1. Data Controller

AJ Consulting UK ("we", "us", "our") is the data controller responsible for your personal data.

Contact: [email protected]

2. Services Covered

This privacy policy applies to all AJ Consulting UK services, including:

3. Data We Collect

We collect different types of personal data depending on which service you use:

3.1 Contact Information (All Services)

Data Type	Purpose	Legal Basis
Name	Identification and communication	Legitimate interest / Contract
Email Address	Communication and account access	Contract performance
Phone Number	Support communication (optional)	Legitimate interest

3.2 Service-Specific Data

Service	Additional Data Collected	Purpose
Job Search (jobs.aj-consulting.uk)	CV content, employment history, job preferences, payment info	CV tailoring and job matching
Support (support.aj-consulting.uk)	Issue descriptions, device information	Technical support provision
CV Hosting (cv.aj-consulting.uk)	CV content, access codes	CV hosting and access control

3.3 Automatically Collected Data

• IP address and browser information (for security)
• Session cookies for authentication
• Basic usage analytics (page views)

4. How We Use Your Data

Your data is used to:

• Provide and operate our services
• Respond to your enquiries and support requests
• Process payments where applicable
• Send service-related communications
• Improve and develop our services
• Comply with legal obligations

We will never use your data for unsolicited marketing without your explicit consent.

5. AI Processing

Where AI is used:

• Job Search Service: AI is used to tailor CVs and match job listings
• Local Processing: We use locally-hosted AI models on our own infrastructure
• No Third-Party AI: Your data is NOT sent to external AI providers (OpenAI, Google, etc.)
• Human Oversight: You review and approve all AI-generated content before use

6. Data Sharing

We do NOT sell your personal data. We may share data with:

• Service providers: Payment processors (Stripe) for billing only
• Legal requirements: When required by law or to protect our rights
• Business transfers: In case of merger or acquisition (with prior notice)

7. Data Storage & Security

Your data is stored and processed on servers located in the United Kingdom. We implement:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing (bcrypt)
• Access controls and authentication
• Regular security assessments
• Secure hosting infrastructure

We do not transfer your data outside the UK/EEA without adequate safeguards.

8. Data Retention

Data Type	Retention Period
Contact enquiries	2 years from last contact
Account data	Duration of account + 30 days
Support tickets	3 years from resolution
Payment records	7 years (legal requirement)
Server logs	90 days

9. Your Rights (UK GDPR)

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restrict processing: Limit how we use your data
• Data portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent

To exercise these rights, contact: [email protected]

We will respond within 30 days.

10. Cookies

We use essential cookies for:

• Session management (authentication)
• Security (CSRF protection)

We do not use tracking or advertising cookies. We do not use Google Analytics or similar services.

11. Children's Privacy

Our services are not intended for users under 18 years of age. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this policy. We will notify you of significant changes via email or through our services. The "Last updated" date indicates when changes were made.

13. Complaints

If you have concerns about our data practices, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk

Phone: 0303 123 1113

14. Contact Us

For privacy-related questions or to exercise your rights:

Email: [email protected]

Postal: AJ Consulting UK, United Kingdom