Privacy Policy

Version: privacy-2026-10-29-v2. Last updated: 29 October 2026.

1. Who we are

Peter Fraikue, trading as Handsometoad, is the controller of personal information used for our website, support and Career Concierge. We are a sole-trader business at 55 Crown Street, Brentwood, Essex, CM14 4BD, England. Contact support@handsometoad.com or https://handsometoad.com/support/ for privacy questions, account closure or deletion requests.

Career Concierge is for adults aged 18 or over. Do not submit a child's CV or use it on behalf of a child.

2. Information and purposes

For Executive customers, we also collect a mobile number and service-contact preference after payment. We use WhatsApp for service messages only when you choose it; you can change that preference through support. This does not opt you into marketing. WhatsApp/Meta processes your number and messages under its privacy terms when you choose that channel (https://www.whatsapp.com/legal/privacy-policy).

We use your name, email and account identifiers to manage access, identify orders and communicate with you. We process CVs, career history, skills, preferences, job listings and instructions to prepare tailored CVs, cover letters and job-specification records. Generated documents and progress records are stored for delivery and later access.

Stripe provides payment, customer, checkout, subscription and invoice identifiers and payment/refund status so we can verify purchases, manage credits and renewals, and keep accounting records. Full card details are entered in Stripe checkout; our support and onboarding forms do not ask for them.

Support records contain your contact details, topic, optional order reference, message and our correspondence. Technical records include request, error and security information, verification tokens and browser session storage. We record the versions of the terms and privacy notice acknowledged, early-delivery permission, acceptance time and checkout association as evidence of your order.

Information comes from you, your chosen job-listing sources and service providers such as Stripe. Provide accurate information you are authorised to share. Avoid passwords, payment credentials, unnecessary referee details and sensitive information such as health, ethnicity or religious beliefs in a CV. Contact support before asking us to process information needing additional protection.

University-offer sign-up uses your university email and a verification code, institution/course details, experience, skills, desired roles, location, availability and work-hour preferences. We use these to verify account control, determine offer eligibility and prepare material relevant to your goals. A bundled university-domain list checks only the domain; we do not send your full email or questionnaire to a domain-list provider. Students and staff are eligible. New sign-ups do not collect ID cards or student ID numbers. Evidence collected under the older manual flow remains subject to its original restricted-access process and scheduled 30-day evidence-copy cleanup; it is not sent to AI.

A dashboard CV draft reuses your onboarding answers and any additional facts you choose to add. You can edit the draft before saving. We do not need bank balances, overdraft figures or bank documents. Unpurchased sign-up information is kept while needed to complete the requested sign-up, investigate a specific issue or prevent duplicate misuse; contact support to withdraw a sign-up or request removal. Minimal eligibility hashes remain personal data and are not described as anonymous. Paid account material follows the account retention criteria below.

Mock interviews store role context, typed or submitted transcribed answers, questions, feedback, time allowances and session records. If you choose the microphone, each recording is limited to two minutes and 3 MB, is sent to Gemini for transcription, and can be reviewed or edited as text before submission. We do not save the raw recording as a career file on our server; temporary browser recordings are cleared when discarded or the session resets. Google may retain safety/security information under its service terms. Submitted transcripts and feedback are retained as account career material under the closure/deletion criteria below. We do not assess accent, voice characteristics or inferred protected traits, and do not make employer hiring decisions.

Optional Google Analytics on public production pages is subject to a separate accept/reject choice. No analytics tag loads before acceptance; staging, previews and private account pages are excluded. Public page paths, broad content groups and allowlisted campaign labels may be sent to Google; CV content, university/account emails, verification codes, order/session identifiers, raw query strings and raw referrers are excluded from our analytics events. You can reject or change the choice through Analytics preferences. The consent preference is stored for up to 180 days. Google has its own processing and international-transfer arrangements. We configure short event/user retention when activating the property; aggregated reports can follow different retention. See https://handsometoad.com/analytics-privacy/ for the implementation and activation status. Analytics acceptance does not permit advertising personalisation, unrelated marketing or Google Signals.

LinkedIn drafts also record the selected role types drawn from your applications and a generation date, to target the requested profile and enforce one generation per UK calendar day. Dated saved drafts follow the same career-data access, closure and retention rules.

3. Lawful bases

We rely on contract where processing is necessary to prepare for or perform your order, provide account access and essential service messages. Necessary accounting and tax records are kept to meet legal obligations. Security, abuse prevention, fault diagnosis and complaint handling rely on our legitimate interests in operating and protecting the service, balanced against your rights. Where a particular optional activity requires consent, we ask separately and explain how to withdraw it. The ordinary legal bases do not by themselves authorise processing special-category information.

