Privacy Policy

Last updated: May 2026

1. Who we are

QATraining.uk is the controller for personal data collected through this website unless this notice says otherwise. We provide free QA learning resources, prompt libraries, testing tools, CV analysis, and career-support features for a UK audience.

For privacy questions or rights requests, email privacy@qatraining.uk.

2. Data we collect

Account and contact details if you sign in, submit content, or contact us.
Prompt submissions, comments, profile details, progress records, badges, and admin moderation records.
CV text, uploaded CV files, job descriptions, and notes you provide to career tools.
Generated analysis data, such as match scores, strengths, gaps, and recommendations.
Technical data such as IP address, browser type, referrer, pages visited, user agent, cookies, and security logs.

3. CV and job description data

CVs and job descriptions can contain more personal data than the service needs. Remove details that are not needed for analysis, such as full postal address, date of birth, national insurance number, passport details, financial information, or unrelated sensitive information.

We use CV and job description material to provide the analysis or drafting feature you request, maintain security, operate rate limits, investigate abuse, and handle support or deletion requests.

4. Local AI and server processing

Some AI features run locally in your browser where supported. In those cases, the model processes the prompt on your device.

Other service data may still be processed by QATraining.uk or our providers. This includes saved analyses, account records, community submissions, security logs, support messages, and any future consent records.

5. Lawful bases and purposes

Our lawful bases under UK data protection law depend on the purpose:

To provide requested tools, accounts, progress, and support: contract or legitimate interests.
To prevent spam, abuse, security incidents, and service misuse: legitimate interests.
To moderate and publish community submissions: legitimate interests and your submitted licence.
To comply with legal obligations: legal obligation.
To use non-essential analytics or advertising technologies: consent where required.

6. Cookies, analytics, and advertising

We use strictly necessary cookies and similar technologies for security, sessions, authentication, abuse prevention, and service reliability.

Advertising is disabled unless and until a legally required consent setup is active. If Google AdSense or similar advertising is enabled in the future, advertising and measurement technologies will only run where the required consent and platform rules are satisfied.

7. Service providers

SupabaseAuthentication, database records, prompt submissions, progress records, and saved analysis data.

Hosting providerWebsite hosting, content delivery, security logs, and reliability monitoring.

Browser-local AI runtimeSupported AI features that process prompts on your device where browser support allows.

Google AdSenseAdvertising delivery only if advertising is later enabled with the required consent setup.

8. International transfers

Some providers may process personal data outside the United Kingdom. Where that happens, we rely on recognised legal safeguards under UK data protection law, such as adequacy regulations or approved contractual transfer terms where applicable.

9. Retention

Parsed unsaved CV filesProcessed to extract text and not intentionally retained by the parse endpoint.

Saved CV/JD analysis recordsKept only while needed for the feature, support, security, or deletion handling; deletion is available by request.

Security, session, and abuse-prevention logsKept for a limited period needed to protect the service and investigate reliability or abuse issues.

Prompt and community submissionsKept for moderation and publication unless rejected, removed, or deletion is required.

Consent recordsKept only if a consent platform is introduced, for the period needed to evidence and manage your choices.

10. Your rights

You may have rights to access, correct, erase, restrict, object to processing, request portability, and withdraw consent where processing relies on consent. Email privacy@qatraining.uk to exercise these rights.

You can also complain to the Information Commissioner's Office if you are unhappy with how your personal data is handled.

11. Advisory scoring and age

CV match scores, keyword suggestions, and recommendations are advisory tools for you. They are not employer or recruiter decisions and are not intended to determine access to employment, credit, insurance, public services, or other significant opportunities.

QATraining.uk is intended for people aged 16 or over. If you are under 16, do not submit personal data through the service.

12. Contact

For non-privacy legal questions, email legal@qatraining.uk. You can also read our Terms of Service.