Privacy Policy

Data Controller

LandTheRole is operated by Horizon Frame Limited, a company registered in England and Wales (company number 16132455). Registered office: 85 Great Portland Street, London, England, W1W 7LT. Horizon Frame Limited is the data controller for the purposes of UK GDPR.

1. Information We Collect

We collect information you provide directly to us, including:

• Account Information: Name, email address, and password when you create an account
• Profile Data: Professional background, skills, experience, and career preferences you add to your profile
• CV/Resume Data: Documents you upload or create within the platform
• Job Application Data: Information about jobs you're tracking, companies you're researching, and contacts you're managing
• Usage Data: How you interact with our services, features you use, and actions you take
• Third-Party Authentication Data: If you sign in with Google or LinkedIn, we receive your name and email address from those providers

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Generate AI-assisted insights about companies and job opportunities
• Create tailored CV recommendations based on your profile and target jobs
• Process credit transactions and maintain your account balance
• Send you service-related communications
• Respond to your requests and provide customer support

3. AI Features

Our platform uses artificial intelligence to enhance your job search experience:

• Company Research: We use AI to gather and analyse publicly available information about companies
• Profile Analysis: AI helps match your skills and experience to job requirements
• CV Optimisation: AI-assisted suggestions to improve your CV for specific roles

Your personal data is processed securely and is not used to train AI models. Research results are generated using public information and third-party data sources.

4. Data Sharing

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who help us provide our services (hosting, AI processing, analytics)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, regular security assessments, and access controls.

6. Lawful Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide our services (account management, CV generation, job tracking)
• Consent: Where you have given explicit consent (e.g. marketing communications)
• Legitimate Interests: For service improvement, security, and fraud prevention, where our interests do not override your rights
• Legal Obligation: Where we are required to process data by law

7. International Data Transfers

Your data may be processed outside the UK by the following service providers:

• Cloudflare (US/Global): Hosting, CDN, data storage, and Turnstile bot defense (processes IP address and user-agent on public form submissions)
• Anthropic (US): AI processing for CV generation and analysis
• Stripe (US): Payment processing
• Perplexity AI (US): AI-assisted research and information retrieval
• Resend (US): Transactional email delivery
• Google (US): Authentication via OAuth (if you sign in with Google)
• LinkedIn (US): Authentication via OAuth (if you sign in with LinkedIn)
• Adzuna (UK): Job search aggregation and listings

These transfers are protected by appropriate safeguards including standard contractual clauses and the providers' compliance with applicable data protection frameworks.

8. Your Rights (UK GDPR)

Under UK data protection law, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at privacy@landtherole.co.uk. We will respond within 30 days.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Automated Decision-Making

Our AI features generate tailored CVs, job analysis, and career recommendations. These are provided as tools to assist your job search and do not constitute automated decisions with legal or similarly significant effects. You are always free to use, modify, or disregard AI-generated content.

10. Data Retention

We retain your personal information as follows:

• Active account data: Retained while your account is active
• Deleted account data: Removed from active systems immediately upon account deletion
• Payment records: Retained for 7 years as required by UK tax law
• Session data: Automatically expired and cleaned up periodically

11. Cookies

We use essential cookies to maintain your session and authentication. Specifically, we use a session cookie (HttpOnly, Secure, SameSite=Lax) that expires after 30 days of inactivity. We do not use tracking cookies, analytics cookies, or advertising cookies.

12. Age Restriction

Our Service is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have collected data from a minor, please contact us immediately.