CareerSet - Privacy Policy

Privacy Policy

This Privacy Policy applies between you, the User of this Website, and CareerSet Ltd, the owner and provider of this Website. CareerSet takes the privacy and protection of your Data very seriously. This Policy sets out how we collect, use, and safeguard your Data in connection with your use of the Website and our services.

Please read this Privacy Policy carefully. For easy answers to common questions, you can also visit our Privacy Help Centre.

Definitions and interpretation

In this privacy policy, the following definitions are used:

Data	Collectively all information that you submit to CareerSet via the Website. This definition incorporates, where applicable, the definitions provided in the Data Protection Laws.
Cookies	A small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features of the Website. Details of the cookies used by this Website are set out in the clause below (Cookies); see our Cookies Statement.
Data Protection Laws	Any applicable law relating to the processing of personal data, including but not limited to Directive 96/46/EC (Data Protection Directive) or the GDPR, and any national implementing laws, regulations and secondary legislation.
GDPR	The General Data Protection Regulation (EU) 2016/679; and the Data Protection Act 2018 (UK).
CareerSet, or us	CareerSet, www.careerset.io, www.careerset.com Registered: CareerSet Ltd, 63/66 Hatton Garden Fifth Floor Suite 23, London, EC1N 8LE, United Kingdom.
UK and EU Cookie Law	The Privacy and Electronic Communications (EC Directive) Regulations 2003 as amended by the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011.
User or you	Any third party that accesses the Website and is not either (i) employed by CareerSet and acting in the course of their employment or (ii) engaged as a consultant or otherwise providing services to CareerSet and accessing the Website in connection with the provision of such services.
Website	The Website that you are currently using, CareerSet.io, CareerSet.com, and any sub-domains of this site unless expressly excluded by their own terms and conditions.

In this Privacy Policy, unless the context requires otherwise:
1. The singular includes the plural and the plural includes the singular;
2. References to clauses, sub-clauses, schedules or appendices are to those within this Privacy Policy;
3. A reference to a “person” includes a natural person, company, partnership, trust, government body or other legal entity;
4. “Including” is understood to mean “including without limitation”;
5. References to any law or regulation include any amendment, modification, re-enactment or replacement of it;
6. Headings and sub-headings are for convenience only and do not affect the interpretation of this Privacy Policy.

Scope of this Privacy Policy

This Privacy Policy applies only to the actions of CareerSet and Users in relation to this Website and our services. It does not extend to any third-party websites that may be accessed from this Website, including (but not limited to) links to social media platforms or external resources.
For the purposes of applicable Data Protection Laws, CareerSet is by default the “data controller”. This means that CareerSet determines the purposes for which, and the manner in which, your Data is collected and processed. Where we act instead as a “data processor” on behalf of an educational institution or authorised partner, this will be indicated on the portal page of the institution or partner providing you access. In such cases, a different privacy policy may apply, and you will be presented with the correct version when signing up to CareerSet.

Data collected

The type of Data we collect depends on the CareerSet product you use. As our products are provided through your educational institution or another authorised partner, we only collect the information necessary to deliver the service you access. The categories of Data we may collect are:

a. Account Information

Scope: applies to all users who register with CareerSet.

Name and email address — used to create your account and communicate with you.

Account verification details — such as graduation year, course, faculty, or student number (where required by your educational institution at registration).

b. Application and Profile Content

Scope: applies depending on the product you use.

CV content and, where provided, job description content — submitted through documents and job descriptions you upload via ScoreMyCV or TargetMyCV.

Cover letter and job description content — submitted through documents and job descriptions you upload via Cover Letter Feedback.

LinkedIn profile content — submitted through profiles, images, or other information you provide via CareerSet’s LinkedIn Optimisation tool.

Audio, video and/or text responses, alongside CV and job description content — submitted through CareerSet’s Interview Practice tool.

c. Technical and Other Information

Scope: applies to all users when logging in or submitting information.

IP address — collected when you log in, for security and fraud-prevention purposes.

Other details — provided when completing a form, opening a support ticket, entering information, uploading files, or submitting feedback.

In all cases, Data is collected solely to provide the CareerSet product you are using and is always processed in accordance with this Privacy Policy.

How we collect Data

We collect Data in two main ways:
1. Data you provide to us – information you actively submit when using our services;
2. Data collected automatically – information gathered through your interaction with our Website and products.

