Privacy Policy

1. Introduction

1.1 About This Privacy Policy

NORESUME LTD ("we," "us," "our," or "Noresume") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our B2B services marketplace.

1.2 Who This Policy Applies To

This Privacy Policy applies to:

• Businesses: Self-employed individuals, sole traders, partnerships, and limited companies offering professional services on our platform
• Clients: Companies and organizations purchasing professional services through our platform
• Visitors: Anyone browsing our website or platform

1.3 Legal Basis

We process your personal data in accordance with:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR)

Our legal bases for processing:

• Contract: To provide our Services to you
• Legal Obligation: To comply with tax, VAT, and other legal requirements
• Legitimate Interests: To operate, improve, and secure our platform
• Consent: Where we have specifically asked for your permission

2. Information We Collect

2.1 Information You Provide Directly

For All Users:

• Name and contact information (email, phone number)
• Account credentials (username, password)
• Profile information and biography
• Communication preferences

For Businesses (Service Providers):

• Professional background and experience
• Skills and qualifications
• Portfolio and work samples
• Availability and rates
• Bank account details (for payments)
• Business name and trading name
• Business address
• VAT registration number (if VAT-registered)
• Company registration number (if limited company)

For Clients:

• Company name and details
• Business address
• Service requirements and project descriptions
• Billing information
• Payment method details

2.2 Information We Collect Automatically

Usage Data:

• IP address and device information
• Browser type and version
• Pages visited and time spent
• Referring website
• Click patterns and interactions

Technical Data:

• Cookies and similar technologies (see Section 8)
• Log files and error reports
• Performance and analytics data

2.3 Device Permissions

Our mobile application may request access to the following device features:

• Camera: Used for video interviews, uploading profile photos, and scanning documents. Video and images captured are processed and stored securely on our platform and by our video provider (Daily.co).
• Microphone: Used for audio during video interviews. Audio may be recorded and stored as part of the interview process.
• Photo Library: Used to upload profile photos and documents from your device.
• Notifications: Used to send you alerts about messages, interview invitations, and platform updates.

You can manage these permissions through your device settings at any time. Disabling certain permissions may affect the functionality of the app.

2.4 Information from Third Parties

VAT Verification:

• We verify VAT registration details with HMRC's VAT registration database
• Information returned: VAT number validity, registered business name, registered address

Payment Processing:

• Payment confirmation from Stripe
• Bank account verification data
• Transaction records

Authentication:

• Basic profile information from Firebase Authentication

3. How We Use Your Information

3.1 To Provide Our Services

We use your information to:

• Create and manage your account
• Match Businesses with suitable opportunities
• Recommend service providers to Clients
• Facilitate messaging and communication
• Process payments and transactions
• Provide customer support
• Send service-related notifications

3.2 For Business Verification and Compliance

VAT Registration Verification:

• Verify VAT registration status with HMRC
• Confirm business name matches VAT registration
• Validate registered business address
• Perform periodic re-verification to maintain accurate records
• Generate compliant invoices and payment records

Why We Verify VAT Registration:

• Ensure tax compliance
• Prevent fraud and misrepresentation
• Meet our legal obligations as a payment facilitator
• Provide accurate invoicing for both parties

Other Compliance Uses:

• Comply with tax reporting obligations
• Respond to legal requests and court orders
• Prevent fraud, money laundering, and illegal activity
• Enforce our Terms and Conditions

3.3 To Improve Our Platform

We use aggregated and anonymized data to:

• Improve our matching algorithms
• Analyze platform performance
• Understand user behavior and preferences
• Develop new features and services
• Conduct market research

3.4 For Marketing (With Your Consent)

With your explicit consent, we may:

• Send promotional emails about our Services
• Provide updates about new features
• Share relevant content and resources

You can opt-out at any time by clicking "unsubscribe" in any marketing email, adjusting preferences in your account settings, or contacting us at privacy@nresume.com.

4. How We Share Your Information

4.1 With Other Platform Users

Businesses (Service Providers): Your profile, skills, experience, and portfolio are visible to Clients when you submit a proposal, Clients search for service providers, or our matching system recommends you.

Clients: Your company name, project descriptions, and requirements are visible to Businesses when you post a service listing or Businesses search for opportunities.