Accepting terms or acknowledging this notice is not blanket permission for unrelated marketing. If necessary information is not provided, we may be unable to deliver the requested service.

4. Confidentiality and AI

We do not intentionally notify your employer, network or recruiters that you use Career Concierge. We do not sell or rent your career information to advertisers or data brokers. Confidentiality cannot be absolute: shared devices, email access, authorised disclosures, legal requirements or security incidents can expose information. Use a personal email and device for a discreet job search.

Relevant CV content, job information and instructions are sent to Google's Gemini API for AI-assisted drafting. We use a production project with billing enabled. Under Google's paid-service terms, prompts and responses are not used to improve Google's products. Google allows limited safety/security logging and legally required disclosures; this is not a zero-retention service. We also save your generated documents ourselves. Google's terms and processor addendum are available at https://ai.google.dev/gemini-api/terms and https://business.safety.google/adsprocessorterms/.

Authorised human reviewers can access Executive drafts, make necessary changes and mark documents ready before release. AI output can still be inaccurate; review it before use. We do not decide whether an employer hires you or guarantee employment outcomes. We do not use these drafts to make an employer's recruitment decision.

5. Service providers and international processing

Google Apps Script, Drive/Docs and email services support processing, storage and communications; Gemini supports generation; Stripe handles payments and verification; Netlify hosts the website; Cloudflare Turnstile helps prevent abuse. Browser libraries and content-delivery services receive normal connection information when a resource loads. Providers act as processors or independent controllers depending on the activity. We disclose information needed for these services, legal duties or protection of the service, rather than to unauthorised recruiters.

Providers operate internationally, including in the United States, and we do not promise UK-only storage. For a restricted transfer, the applicable arrangements may include UK adequacy regulations or contractual safeguards with the UK addendum where required. Provider terms do not establish a particular location for every record. Contact support for information about the safeguards applicable to your information or to request a copy, subject to necessary redaction. Provider privacy information is available at https://policies.google.com/privacy, https://stripe.com/privacy, https://www.netlify.com/privacy/ and https://www.cloudflare.com/privacypolicy/.

6. Retention and deletion

Career files, including CVs, generated packs, job specifications and career-profile notes, are retained while needed for your service and agreed access, then deleted within 60 days after confirmed account closure or the agreed engagement end. Cancelling renewal alone does not close an account. Earlier valid erasure requests are assessed separately and are not held until day 60. Career-file deletion and mailbox deletion are handled by support; do not assume a request itself deletes files or stops a subscription.

Ordinary support correspondence and tracking records are due for deletion 90 days after resolution. Routine application Error Logs are due 90 days after creation. Minimal privacy/closure completion records are retained separately for 24 months after resolution to show how requests were handled. We retain only necessary evidence, rather than a copy of the full career profile. A necessary investigation or legal hold may delay deletion of relevant records; it is reviewed and removed when no longer needed.

Necessary Self Assessment business and tax evidence is retained for at least five years after the 31 January submission deadline for the relevant tax year, and longer if tax rules or an investigation require it. Necessary contract, payment, refund, acceptance and dispute evidence may be retained to meet legal obligations or handle a live claim; it is reviewed separately from career files.

Automation covers eligible support tracking/delivery rows and the application's Error Logs, with due dates and holds visible to authorised administrators. Actual mailbox messages and career files require separate removal. Provider logs, backup expiry and version history have separate retention under the relevant service arrangements; deleting our working record does not promise immediate removal of every provider copy. Files you independently download or share remain under your control.

7. Security and browser storage

We use HTTPS, account verification and access controls, and restrict operational access to people who need it. No internet service can guarantee absolute security. Dashboard sign-in uses browser session storage and an expiry. Checkout stores an anonymous attempt identifier to recognise retries; admin sessions are held in page memory. Stripe and Cloudflare may use storage for payment and security under their notices. We do not treat essential service access as consent to optional advertising tracking.

If you suspect unauthorised access, contact support. Never share verification codes.

8. Your rights

Depending on the applicable law and processing, you may ask to access, correct, delete, restrict or receive a portable copy of your information. You may object to legitimate-interest processing and direct marketing, and withdraw consent for an activity relying on it without affecting prior lawful use. Rights have conditions and exceptions; deletion does not always require removal of necessary financial or legal evidence.

Use support@handsometoad.com or the support form. We may make proportionate identity checks and will explain the response, any exception and applicable deadline. You can complain to the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ or your local supervisory authority where applicable.

9. Changes

We identify each version and explain material new uses where required. The version acknowledged with an order remains part of its record. Privacy contact: support@handsometoad.com.

Permanent copy of this version. Use your browser’s Print option to save a PDF.