How client information is handled.

Last updated: 13 October 2026

Doctor CV Clinic provides medical CV and application document services. This notice explains how personal information is used when you enquire, request a free check, buy support or submit documents.

Who we are

Information we collect

• Your name, email address and optional telephone number.
• Selected service and payment or order reference.
• Professional details you provide, including your role, qualifications, registration status, employment history and target role.
• Uploaded CVs, supporting-information drafts, job descriptions, person specifications and portfolio information.
• Vacancy references or links, closing dates, word limits and your instructions.
• How you found the service and whether you need application support, CV support or both.
• Your communications, confirmation of accuracy, privacy acknowledgement, any separate explicit consent to necessary special-category information and choice about when work starts.
• Order administration records, such as work supplied, revisions, invoices and the evidence bank prepared for later applications.

Sensitive information in documents

CVs and supporting documents can contain health information or other special-category personal data, including religious beliefs or ethnic origin. Leave this out unless necessary and contact us before sending it. Do not include identifiable patient information or unnecessary personal details about referees, colleagues or family members.

Why we use your information

We use information to provide your requested free check, CV or application support, communicate with you, match submissions to paid orders, manage revisions and later applications, maintain business records and meet legal obligations. After a Supporting Information Edit, we keep your evidence bank so later vacancies can be tailored from the experience you have already supplied.

Lawful basis

We usually process information because it is necessary to provide the requested service or take steps before entering a contract, to meet legal duties, or for our legitimate interest in administering and improving the service. A privacy acknowledgement does not replace the relevant lawful basis or require you to give up your data protection rights.

For health information or other special-category data that you choose to supply about yourself and that is necessary for your requested review or edit, we rely on your explicit consent under Article 9(2)(a) of the UK GDPR. For that information, the Article 6 lawful basis is consent under Article 6(1)(a). The form asks for a separate, specific statement of consent; agreeing to the privacy notice alone is not explicit consent. You can use the service without this information by removing it before submission.

You can withdraw this consent at any time by emailing support@doctorcvclinic.co.uk. Withdrawal does not affect processing already carried out lawfully. We stop using the relevant information for the review or edit and discuss whether a redacted version is needed to continue. If unexpected special-category information arrives without consent, we pause its use and ask you to remove it or give separate explicit consent where necessary. Do not supply sensitive information about other people.

Where information is stored

The paid intake and free-check forms send details and files through Google Apps Script. Client documents are stored in restricted-access Google Drive folders and order details are logged in Google Sheets. Our support inbox uses Zoho Mail. Automated submission receipts and order notifications are sent through Google Apps Script and Google's email service. Netlify hosts the website. Stripe processes payments; this website does not store card details.

These providers may process information in the United States and other countries outside the UK. Where they do, the transfer relies on UK adequacy regulations, including the UK–US data bridge for certified US companies, or on the International Data Transfer Agreement or Addendum in the provider's data-processing terms. Contact support@doctorcvclinic.co.uk for the details for a particular provider.

How long information is kept

For a one-off service, CV files, uploaded documents and intake data are normally retained for 90 days after the service and any included revision are complete.

After a Supporting Information Edit, your evidence bank and the documents needed for later applications are kept for up to 12 months from its delivery, so that Further Application Edits can be prepared without you sending everything again. Each Further Application Edit's documents and intake data are then normally retained for 90 days after it and any included revision are complete, or until the 12-month period ends if that is later. You can ask us to delete the evidence bank sooner; you can still send your own copy with a later application.

You may request earlier deletion. We explain if deleting information needed for an active service will prevent us from continuing without you providing it again. Basic accounting, transaction and necessary complaint records may be kept longer where required for business, tax or legal reasons. A longer document-retention period is only used where agreed or otherwise legally necessary.

Sharing information

The upload forms keep a random upload reference, submission time and a document-and-form fingerprint in your browser’s session storage so an interrupted upload can be recovered after a reload. A successful receipt reference may also be kept for that session. The fingerprint cannot be used to read your document; your CV, other files and form answers are not stored there. These temporary records are removed when the browser session ends or you start a separate submission.

We do not sell personal information. Information may be processed by the hosting, email, document storage and payment providers needed to deliver the service, or disclosed where required by law. Access to client documents is limited to people who need it to deliver and administer the service.

Your rights

You may ask to access, correct, delete or restrict use of your information, and have a right to data portability where applicable. You can object to processing based on legitimate interests. The rights available depend on the circumstances and lawful basis. Contact support@doctorcvclinic.co.uk to make a request.

Complaints

You can contact us about how your information is handled. You may also complain directly to the Information Commissioner's Office (ICO); you do not have to contact us first.