Privacy Policy

1. Introduction

Welcome to CV Guru ("we", "our", "us", or "the Company"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cvguru.co.za (the "Site") or use our services.

This policy complies with the Protection of Personal Information Act (POPIA) (Act 4 of 2013) of South Africa, as well as international best practices for data protection.

By using our Site or services, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Site or services.

2. Information We Collect

We may collect the following types of personal information:

2.1 Information You Provide to Us

• Contact Information: Name, email address, phone number, physical address
• Professional Information: Employment history, education, qualifications, skills, professional references
• Account Information: Username, password, communication preferences
• Payment Information: Billing details, transaction history (we do not store full credit card numbers)
• Communication: Messages, feedback, support requests, survey responses
• CV/Resume Content: Documents you upload or information you provide for CV creation

2.2 Information Automatically Collected

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, search queries
• Location Data: Approximate geographic location based on IP address
• Cookies: Small text files stored on your device (see Section 10)

2.3 Special Categories of Information

We do not knowingly collect sensitive personal information such as race, ethnicity, political opinions, religious beliefs, trade union membership, health data, or biometric information unless you voluntarily provide it in your CV or communications.

3. How We Collect Information

We collect information through the following methods:

• Direct Input: When you fill out forms, upload documents, or contact us via email or phone
• Account Registration: When you create an account on our Site
• Service Use: When you order our CV writing or career services
• Cookies & Tracking: Automatic collection when you browse our Site
• Third-Party Sources: Payment processors, analytics providers, or social media platforms (with your consent)

4. How We Use Your Information

We use your personal information for the following purposes:

• To Provide Services: Create, edit, and deliver CVs, cover letters, LinkedIn profiles, and career coaching
• To Communicate: Respond to inquiries, send order confirmations, provide customer support
• To Process Payments: Complete transactions and prevent fraud
• To Improve Our Services: Analyse usage patterns, fix bugs, and enhance user experience
• To Send Updates: Notify you about service changes, special offers, or career tips (you may opt out at any time)
• To Comply with Legal Obligations: Respond to lawful requests from authorities
• To Protect Our Rights: Prevent misuse of our Site or services

5. Legal Basis for Processing (POPIA)

Under South Africa's POPIA, we process your personal information based on one or more of the following lawful grounds:

• Consent: You have given clear consent for us to process your information for a specific purpose
• Contract: Processing is necessary for the performance of a contract with you (e.g., delivering your CV)
• Legal Obligation: Processing is required by law (e.g., tax records, fraud prevention)
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided your rights do not override those interests

6. Sharing Your Information

We do not sell, rent, or trade your personal information to third parties. However, we may share your information with:

6.1 Service Providers

Third-party vendors who help us operate our business, including:

• Payment processors (PayFast, Yoco, Stripe)
• Email service providers (for sending order confirmations and newsletters)
• Cloud storage providers (Google Drive, Dropbox)
• Analytics providers (Google Analytics, Facebook Pixel)
• Customer support software (Zendesk, Freshdesk)

All service providers are contractually obligated to protect your information and may only use it for the services they perform for us.

6.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect the rights, property, or safety of CV Guru, our users, or others.

6.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption: SSL/TLS encryption for all data transmitted between your browser and our servers
• Access Controls: Strict role-based access to personal information
• Secure Servers: Hosting with reputable providers that maintain industry-standard security
• Regular Audits: Periodic security reviews and vulnerability assessments
• Staff Training: All employees receive data protection and privacy training

While we strive to protect your information, no method of transmission over the Internet is 100% secure. You use our Site at your own risk.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Client CVs & Documents: Retained for 24 months after last contact, then securely deleted
• Account Information: Retained until you close your account or request deletion
• Communication Records: Retained for 12 months
• Payment Records: Retained for 5 years (as required by South African tax law)
• Analytics Data: Retained for 14 months (anonymised after 30 days)

9. Your Rights Under POPIA

Under South Africa's POPIA, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Deletion (Right to be Forgotten): Request deletion of your information, subject to legal obligations
• Right to Restrict Processing: Request that we limit how we use your information
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Data Portability: Request a copy of your information in a structured, machine-readable format
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Right to Lodge a Complaint: File a complaint with the South African Information Regulator

10. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Site. Cookies are small text files stored on your device.

Types of Cookies We Use:

• Essential Cookies: Required for the Site to function (e.g., shopping cart, login)
• Performance Cookies: Help us understand how visitors use the Site (e.g., Google Analytics)
• Functional Cookies: Remember your preferences (e.g., language, region)
• Marketing Cookies: Used to deliver relevant advertisements (e.g., Facebook Pixel)

Managing Cookies:

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, but doing so may affect Site functionality.

Third-Party Cookies: We may use third-party services (Google Analytics, Facebook) that set their own cookies. We do not control these cookies. Please review their privacy policies for more information.

11. Third-Party Links

Our Site may contain links to third-party websites (e.g., payment gateways, social media platforms). We are not responsible for the privacy practices or content of these external sites. We encourage you to read their privacy policies before providing any personal information.

12. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to delete such information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to registered users (for significant changes)
• Displaying a notice on our Site for 30 days

We encourage you to review this policy periodically. Your continued use of our Site after changes are posted constitutes acceptance of the revised policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Information Regulator of South Africa

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the Information Regulator of South Africa:

• Website: www.justice.gov.za/inforeg/
• Email: inforeg@justice.gov.za
• Phone: +27 (0) 10 023 5200
• Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

Contact Us