Privacy Policy
Last updated: 15 May 2026
1. Who is responsible for your data (the “controller”)
The data controller for personal data processed in connection with SnapCV.co is the operator of SnapCV.co. For any privacy-related question, request, or complaint you can contact us at privacy@snapcv.co.
We have not appointed a Data Protection Officer (DPO) because we are not required to do so under Article 37 GDPR. Privacy enquiries are handled at the email above.
2. What this policy covers
This policy explains what personal data we — and our service providers — process when you visit SnapCV.co, use the CV builder, or read our blog. It is written to comply with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), the UK GDPR and Data Protection Act 2018, and the EU ePrivacy Directive (as implemented in your country).
3. What personal data we process
3.1 CV builder content
Anything you type into the CV builder — name, contact details, work history,
education, skills, photo, etc. — is stored only in your
browser using localStorage. We do not transmit this data to our
servers; we do not store, read, or share it. If you clear your browser data or
use private/incognito mode, the information will be lost.
3.2 Server logs
Like every website, our hosting provider records standard request logs when you visit a page. These typically include:
- Your IP address (a personal identifier under GDPR);
- The date and time of the request;
- The page or asset requested;
- HTTP status code and bytes served;
- User-agent string (browser and operating system);
- Referrer (the previous page, if any).
These logs are used solely for security, abuse prevention, debugging, and aggregate traffic measurement. They are retained for a short period (see Section 6) and are not used to build profiles of identified individuals.
3.3 Cookies and similar technologies
We use a small number of strictly necessary cookies and similar technologies. See Section 7 (Cookies) for the full table, including purpose, type, and retention.
3.4 Email correspondence
If you email us, we will process your email address and the contents of your message in order to respond.
3.5 What we do not collect or use
- We do not require an account, name, or email.
- We do not use Google Analytics or any other third-party analytics tool.
- We do not display third-party advertising and no ad-network cookies are set.
- We do not sell personal data.
- We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
4. Why we process this data and the legal bases (Art. 6 GDPR)
| Purpose | Personal data | Legal basis |
|---|---|---|
| Delivering the website and CV builder | IP address, request logs | Legitimate interest (Art. 6(1)(f)) — running the Service |
| Security, fraud and abuse prevention | IP address, request logs | Legitimate interest (Art. 6(1)(f)); legal obligation (Art. 6(1)(c)) where applicable |
| Responding to your enquiries | Email address, message content | Legitimate interest (Art. 6(1)(f)) and, where applicable, steps prior to a contract (Art. 6(1)(b)) |
| Complying with legal obligations | As required | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interest, we have carried out a balancing test and believe our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interest — see Section 10 (Your rights).
5. Children
SnapCV.co is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact privacy@snapcv.co and we will take steps to delete it.
6. How long we keep data
- CV builder content — kept in your browser until you clear it. We never have a copy.
- Server / access logs — up to 90 days, after which they are deleted or fully anonymised.
- Cookies — see the cookie table in Section 7. You can delete cookies at any time via your browser settings.
- Email correspondence — retained for as long as needed to handle your enquiry, and up to 24 months thereafter for record-keeping.
8. Who we share data with
We share personal data only with service providers who help us run the Service, and only to the extent strictly necessary. These include:
- Hosting and CDN provider — to serve the site to your browser;
- Email provider — if you contact us by email.
We may also disclose personal data when required to do so by law, by a court order, or by another competent authority, or where necessary to protect our rights, your safety, or the safety of others.
We do not sell your personal data and we do not share it for marketing purposes.
9. International transfers
Some service providers (for example, hosting or CDN) may be based outside the European Economic Area (EEA) and/or the United Kingdom, including in the United States.
Where personal data is transferred outside the EEA / UK, we rely on the safeguards required by Articles 44–49 GDPR. These include, as applicable:
- European Commission and/or UK adequacy decisions (e.g. the EU–US Data Privacy Framework, where the recipient is certified);
- Standard Contractual Clauses (SCCs) approved by the European Commission, and/or the UK International Data Transfer Agreement (IDTA) or UK Addendum;
- Supplementary technical and organisational measures where necessary;
- Other derogations permitted by Article 49 GDPR in limited cases.
You can request a copy of the relevant safeguards by emailing privacy@snapcv.co.
10. Your rights under the GDPR
If the GDPR or UK GDPR applies to processing of your personal data, you have the following rights:
- Right of access (Art. 15) — to obtain confirmation of whether we process your data, and a copy.
- Right to rectification (Art. 16) — to correct inaccurate or incomplete data.
- Right to erasure / “right to be forgotten” (Art. 17) — to ask us to delete your data, subject to certain exceptions.
- Right to restriction of processing (Art. 18) — to ask us to limit how we use your data.
- Right to data portability (Art. 20) — to receive your data in a structured, commonly used, machine-readable format, where processing is based on consent or contract and carried out by automated means.
- Right to object (Art. 21) — to object to processing based on legitimate interest, including profiling for direct-marketing purposes.
- Right to withdraw consent (Art. 7) — at any time, without affecting the lawfulness of processing carried out before withdrawal.
- Right to lodge a complaint with a supervisory authority (Art. 77). In the UK: the Information Commissioner's Office (ICO). In the EU: your national data-protection authority — a list is available at edpb.europa.eu.
To exercise any right, email privacy@snapcv.co. We will respond within one month (Art. 12 GDPR), and may extend by two further months for complex requests. We will not charge a fee unless your request is manifestly unfounded or excessive. We may ask for information to confirm your identity before acting on a request.
11. Security
We apply reasonable technical and organisational measures to protect personal data, including HTTPS in transit, restricted access to logs, and storing CV content locally on your device rather than on our servers. No system is 100% secure; if you become aware of a vulnerability please contact us at privacy@snapcv.co.
12. Automated decision-making and profiling
We do not carry out automated decision-making that produces legal or similarly significant effects on you, and we do not profile our visitors.
13. “Do Not Track” and Global Privacy Control
Some browsers send a “Do Not Track” (DNT) signal or a Global Privacy Control (GPC) signal. We do not sell or share personal data for cross-context behavioural advertising, and we do not use third-party analytics or advertising trackers, so these signals have no additional effect on the limited processing described in this policy.
14. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes we will provide additional notice (for example, a banner on the homepage).
15. Contact
For any privacy-related question, request, or complaint:
Email: privacy@snapcv.co