Privacy Policy

Last updated: May 2026

1. Who we are

QATraining.uk is the controller for personal data collected through this website unless this notice says otherwise. We provide free QA learning resources, prompt libraries, testing tools, CV analysis, and career-support features for a UK audience.

Legal-controller details for owner review

Legal controller name: [LEGAL CONTROLLER NAME]
Controller contact address or route: [CONTROLLER CONTACT ADDRESS OR CONTACT ROUTE]
ICO registration number: [ICO REGISTRATION NUMBER IF APPLICABLE]

These placeholders must be replaced with the correct business details after legal review.

For privacy questions or rights requests, email privacy@qatraining.uk.

2. Data we collect

Account and contact details if you sign in, submit content, or contact us.
Prompt submissions, comments, profile details, progress records, badges, and admin moderation records.
CV text, uploaded CV files, downloaded LinkedIn profile text/files, job descriptions, and notes you provide to career tools.
Generated analysis data, such as match scores, strengths, gaps, and recommendations.
Technical data such as IP address, browser type, referrer, pages visited, user agent, cookies, and security logs.

3. CV, LinkedIn profile, and job description data

CVs, LinkedIn profiles, and job descriptions can contain more personal data than the service needs. Remove details that are not needed for analysis, such as full postal address, date of birth, national insurance number, passport details, financial information, or unrelated sensitive information.

We use CV, downloaded LinkedIn profile, and job description material to provide the analysis or optimisation feature you request, maintain security, operate rate limits, investigate abuse, and handle support or deletion requests.

Providing this data is entirely voluntary, but it is necessary to perform the automated parsing and analysis you request.

4. Local AI and server processing

Some AI features run locally in your browser where supported. In those cases, the model processes the prompt on your device.

Other service data may still be processed by QATraining.uk or our providers. This includes saved analyses, account records, community submissions, security logs, support messages, and any future consent records.

5. Lawful bases and purposes

Our lawful bases under UK data protection law depend on the purpose:

To provide requested tools, accounts, progress, and support: contract or legitimate interests.
To prevent spam, abuse, security incidents, and service misuse: legitimate interests.
To moderate and publish community submissions: legitimate interests and your submitted licence.
To comply with legal obligations: legal obligation.
To use non-essential analytics or advertising technologies: consent where required.

6. Cookies, analytics, and advertising

We use strictly necessary cookies and similar technologies for security, sessions, authentication, abuse prevention, and service reliability.

We use a cookie consent banner to manage non-essential cookies. You can change your choice, view details, or withdraw your consent at any time by clicking here: .

The Google tag is present for site measurement, but analytics storage defaults to denied until you choose to allow analytics cookies. Advertising storage and personalisation remain denied in the custom consent banner. Advertising is disabled unless and until a Google-certified consent management platform and the required platform rules are in place for UK/EEA users.

7. Service providers

SupabaseAuthentication, database records, prompt submissions, progress records, and saved analysis data.

Hosting providerWebsite hosting, content delivery, security logs, and reliability monitoring.

Browser-local AI runtimeSupported AI features that process prompts on your device where browser support allows.

Google AdSenseAdvertising delivery only if advertising is later enabled with a Google-certified consent management platform where required.

Google AnalyticsPrivacy-controlled website measurement using the Google tag, with analytics storage denied until consent is granted.

8. International transfers

Some providers may process personal data outside the United Kingdom. Where that happens, we rely on recognised legal safeguards under UK data protection law, such as adequacy regulations or approved contractual transfer terms where applicable.

9. Retention

Parsed unsaved CV filesProcessed to extract text during the request and not intentionally retained by the parse endpoint after the response is returned.

Saved CV/JD analysis recordsAnalysis metadata is retained until account deletion, deletion request, or 12 months after last relevant account activity, whichever comes first.

Security, session, and abuse-prevention logsSession cookie lasts up to 30 days. Security logs are normally retained for up to 90 days unless needed for an active abuse, reliability, or legal investigation.

Prompt and community submissionsAccepted public submissions are retained while published. Rejected or withdrawn submissions are normally deleted or anonymised within 12 months unless needed for moderation records.

Consent recordsCookie consent choices are stored in your browser for up to 12 months. Future consent-platform records will be retained only as long as needed to evidence and manage your choices.

10. Your rights

You may have rights to access, correct, erase, restrict, object to processing, request portability, and withdraw consent where processing relies on consent. Email privacy@qatraining.uk to exercise these rights.

You can also complain to the Information Commissioner's Office if you are unhappy with how your personal data is handled.

11. Advisory scoring and age

CV match scores, keyword suggestions, and recommendations are advisory tools for you. They are not employer or recruiter decisions and are not intended to determine access to employment, credit, insurance, public services, or other significant opportunities.

QATraining.uk is intended for people aged 16 or over. If you are under 16, do not submit personal data through the service.

12. Contact

For non-privacy legal questions, email legal@qatraining.uk. You can also read our Terms of Service.