Privacy notice

Health Career Global (trading as HealthCareer Global) is the seller and data controller responsible for personal information processed to provide this service.

Information, purposes and legal bases

We process your name, email address and account authentication information to create and secure your account; healthcare background, qualifications, preferences, interview messages and internal CV material to prepare applications; and vacancy records and application statuses to provide tracking. These activities are necessary to perform our contract with you and provide the service you request.

Support messages are used to respond to requests. Technical information such as IP addresses, device/browser information, usage and error logs may be processed to operate the site, prevent fraud and investigate faults, based on our legitimate interests in a secure, reliable service. Records required for legal or regulatory compliance are processed on the basis of legal obligation. Optional processing that requires consent relies on your consent, which you can withdraw without affecting earlier lawful processing.

AI processing

Career details and conversation messages are sent to our AI service to prepare responses and CV drafts. Do not include patient information, medical records, passwords, passport numbers or other unnecessary sensitive information. AI output may contain errors; verify application answers before use. CV material remains internal and is not available for viewing, copying, editing or download.

Control of your information

You can update your profile, export available career data (excluding internal CV content), and clear career data using your workspace controls. Clearing career data does not delete your sign-in account. Depending on applicable law, you may request access, correction, erasure, restriction, portability or object to processing; withdraw consent; and complain to your local data protection authority. Send privacy requests to Health Career Global using the contact address on your purchase receipt, identifying your account email but not including passwords or patient data. We respond within the period required by applicable law, including one month where GDPR applies.

Data sharing and payments

Hosting, account authentication, AI processing and operational support providers process the information needed to deliver the service. We may share necessary records with professional advisers and authorities where required by law. We do not sell your career information.

Paddle.com is our reseller and Merchant of Record. Paddle receives checkout and transaction information for sales, subscription management, payment processing, tax compliance and invoicing, and handles payment data under its own privacy notice. Full card details are not stored in your career profile. We retain subscription identifiers, status and billing-related records to manage access and support.

Vacancy discovery and AI application preparation do not send your application to an employer. You submit applications on the employer’s official site, whose privacy terms apply to information you provide there.

Retention

Account information is retained for the life of your sign-in account. Career profiles, conversations and internal CV material are retained while needed for your ongoing career workspace, unless you clear them earlier. Clearing career data removes those records from the active workspace; it does not remove payment records or your sign-in account. Transaction and compliance records are retained for the statutory tax, accounting and legal periods applicable to the records. Support and security records are kept only as long as needed to resolve requests, investigate incidents or meet legal obligations. Information is deleted or anonymised when those purposes and required retention periods end.

Security and international processing

We use appropriate technical and organisational safeguards, including encrypted connections, authenticated access and account-level access controls for private career records. Access is limited to those who need it to operate and support the service. No online service can guarantee absolute security.

Service providers may process information outside your country. Where UK/EEA transfer rules apply, required safeguards include adequacy decisions or standard contractual clauses, as appropriate.

Cookies and browser storage

Essential cookies or browser storage maintain sign-in sessions, security and checkout. Blocking these through your browser may prevent sign-in or payment features from working. This notice does not authorise optional analytics or marketing cookies: where these are introduced and consent is required, they must remain off until you consent, with a way to withdraw that consent.