Monday to Friday 8am - 6pm GMT UK based with clients around the globe +44 (0) 7928 525 882 becky@winningcvs.com

GDPR Policy and Privacy Policy

For Winning CVs.

This policy sets out how we handle your personal information should you submit any personal details via our website, over the phone or via other means.

1. The type of personal information we collect

We collect certain personal information about visitors and users of our websites. The most common types of information we collect include things like: names, email addresses and other contact details submitted via our contact or brochure request forms.

2. How we collect personal information

We collect personal information directly when you provide it to us, for example when you submit a contact form or brochure request on our website, or communicate with us by phone or email.

3. How we use personal information

We will use your personal information:

We collect your personal information when you provide it to us via our contact form, brochure request form, email, phone or other direct communication.

We may also use your personal information for the purpose of responding to requests by government, a court of law, or law enforcement authorities conducting an investigation.

When we disclose your personal information, it is only to those entities that are required to be involved in order to best serve our attempts to complete our business with you, as well as our professional advisers and regulators and government authorities in connection with our compliance procedures and obligations.

4. Where we transfer and/or store your personal information

We are based in the UK so your data will be processed in the UK. In order to protect your information, we take care where possible to work with subcontractors and service providers who we believe maintain an acceptable standard of data security compliance.

5. How we keep your personal information secure

We store personal information on secure servers that are managed by us and our service providers, and occasionally hard copy files that are kept in a secure location in the UK. Personal information that we store or transmit is protected by security and access controls, including username and password authentication, two-factor authentication, and data encryption where appropriate.

6. How you can access your personal information

You can access some of the personal information that we collect about you by contacting us at becky@winningcvs.com. You also have the right to make a request to access other personal information we hold about you and to request corrections of any errors in that data.

7. Marketing communications

We do not operate mailing lists and will not send you unsolicited marketing emails. Any communication from us will be directly related to a service you have enquired about or engaged with.

8. Website analytics

This website uses Plausible Analytics, a privacy-focused analytics tool. Plausible does not use cookies, does not collect personal data, and does not track individuals across websites. All visitor data is aggregated and no personally identifiable information is stored. This means our analytics are fully GDPR compliant without requiring cookie consent banners.

Plausible may record general, non-identifying information such as the pages you visit, referral sources, approximate geographic location (country level), device type and browser. None of this data can be used to identify you personally.

9. Visitors under 16

Our services are designed for working professionals and our website content reflects this. We do not knowingly collect personal information from anyone under the age of 16. If you are under 16, please do not submit any personal information through our forms. Parents and guardians are encouraged to monitor their children's use of the internet.

10. How long we keep your personal information

We retain your personal information for as long as is necessary to provide the services to you and to comply with our legal obligations. If you no longer want us to hold your personal information, you can request that we erase it by contacting us. Please note that we may retain certain information as necessary for our legitimate business interests, to comply with the law, prevent fraud, resolve disputes and take other actions permitted by law. Any retained information will be handled in accordance with this Privacy Policy.

11. When we need to update this policy

We will need to change this policy from time to time in order to make sure it stays up to date with the latest legal requirements and any changes to our privacy management practices. When we do change the policy, we will make sure to notify you about such changes, where required. A copy of the latest version of this policy will always be available on this page.

12. How a data breach will be reported

Although we and our service providers will take care to keep your data secure and only accessible by those authorised by ourselves to view it, should we believe a breach of your data has occurred we will contact the ICO within the required 72 hours. For more information please see the ICO website.

13. How will you be informed of a data breach that involves you

If we have reason to believe that the personal data we hold regarding you has been accessed by anyone other than an authorised source then we will contact you via email in the first instance.

14. How you can contact us

IMPORTANT: Should at any time you would like to contact us about our privacy policy or to learn about, amend or delete personal data we may hold about you then please email us at becky@winningcvs.com.

For the purposes of applicable UK data protection law (including the UK General Data Protection Regulation and the Data Protection Act 2018), we are a 'data controller' of your personal information.

15. Your rights regarding your personal information

You are entitled to ask us to provide your personal information to you, to erase it, or to restrict its processing. Where we have asked for your consent to process your data, you have the right to withdraw this consent at any time.

These rights are limited in some situations - for example, where we can demonstrate that we have a legal requirement to process your personal information. In some instances, this means that we may retain some data even if you withdraw your consent.

If you have unresolved concerns you also have the right to complain to the Information Commissioner's Office (ICO) or the relevant data protection authority of your habitual residence or place of work.

Both personal information and personal data have the same meaning in the context of this Privacy Policy.

This policy is effective from April 2026 and ongoing until changed or omitted.