Privacy policy

This policy applies where I act as the data controller for your personal data, meaning where I decide why and how it is processed. In this policy, "I", "me" and "my" refer to Canary CVS LTD, trading as Canary Careers, and its director Ryan MacArthur.

This site uses cookies. Where those cookies are not strictly necessary to run the site, I ask for your consent the first time you visit. See the cookie policy for the full list and how to change your choice.

• •Contact data: your name, email address, telephone number, postal address and social media identifiers. The source is you, or your employer if your employer has bought support for you.
• •Career data: your resume, cover letters, LinkedIn content, work history, qualifications, salary expectations and the information you give me in the intake form or during sessions. I keep a copy of your resume on file so I can deliver and support the work.
• •Transaction data: what you bought, when, the amount, the payment method used and the outcome. Card details are handled by my payment provider and are never stored by me.
• •Communication data: the content of emails, messages and form submissions between us, and the information that goes with them such as time and date.
• •Usage data: your IP address, approximate location, browser and device type, referring site, pages viewed and length of visit. Approximate country is also used to show prices in pounds or dollars.

• •Delivering services: running the site, taking and fulfilling orders, writing your documents, coaching sessions, invoicing and credit control. Legal basis: performance of a contract with you, or steps taken at your request before a contract, and my legitimate interest in running my business properly.
• •Relationships and support: replying to enquiries, arranging consults, handling questions and complaints. Legal basis: my legitimate interest in communicating with clients and enquirers.
• •Marketing: sending updates and offers by email where you have asked for them or where you are already a client. Legal basis: consent, or my legitimate interest in promoting my services. You can opt out at any time.
• •Research and improvement: understanding how the site and services are used. Legal basis: my legitimate interest in improving and securing the site and services.
• •Records, security and legal claims: keeping business records and backups, preventing fraud, obtaining insurance or professional advice, and establishing or defending legal claims. Legal basis: my legitimate interests, and compliance with legal obligations where they apply.

Sensitive information is not required for my services. Please do not send me health, ethnicity or similar special category data unless it is genuinely relevant to the work and you are happy for me to hold it.

I do not sell your personal data. I share it only with the service providers I need to deliver the work, and with insurers or professional advisers where reasonably necessary. Those providers are:

• •Site hosting: the platform that hosts and serves this website and its server functions.
• •Payments: Stripe processes card payments and payment plans. I may also use Intuit QuickBooks or PayPal for invoicing. I share only what is needed to take payment, issue refunds and resolve disputes.
• •Scheduling: Google, for the booking calendar used for free consults and sessions.
• •Client intake: Jotform, for the onboarding and intake form sent after purchase.
• •Email and productivity tools: the email, storage and document tools I use to deliver and store your work.
• •Subcontractors: occasionally a trusted specialist supports part of a project, under confidentiality obligations and only with the data needed.

I may also disclose personal data where required by law, to protect someone's vital interests, or in connection with legal claims.

Some of my providers, including hosting, payments and scheduling, are based in or process data in the United States and other countries outside the United Kingdom. Where data leaves the UK, it is protected by an adequacy decision or by standard contractual clauses approved by the competent authorities, together with the provider's own safeguards.

Anything you ask me to publish, such as a testimonial, may be visible worldwide once it is online.

• •Contact data: at least one year after our most recent contact, and no more than five years after that date.
• •Career data and delivered documents: at least one year after the project ends, and no more than five years, so I can support you and honour the interview guarantee.
• •Transaction data: at least one year after the transaction, and no more than five years, subject to tax and accounting requirements.
• •Communication data: at least one year after the communication, and no more than five years.
• •Usage data: up to one year after collection.

I may keep data for longer where I must do so by law or to protect someone's vital interests.

Your documents and details are held in access-controlled accounts protected by strong passwords and two-factor authentication where available. Payment card details never reach my systems. No transmission over the internet can be guaranteed completely secure, so please take care when sending sensitive information by email.

• •Access: ask for a copy of the personal data I hold about you.
• •Rectification: ask me to correct inaccurate data or complete incomplete data.
• •Erasure: ask me to delete your personal data.
• •Restriction: ask me to limit how I process your data.
• •Objection: object to processing based on legitimate interests, including direct marketing.
• •Portability: ask me to transfer your data to you or another organisation.
• •Withdraw consent: where processing relies on consent, withdraw it at any time.
• •Complain: complain to the Information Commissioner's Office at ico.org.uk.

These rights have limits and exceptions. To use any of them, email me at ryan@canarycareers.co.uk. I will respond within one month.

My services are for adults. This site is not intended for anyone under 18, and I do not knowingly collect data from children.

I may update this policy by publishing a new version on this page. Please check it occasionally. Where changes are significant, I will tell clients directly.

Ryan MacArthur is the contact for all data protection matters: ryan@canarycareers.co.uk.

To submit applications on your behalf, I share your name, contact details, resume, cover letter, work history and job preferences with a third-party application provider acting on my instructions. When an application is submitted, the employer receives your details and handles them under its own privacy policy. My provider may process data outside the UK, and where it does I make sure appropriate safeguards are in place.

I share a graduate's progress information with a named parent or guardian only with the graduate's written consent.