — processed to provide the analysis you request, then discarded.
• Minimal technical data — timestamps, request IDs, error logs — to operate and secure the service. Logs exclude CV content.

Please avoid uploading special category data (health, ethnicity, religion, etc.) or data about minors.

4. Zero retention by design

5. Sub-processors

To provide the service, we use the following trusted sub-processors:

We enter into appropriate data processing agreements with sub-processors. This list is updated if sub-processors change.

6. Legal bases

• Contract — to provide the analysis you requested.
• Legitimate interests — to operate, secure, and improve the service.
• Consent — where required for optional communications.

7. Retention

CV text is session-only — discarded after processing. Minimal operational logs are kept for a short period for security and troubleshooting; they do not contain CV content.

8. Security

We use reasonable technical and organisational measures including TLS encryption, access controls, and zero-retention design. No system is perfectly secure.

9. Cookies

We aim to avoid non-essential cookies. If analytics are used, they are privacy-friendly and aggregated. You can opt out via your browser settings.

10. Your rights (UK/EEA)

To exercise your rights, contact webmaster@stuartrae.biz. We aim to respond within one month and may need to verify your identity.

You also have the right to complain to the UK Information Commissioner's Office: ico.org.uk.

11. Children & special category data

The service is not for individuals under 16. Do not upload data about minors or special category data (health, ethnicity, religion, sexual orientation). The service is designed for standard CV content only.

12. Changes to this notice

We may update this notice from time to time. Continued use of the service indicates acceptance. The date above reflects the most recent revision.