CV Warehouse
← Back to Home
Legal

Privacy Policy

Effective date: 10 December 2013  ·  Last updated: 14 August 2026

This Privacy Policy is a legally significant detail. It describes how CV Warehouse collects, uses, discloses, transfers, retains and protects personal information, and it forms part of the terms on which the Services are made available. By accessing or using the Services you acknowledge that you have read and understood this Policy. If you do not agree with it, you should not use the Services.

1.Who We Are

This Privacy Policy (the “Policy”) is issued by and on behalf of the corporate group operating under the trade name “CV Warehouse” (together with its affiliates, subsidiaries, and associated undertakings, “CV Warehouse”, “we”, “us” or “our”). CV Warehouse operates globally through legal entities registered in various jurisdictions and maintains operational presences and representative arrangements across the GCC, Europe and Singapore. The entity acting as controller of your personal information may vary according to the Service you use, the jurisdiction in which you are located, and the contractual arrangements applicable to your relationship with us; the identity of the relevant entity for any specific processing activity will be confirmed on written request addressed to the contact point identified in Section 28.

This Policy applies to CV Warehouse's websites, applications, platforms, assessments, calculators, tools, communications channels and professional services (collectively, the “Services”), however accessed and regardless of the device or medium used.

2.Scope of this Policy

This Policy applies to personal information relating to the following categories of individuals (each a “you”):

3.Information We Collect

The categories of personal information we collect depend on your interaction with the Services and may include:

We do not sell personal information. Personal information is disclosed only to the categories of recipients, and only for the purposes, described in this Policy, in accordance with applicable data-protection laws and internationally recognised privacy principles. Where disclosure is made to perform a Service you have requested (for example, distribution of your CV to prospective employers), such disclosure is made pursuant to and within the limits of your instructions, as further described in Section 10.

4.Special and Sensitive Personal Data

CVs and career documents may, by their nature and frequently at the initiative of the individual concerned, contain information regarded as special, sensitive or subject to heightened protection under applicable law, including, without limitation: date of birth; nationality; photographs; gender; health or disability information; religious information; and identification information.

We process such information only where, and to the extent that, it is contained in materials you supply, is necessary for the performance of the Service you have requested, or is otherwise processed in accordance with applicable law. You are strongly encouraged not to include sensitive personal information in your CV or other materials unless it is genuinely necessary for your career objectives or customary within your target market. Where you nevertheless choose to include such information, you thereby direct and authorise its processing and onward disclosure as an integral component of the document within which it is contained.

5.How We Use Personal Information

Personal information is processed for the following purposes:

6.Automated Processing and Artificial Intelligence

Certain Services incorporate automated tools and AI-assisted systems, including, by way of illustration, CV and profile analysis, keyword and suitability matching, automated identification of prospective vacancies, automated submission of applications pursuant to your instructions, and assessment scoring.

These systems generate recommendations, scores, drafts and other outputs of a probabilistic and assistive character. They do not, of themselves, produce decisions having legal or similarly significant effect concerning you; hiring, interviewing and engagement decisions rest at all times with the independent employers, recruiters and platforms concerned. Material service outputs are subject to human review processes where the nature of the Service so provides. Automated outputs may be incomplete or inaccurate and are furnished on an assistive basis only; they do not constitute professional, legal or career advice, and no assurance is given as to any particular outcome. Where applicable law confers such a right, you may request human review of automated processing that materially affects you by contacting us in accordance with Section 28.

7.Legal Bases and Informed Use of the Services

Where applicable law so requires, we rely on the following legal bases: performance of a contract with you or steps taken at your request prior to entering a contract; your consent, where obtained; our legitimate interests in operating, securing and improving the Services, balanced against your interests and rights; and compliance with legal obligations to which we are subject.

The Services are discretionary professional and digital services concerning inherently uncertain employment markets. You are expected to review the descriptions, processes, inclusions and limitations of each Service carefully before purchase, and to proceed only if you are satisfied that the Service is appropriate for your circumstances and objectives. Career outcomes depend upon factors outside our control, including market conditions and the independent decisions of employers, recruiters and platforms, and no employment, interview or engagement outcome is warranted or guaranteed. To the maximum extent permitted by applicable law, our liability in connection with the processing described in this Policy is limited accordingly. Nothing in this Policy excludes or limits any right or remedy which cannot lawfully be excluded or limited under applicable law.