Data you provide to us

CareerSet collects Data that you choose to share with us, for example:
1. when registering for an account or logging in to access CareerSet products provided by your educational institution or authorised partner;
2. when using ScoreMyCV or TargetMyCV and submitting CVs and, where applicable, job descriptions;
3. when using Cover Letter Feedback and submitting cover letters and related job descriptions;
4. when using LinkedIn Optimisation and submitting LinkedIn profile content (such as profile details, images or other information);
5. when using Interview Practice and submitting audio, video and/or text responses;
6. when contacting us (for example via the Website, email, telephone or post), completing optional surveys, or providing feedback and suggestions.

In all cases, Data is collected and processed solely for the purposes of providing CareerSet products and services, in accordance with this Privacy Policy.

Data that is collected automatically

When you access the Website, certain Data is collected automatically, namely:
1. information about your visit — including your IP address, the date, time and frequency of access, and how you use and interact with Website content (used to help us improve functionality, security and navigation);
2. Data collected via cookies — in accordance with the cookie settings on your browser. For more information about cookies and how we use them, please see our Cookies Statement.

Our use of Data

We collect and process Data only for the purposes of providing career support through our products and services. We do not monetise your Data or use it for any unrelated purposes. Specifically, Data may be used for the following purposes:
1. to provide personalised feedback on application documents such as your CV, cover letter, and LinkedIn profile;
2. to provide feedback on your interview responses through Interview Practice, helping you prepare for real interviews;
3. to share usage data and feedback with your educational institution, either directly or via its career centre management system (where applicable), to support personalised career guidance and reporting;
4. to maintain, improve, and further develop our products and services, including internal administration;
5. to ensure the security of our platform and prevent misuse or unauthorised access;
6. to comply with legal or regulatory obligations, where required.

All Data is collected and processed in accordance with this Privacy Policy.

We process your Data on the basis of your explicit consent. By registering for and using CareerSet products, you agree to the terms of use and this Privacy Policy, and thereby consent to the collection and processing of your Data as described.
CareerSet has contractual agreements with educational institutions and authorised partners who make our platform available to their students or members. However, your individual use of CareerSet relies on your explicit consent, not on those contracts. You may withdraw your consent at any time (see the section headed "Your rights" below).

Who we share Data with

We may share your Data with the following parties, where necessary for the provision of our services:

a. Employees, Agents and Professional Advisors	To enable the effective provision, support and improvement of our services and solutions.
b. Your Educational Institution or Authorised Partner	To provide insights into usage and feedback, supporting personalised career guidance and reporting requirements. Current partners: educational institutions and other authorised organisations that have entered into a service agreement with CareerSet. The relevant partner may be clear from the dedicated login domain used to access the platform (e.g. careerset.com/institution), or from the invitation or access link provided to you.
c. Career Centre Management System Providers	If integrated by your institution, to ensure efficient and secure storage of student information for service delivery. Current providers: Group GTI, Symplicity.
d. Hosting and Cloud Providers	To securely host, store and back up Data, and to make our platform accessible via our registered domains. Current providers: DigitalOcean, AWS.
e. Technical and Security Providers	To provide website security and performance, including processing IP addresses to protect against malicious traffic and ensure service resilience. Current provider: Cloudflare.
f. AI Technology Providers (GPT Integrations)	To power AI-based features within CareerSet. All Writing Suggestions features within ScoreMyCV, TargetMyCV, and Cover Letter Feedback; and our LinkedIn Optimisation and Interview Practice products, which use AI to enhance parsing and feedback capabilities. These features require explicit opt-in and submission before use, ensuring you are aware of what content is being shared. With these features, only the content you choose to submit is shared. The specific content is clearly indicated within each product. Usage is entirely optional, and no additional personally identifiable information (such as contact details) is provided. Current provider: OpenAI. Submitted content is transmitted securely to the AI technology provider(s) for the sole purpose of generating the requested feedback or suggestions. Providers process the content only to deliver a response and do not use it to train or improve their models. Content may be temporarily stored for security, monitoring and troubleshooting, but is not retained permanently or reused for other purposes.

In each case, Data is shared only to the extent necessary and always in accordance with this Privacy Policy.

Keeping Data secure

We use a combination of technical and organisational measures to safeguard your Data, including:
1. controlling account access with unique usernames and secure authentication;
2. storing Data on servers certified to ISO/IEC 27001:2013;
3. encrypting traffic between your browser and our Website using Transport Layer Security (TLS) over HTTPS;
4. encrypting Data at rest and maintaining two automated daily backup mechanisms;
5. protecting systems with advanced web application firewalls, vulnerability monitoring, and regular penetration testing;
6. scanning the Website regularly for malware, security risks, and vulnerabilities;
7. restricting access to personal Data to authorised individuals only, who are required to maintain confidentiality.
We also have procedures in place to detect, respond to and mitigate any suspected Data breach. If you suspect misuse, loss, or unauthorised access to your Data, please contact us immediately at [email protected].
For practical guidance on protecting your own information and devices against fraud, identity theft, viruses, and other online threats, you may visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.

