Data Protection Notice

Information about how we process your personal data under UK GDPR

Data Controller

Cruvo is the data controller responsible for your personal data. This notice explains how we collect, use, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What Personal Data Do We Collect?

  • Identity Information: Name, surname, email address
  • Contact Information: Phone number, address details
  • CV/Resume Information: Education, experience, skills
  • Technical Data: IP address, browser information
  • Preference Information: Job preferences, career goals
  • Voice Data: Voice recordings from AI interviews (with consent)

2. Why Do We Process Your Personal Data?

We process your personal data for the following purposes:

  • To match you with suitable job opportunities
  • To provide AI-powered recruitment matching services
  • To ensure platform security and prevent fraud
  • To comply with legal obligations
  • To improve our services and develop new features
  • To communicate with you about opportunities and updates

3. Legal Basis for Processing

We rely on the following legal bases under UK GDPR:

  • Consent (Article 6(1)(a)): For voice recordings and certain marketing communications
  • Contract (Article 6(1)(b)): To provide our recruitment matching services
  • Legitimate Interests (Article 6(1)(f)): For platform security and service improvement
  • Legal Obligation (Article 6(1)(c)): To comply with applicable laws and regulations

4. Who Do We Share Your Data With?

  • Employers: With your consent, we share your profile with potential employers
  • Service Providers: Cloud storage, AI processing, authentication services
  • Legal Authorities: When required by law or to protect our rights

We do not sell your personal data to third parties.

5. International Data Transfers

Some of our service providers may be located outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

  • UK adequacy decisions
  • Standard Contractual Clauses (SCCs)
  • International Data Transfer Agreement (IDTA)

6. Your Rights Under UK GDPR

Under UK GDPR, you have the following rights:

  • Right of Access (Article 15): Request a copy of your personal data
  • Right to Rectification (Article 16): Request correction of inaccurate data
  • Right to Erasure (Article 17): Request deletion of your data ("right to be forgotten")
  • Right to Restrict Processing (Article 18): Request limitation of data processing
  • Right to Data Portability (Article 20): Receive your data in a portable format
  • Right to Object (Article 21): Object to processing based on legitimate interests
  • Rights Related to Automated Decision-Making (Article 22): Not be subject to solely automated decisions with legal effects

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Typically:

  • Active account data: For the duration of your account plus 2 years
  • Voice recordings: 12 months after the recruitment process concludes
  • Application data: 3 years from the date of application

8. Data Security

Your personal data is protected by appropriate technical and organisational security measures:

  • 256-bit SSL/TLS encryption for data in transit
  • Encryption at rest for stored data
  • Regular security audits and penetration testing
  • Access controls and authentication measures
  • Staff training on data protection

9. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Website: ico.org.uk

Helpline: 0303 123 1113

10. Contact Us

To exercise your rights or for questions about personal data processing:

Last Updated: 4 February 2026

This notice may be updated in accordance with legal requirements. We will notify you of significant changes.

Data Protection Notice | Cruvo