8.International Data Transfers

CV Warehouse operates globally. Your information may accordingly be transferred to, stored in and processed in jurisdictions other than the jurisdiction in which you reside, including jurisdictions whose data-protection regimes differ from your own. Where such transfers are subject to legal requirements, we implement appropriate safeguards recognised under applicable law, which may include contractual data-protection clauses with recipients, intra-group transfer arrangements, transfers to jurisdictions benefiting from adequacy recognition, and supplementary technical and organisational measures proportionate to the transfer concerned.

9.Service Providers

We engage third-party service providers, acting on our documented instructions, within the following categories:

Service providers are authorised to process personal information solely for the purposes for which they are engaged, subject to contractual confidentiality and data-protection obligations, and are not permitted to use such information for their own independent purposes except where they act as independent controllers under applicable law (as described in Sections 10 and 11).

10.CV Distribution and Job Applications

Where you instruct CV Warehouse to distribute your CV, submit applications on your behalf, contact employers or recruiters, utilise recruitment platforms, or operate automated job-search or application services, you thereby authorise and direct CV Warehouse to process, transmit and disclose your personal information, including the entire contents of your CV and associated materials, to such employers, recruiters, platforms and intermediaries as is necessary or reasonably incidental to the performance of the instructed Service.

You acknowledge that recipients of such disclosures are independent third parties acting as independent controllers of the information disclosed to them; that their subsequent handling, retention, evaluation and use of that information is governed by their own policies and by the laws applicable to them; that digital transmission of information to independent recipients is, by its nature, incapable of recall or continuing supervision by CV Warehouse once effected; and that CV Warehouse is not responsible for the acts, omissions, decisions or data-handling practices of such independent recipients. To the maximum extent permitted by applicable law, CV Warehouse's responsibility in respect of instructed distribution is confined to effecting the disclosure in accordance with your instructions and this Policy. This Section does not limit any obligation which cannot lawfully be limited, nor any right you may have against the relevant recipient.

11.LinkedIn and Other Third-Party Platforms

Services relating to LinkedIn or other professional platforms are performed in respect of platforms owned and operated by independent third parties with which CV Warehouse has no affiliation. Such platforms maintain their own terms of service, privacy policies, algorithms and enforcement practices, which may change without notice and over which CV Warehouse exercises no control. Your use of any such platform, including in connection with a Service, is governed by that platform's own terms and policies, which you are responsible for reviewing.

12.Cookies and Tracking Technologies

The Services use cookies and similar technologies in the following categories:

Where applicable law requires consent for non-essential cookies, such cookies are deployed in accordance with the consent mechanisms made available to you. You may additionally manage cookies through your browser settings; disabling certain cookies may impair the functionality of the Services.

13.Marketing Communications

Where legally permitted, we may send promotional emails and newsletters concerning the Services. You may opt out of marketing communications at any time through the unsubscribe mechanism contained in each such communication or by contacting us under Section 28. Opting out of marketing does not affect transactional, service or administrative communications reasonably necessary to the operation of your account or the performance of a Service, which are not marketing communications for these purposes.

14.Data Retention

Retention periods are determined by reference to, among other factors:

Internal retention schedules are maintained and applied to reflect these criteria, following which information is deleted, de-identified or irreversibly aggregated.

15.Data Security

We maintain technical and organisational measures appropriate to the nature, scope and risks of the processing, including access controls operated on a need-to-know basis; encryption where appropriate; authentication controls; monitoring of systems and infrastructure; secure infrastructure arrangements with our hosting providers; confidentiality obligations binding on personnel; and documented incident-management procedures. No system can be warranted as absolutely secure, and the transmission of information over public networks is undertaken at your own election; however, we review and develop our safeguards on an ongoing basis.

16.Security Incidents

Suspected or confirmed incidents affecting personal information are assessed and managed under our incident-management procedures, which address containment, investigation, remediation and documentation. Where applicable law requires notification of a personal-data breach to a supervisory authority or to affected individuals, such notification is made in the manner and within the timeframe required by the law concerned.

17.Your Privacy Rights

Depending on your jurisdiction and the applicable law, you may have some or all of the following rights:

Rights requests may be submitted through the contact point in Section 28 and are addressed in accordance with the law applicable to the request, including any applicable verification, timing, exemption and fee provisions.