Data retention

We retain your Data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required by law. Specifically:
1. Feedback reports are automatically deleted 36 months after submission;
2. User account information (such as name and verification details) is automatically deleted 36 months after your last login;
3. Your Data may also be deleted earlier if we cease our collaboration with the educational institution or authorised partner that granted you access to CareerSet.
Even if your Data is deleted from our active systems, it may continue to exist temporarily in secure backup or archival media where required for legal, tax, or regulatory compliance. Such Data is not used for any other purpose and will be permanently erased in accordance with our retention and backup policies.

Your rights

Under the UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR), you have the following rights in relation to your Data:
1. Right of access – to request a copy of the Data we hold about you, or to ask that we update or delete such Data. Requests will be free of charge unless they are “manifestly unfounded or excessive”. Where legally permitted, we may refuse a request, and if so, we will explain the reasons.
2. Right to rectification – to have your Data corrected if it is inaccurate or incomplete.
3. Right to erasure – to request that we delete or remove your Data from our systems.
4. Right to restrict processing – to limit the way in which we use your Data or to block us from processing it.
5. Right to data portability – to request that we transfer your Data to another service provider in a structured, commonly used, and machine-readable format.
6. Right to object – to object to our processing of your Data, including where we rely on legitimate interests as the legal basis for processing.
7. Right to opt out of communications – to stop receiving emails, notices, or other communications about products and services. You can do this by unsubscribing from communications or by contacting us at [email protected].
8. Right to close your account – to request that we delete your account and stop using your Data to provide services. Please note this may mean you can no longer access CareerSet solutions.
To make enquiries, exercise any of your rights above, or withdraw your consent (where consent is the legal basis for processing your Data), please contact us at [email protected]. We aim to respond to all requests within one month, in line with legal requirements.
If you are not satisfied with how we handle your Data or a complaint you make to us, you may refer your complaint to the relevant data protection authority. In the UK, this is the Information Commissioner’s Office (ICO). Details are available at https://ico.org.uk/.
It is important that the Data we hold about you is accurate and up to date. Please let us know if your Data changes during the period we hold it.

Data aggregation and analytics

We may collect information about your use of CareerSet in an anonymised and aggregated form. This information is used strictly for analytics purposes, to improve the features, performance, and quality of our Website and services. Anonymised Data has all direct personal identifiers removed, such as name, ID numbers, date of birth, demographic information, or geolocation data. Aggregated information that does not identify individuals may be shared with third parties for purposes such as industry analysis, service benchmarking, or demographic profiling. We will not attempt to re-identify anonymised Data. Users are not entitled to any compensation arising from the use of anonymised or aggregated information.

Links to other websites

Our Website may, from time to time, include links to external websites. We have no control over such websites and are not responsible for their content. This Privacy Policy does not apply to your use of those websites, and we encourage you to review the privacy policy of any website you visit.

Third-party disclosure

We do not sell, trade, or otherwise transfer your Data to outside parties without advance notice. The only exceptions are trusted service providers (such as hosting partners or technical support providers) who assist us in operating our Website, delivering services, or supporting users, and who are contractually required to keep your Data confidential and secure. We may also disclose Data where required by law, to enforce our site policies, or to protect our rights, property, or safety, or that of others.
Non-personally identifiable visitor information may be shared with third parties for purposes such as analytics, research, or service improvement.
We do not permit third-party behavioural tracking for advertising or profiling purposes.

General

You may not transfer any of your rights under this Privacy Policy to another person. We may transfer our rights under this Privacy Policy where we reasonably believe your rights will not be affected.
If any court or competent authority finds that any provision of this Privacy Policy (or part of a provision) is invalid, illegal, or unenforceable, that provision (or part) will be deemed deleted to the extent necessary. The validity and enforceability of the remaining provisions will not be affected.
Unless otherwise agreed, no delay, act, or omission by either party in exercising any right or remedy will be deemed a waiver of that or any other right or remedy.
This Privacy Policy is governed by and will be interpreted in accordance with the laws of England and Wales. Any disputes arising in connection with it will be subject to the exclusive jurisdiction of the courts of England and Wales.

Changes to this Privacy Policy

CareerSet may update this Privacy Policy from time to time, as we deem necessary or as required by law. Any changes will be posted immediately on the Website, and users will be notified upon their next login. In the case of significant changes, you may be asked to review and accept the updated Privacy Policy before continuing to use the platform.

Contact information

Questions about this Privacy Policy should be sent to [email protected].

Last updated: 25 August 2025