Privacy Policy
Last updated: May 2026 · UK GDPR compliant
Your data rights matter. This policy explains plainly what we collect, why, and how you can access, correct, or delete it at any time, without needing to contact us.
1. Who we are
Career Playbook is operated by QuantumPass Ltd, a company registered in England and Wales. We are the data controller for personal data processed through this service. Contact: privacy@careerplaybook.co.uk
2. What data we collect
We collect: your name and email address when you register; CV content you upload or create using our tools; ATS scoring history and job descriptions you submit; billing information processed by Stripe (we never see or store card numbers); consultation booking data processed by Cal.com; and standard server logs (IP address, browser type, pages visited).
3. Legal basis for processing
We process your personal data on the following UK GDPR bases: contract performance (providing the service you signed up for); legitimate interests (improving our scoring models and fraud prevention); legal obligation (tax and financial records); and consent where we ask for it explicitly (e.g. marketing emails).
4. How we use your data
Your data is used to: provide and personalise the Career Playbook service; generate ATS scores and AI-assisted content; process payments and manage your subscription; send transactional emails (receipts, booking confirmations); and improve our AI scoring models (using anonymised, aggregated data only; individual CVs are never used to train third-party models without explicit consent).
5. Data storage and transfers
All personal data is stored in Microsoft Azure UK South (London). Data does not leave the UK except where you access third-party services (Stripe, Cal.com, SendGrid) that are subject to appropriate Standard Contractual Clauses and adequacy decisions. Azure OpenAI is configured to use UK South endpoints with no data retention by Microsoft.
6. Data retention
We retain your account data for as long as your account is active. If you delete your account, all personal data is permanently erased within 30 days, except where retention is required by law (e.g. financial records retained for 7 years under UK tax law). ATS scoring history is deleted immediately on account deletion.
7. Your rights under UK GDPR
You have the right to: access your personal data (download from Account → Your data); rectify inaccurate data; erase all your data (Account → Delete account, which triggers a permanent, immediate cascade); restrict or object to processing; data portability (JSON export available); and withdraw consent at any time. To exercise any right, email privacy@careerplaybook.co.uk or use the in-app tools. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk.
8. Cookies
We use a single session cookie (next-auth.session-token) strictly necessary for authentication. We do not use advertising cookies, tracking pixels, or third-party analytics without your consent. A consent banner appears on first visit.
9. Third-party processors
Stripe (payment processing): Stripe Inc, EU/UK Standard Contractual Clauses in place. Cal.com (booking scheduling): data processed on Cal.com infrastructure, subject to their privacy policy. SendGrid / Twilio (transactional email): UK-based sending infrastructure. Microsoft Azure (hosting, AI): UK South region, Data Processing Agreement in place.
10. Changes to this policy
We may update this policy to reflect changes in our practices or law. Material changes will be notified by email to registered users at least 14 days before taking effect. The current version is always available at careerplaybook.co.uk/privacy.
Questions about this policy? Email privacy@careerplaybook.co.uk or write to: QuantumPass Ltd, Privacy Team, c/o registered office, England.