Privacy Policy

1. Who We Are

RealCV is a CV verification service that helps employers verify the employment history and educational qualifications claimed by job candidates. We are the data controller for the personal data processed through our service.

2. Information We Process

We process the following types of personal data:

• CV Content: Employment history, educational qualifications, names, job titles, dates of employment/education, and other information contained in uploaded CVs
• Verification Results: Information obtained from Companies House, educational institution registers, and other public sources
• User Account Data: Email addresses and authentication information for registered users of our platform

3. How We Use Your Information

We use personal data for the following purposes:

• Verifying employment claims against Companies House records
• Checking educational institution accreditation status
• Identifying timeline inconsistencies in CVs
• Generating verification reports for our clients
• Improving our verification algorithms and service quality

4. Legal Basis for Processing

We process personal data on the basis of legitimate interests (GDPR Article 6(1)(f)). Our legitimate interests include:

• Helping employers make informed hiring decisions
• Preventing CV fraud and misrepresentation
• Maintaining trust and integrity in the hiring process

We have conducted a Legitimate Interests Assessment to ensure that our processing is necessary and does not override the rights and freedoms of data subjects.

5. Information About Candidates

When an employer uploads a candidate's CV for verification, the candidate becomes a data subject under UK GDPR. In accordance with Article 14, we recognise that candidates have rights regarding their personal data, including:

• Right to be informed: Candidates should be informed by the employer that their CV may be subject to verification checks
• Right of access: Candidates may request a copy of any personal data we hold about them
• Right to rectification: Candidates may request correction of inaccurate personal data
• Right to erasure: Candidates may request deletion of their personal data in certain circumstances
• Right to object: Candidates may object to processing based on legitimate interests

Employers using our service are required to ensure appropriate notice is given to candidates about the verification process in accordance with their legal obligations.

6. Data Retention

We retain personal data as follows:

• Verification reports: Retained for 2 years from the date of generation, unless earlier deletion is requested
• Uploaded CV files: Automatically deleted 30 days after processing
• User account data: Retained until account deletion is requested

7. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments
• Staff training on data protection

8. Third-Party Services

We may share personal data with the following categories of recipients:

• Cloud infrastructure providers: For hosting and data storage
• AI service providers: For CV parsing and analysis
• Public registries: Companies House and educational institution registers (publicly available data)

9. International Transfers

Personal data may be transferred to and processed in countries outside the UK. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

10. Your Rights

You have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing based on legitimate interests
• Request restriction of processing
• Lodge a complaint with the Information Commissioner's Office (ICO)

11. Contact Us

For any questions about this privacy policy or to exercise your data protection rights, please contact us at: privacy@realcv.co.uk

You also have the right to lodge a complaint with the Information Commissioner's Office: ico.org.uk