18.Regional Provisions

European Economic Area and United Kingdom

Where and to the extent that processing of your personal information falls within the scope of the EU General Data Protection Regulation or the UK GDPR, by reason of your location or the circumstances of the processing, the provisions of those regimes apply to that processing, including the legal bases described in Section 7, the transfer safeguards described in Section 8, and the rights described in Section 17, together with the right to lodge a complaint with the competent supervisory authority described in Section 27.

GCC

Data-protection laws across the GCC continue to develop and vary by jurisdiction. Where such laws apply to the processing of your personal information, we apply the requirements of the relevant law to that processing, including with respect to lawful bases, cross-border transfer conditions and individual rights.

United States

Where state privacy legislation applies to our activities in respect of residents of particular states, we address the applicable requirements of such legislation based on our actual activities and applicable thresholds. This Policy does not assert compliance with any regime whose applicability to our activities has not been established.

19.Children's Privacy

The Services are directed to adults of working age and are not intended for children. We do not knowingly collect personal information from individuals below the age at which they may lawfully consent to the processing of their personal information in their jurisdiction. If you believe a minor has provided personal information to us, please contact us under Section 28 and we will take appropriate steps to delete such information.

20.Third-Party Websites

The Services may contain links to third-party websites, platforms and resources. Such links are provided for convenience only; CV Warehouse does not control, endorse or assume responsibility for the content or privacy practices of any third party, and your use of third-party properties is at your own risk and subject to their terms and policies.

21.Payments

Payments are processed by independent third-party payment providers. Complete payment-card details are supplied by you directly to, and are processed and stored by, the relevant payment provider under its own terms and security certifications; CV Warehouse does not itself store complete payment-card numbers. We retain transactional records (such as amount, date, Service purchased and confirmation identifiers) for the purposes described in this Policy.

22.Account Security

You are responsible for maintaining the confidentiality of your account credentials, for all activity occurring under your account, and for notifying us without undue delay of any suspected unauthorised access or use. CV Warehouse is not responsible for loss arising from your failure to safeguard credentials, to the extent such responsibility may lawfully be allocated to you.

23.Controller and Processor Roles

CV Warehouse's role under applicable data-protection law varies by processing activity. In respect of the operation of its own websites, accounts, marketing and consumer Services, CV Warehouse generally acts as a controller. In respect of certain business, recruitment or platform services performed on the documented instructions of a business customer, CV Warehouse may act as a processor on behalf of that customer, whose own obligations as controller then apply. No single role is asserted universally for all processing activities; the applicable role for any given activity is determined by the nature of that activity and the applicable contractual arrangements.

24.Information You Provide About Others

Where you supply personal information relating to any other individual (for example, a referee, a recruiter contact or an employee), you represent and warrant that you possess the authority, consents or other lawful basis required to provide that information to us for processing in accordance with this Policy, and you shall be responsible for the accuracy and lawfulness of such provision.

25.Deletion of Accounts and CVs

You may request deletion of your account, CVs and associated personal information through the contact point in Section 28. Upon a verified request we will delete the information concerned, save that certain information may be retained notwithstanding such request where and for so long as retention is required or permitted for legal or regulatory compliance, accounting and tax purposes, the establishment, exercise or defence of legal claims, the resolution of disputes, or security and fraud-prevention purposes, in accordance with Section 14. Deletion does not extend to information previously disclosed, on your instructions, to independent recipients as described in Section 10, in respect of which any deletion request must be directed to the recipient concerned.

26.Changes to this Policy

We may amend this Policy from time to time. The effective date and the date of last update appear at the head of this document. Material changes will be communicated through the Services or by other appropriate means before taking effect where required by applicable law. Your continued use of the Services following the effective date of an amended Policy constitutes acknowledgement of the amended Policy to the extent permitted by applicable law.

27.Complaints

Privacy complaints may be submitted to the contact point identified in Section 28 and will be reviewed under our internal complaint-handling procedures. We ask that you afford us the opportunity to address any concern in the first instance. Where applicable law so provides, you additionally have the right to lodge a complaint with the supervisory or data-protection authority competent for your jurisdiction or place of the alleged infringement.

28.Contacting Us

Questions, rights requests and complaints concerning this Policy or our handling of personal information should be addressed to our privacy contact at info@cvwarehouseauto.com, marked for the attention of the Privacy Office. We may require verification of your identity before acting on a request, in order to protect your information.