Notice version 2026-08-31 · Last updated 31 August 2026
Who controls your information
Information we collect
We collect the contact details you enter; your CV and the employment, education and skills information it contains; your answers and visibility choices; optional photograph, LinkedIn address and voice recording; generated profile content; publication history; access-session records; and purchase records where applicable.
Why we use it
We use this information to create, personalise, host and support the Interactive CV service you request; let you review and control what is published; secure the service; answer employer questions from your approved information; handle support, legal and accounting obligations; and investigate misuse.
The principal lawful basis for creating and hosting a requested Interactive CV is performance of a contract or steps taken at your request before a contract. Legitimate interests may apply to proportionate security, fraud prevention and service improvement. Publication and optional visibility choices remain under your control. Any separate marketing use requires its own lawful basis.
AI processing and human control
Cloudflare Workers AI processes relevant CV text and answers to help structure and draft the profile. It does not make hiring decisions. Generated material remains private until you review and approve it, and answers must be grounded in information you supplied.
Sensitive information
Please do not include health, disability, racial or ethnic origin, religion, political opinions, trade-union membership, genetic or biometric identifiers, sex-life or sexual-orientation information unless it is genuinely necessary and you have been specifically told how it will be handled. ReviveyourCV does not require this information to create a normal Interactive CV.
Who receives it and where it is processed
Cloudflare provides the Worker, D1 database, R2 object storage and Workers AI used by this service. Service providers may process information only for the service and security purposes described here and under applicable data-processing terms.
Configured data-location status: D1 and R2 restricted to the EU jurisdiction; verified 2026-08-31. Any applicable international-transfer safeguards and the final D1/R2 jurisdiction must be confirmed before real customer data is accepted.
Publication and sharing
Nothing is publicly published until you approve it. Contact details, location, photograph, voice recording and other optional information remain private unless you switch on the relevant visibility choice. Once you share a public profile link, recipients may view the approved public information.
How long we keep it
Incomplete drafts are deleted after 90 days without activity. Paid, approved and published service records are deleted after 400 days, unless the service is renewed or the law requires a limited record to be kept.
You can delete your information sooner from the private “My data and privacy” page. Backup, security, tax or legal records may be kept only where required and for the applicable limited period.
Your rights
You may ask for access, correction, erasure, restriction, portability or objection where the relevant UK GDPR right applies. Use the private data page for an immediate export or deletion, or email sales@reviveyourcv.com. We may need to verify your identity.
Complaints
Please contact us first so we can try to resolve the concern. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.
Security and browser storage
Private candidate routes require a candidate-specific access token. The browser keeps that token in session storage for the current tab/session. We do not use it for advertising. No online service can guarantee absolute security; please report any suspected unauthorised access immediately.
Changes to this notice
If the purposes or handling materially change, the notice will be updated and a new version may need to be acknowledged before further processing.