Control Your Visibility: You can adjust privacy settings to control what information is publicly displayed.

4.2 With Service Providers and Partners

We share your information with trusted third parties who help us operate our platform:

Payment Processing:

• Stripe: Processes payments and manages bank account information

Infrastructure and Hosting:

• AWS (Amazon Web Services): Cloud hosting in West Europe (London)
• Supabase: Database and backend services in West Europe (London)

Authentication:

• Firebase Authentication: Manages account security

Video Interviews:

• Daily.co: Provides video calling infrastructure. Interview recordings may be stored and processed by Daily.co on our behalf.

VAT Verification:

• HMRC VAT API: Verifies VAT registration status

4.3 For Legal Reasons

We may disclose your information when required to comply with legal obligations, court orders, or government requests; enforce our Terms and Conditions; protect our rights, property, or safety; investigate fraud or security incidents; or respond to tax or VAT inquiries from HMRC.

4.4 Business Transfers

If Noresume is acquired, merged, or sells assets, your information may be transferred to the new owner. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information with other parties when you give us explicit permission to do so.

5. Data Retention

5.1 How Long We Keep Your Data

Active Accounts: We retain your information for as long as your account is active. You can delete your account at any time.

Closed Accounts: After account closure, we retain certain information for legal and compliance purposes:

• Financial records: 6 years (UK tax law requirement)
• VAT records: 6 years (HMRC requirement)
• Transaction records: 6 years (accounting regulations)
• Communications: Up to 2 years for dispute resolution

Aggregated Data: Anonymized and aggregated data may be retained indefinitely for analytics and platform improvement.

5.2 Deletion Requests

You can request deletion of your personal data by contacting privacy@nresume.com. Some data must be retained for legal compliance. Deletion may not be immediate due to backup systems. We will confirm deletion within 30 days where legally permissible.

6. Your Rights

Under UK GDPR, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time
• Right to Complain: Lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or call 0303 123 1113

To Exercise Your Rights: Contact us at privacy@nresume.com. We will respond within 30 days.

7. Data Security

7.1 How We Protect Your Data

Technical Measures:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Secure password hashing
• Regular security testing and updates
• Access controls and authentication
• Firewall protection

Organizational Measures:

• Limited access to personal data (need-to-know basis)
• Staff training on data protection
• Regular security audits
• Incident response procedures

Data Storage Location: Primary servers in West Europe (London), United Kingdom. Backup servers within EU/UK regions. No data transfers outside UK/EU without appropriate safeguards.

7.2 Your Responsibility

You are responsible for keeping your password secure and confidential, not sharing your account credentials, and notifying us immediately of any unauthorized access. We will never ask for your password via email or phone.

8. Cookies and Tracking

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. We use cookies to keep you logged in, remember your preferences, analyze how you use our platform, and improve user experience.

8.2 Types of Cookies We Use

• Essential Cookies: Required for the platform to function. Cannot be disabled.
• Functional Cookies: Remember your preferences and settings. Can be disabled in your browser.
• Analytics Cookies: Help us understand how users interact with our platform. Data is typically anonymized. Can be disabled in your browser.

8.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Disabling essential cookies may affect platform functionality.

9. International Data Transfers

9.1 Data Storage

Our primary servers are located in West Europe (London), United Kingdom. Your data is stored within the UK/EU region.

9.2 Third-Party Services

Some third-party services we use may process data outside the UK/EU:

• Stripe: May process payment data in multiple regions with appropriate safeguards
• AWS: Data stored in EU region but AWS is a US company
• Firebase: Google service, data may be processed in US with appropriate safeguards
• Daily.co: Video interview data may be processed in the US with appropriate safeguards

Safeguards in Place: Standard Contractual Clauses (SCCs), EU-US Data Privacy Framework participation (where applicable), and UK GDPR-compliant data processing agreements.

10. Children's Privacy

Our Services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it immediately. If you believe a child has provided us with personal information, please contact us at privacy@nresume.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in laws or regulations, changes to our Services, or changes in our data practices. If we make material changes, we will notify you by email to your registered address, by prominent notice on our platform, and by updating the "Last Updated" date at the top of this policy.

Your continued use of our Services after changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

12.1 Privacy Questions

12.2 Data Protection Authority

If you are not satisfied with our response, you can contact: