Applies: UK General Data Protection Regulation (UK GDPR) & Data Protection Act 2018
Data Controller: Jude.works Ltd, registered in England & Wales
Contact: privacy@jude.works
Your data rights at a glance
Under UK GDPR, you have powerful rights over your personal data. Here's what they mean in plain English:
π
Right of access
You can ask us for a copy of all the personal data we hold about you β your profile, CV data, match scores, and usage history.
βοΈ
Right to rectification
If anything we hold about you is wrong or incomplete, you can ask us to correct it. You can also update most data directly in your profile.
ποΈ
Right to erasure
You can ask us to delete your personal data β the "right to be forgotten". We'll remove your account, CV, and all associated data within 30 days.
βΈοΈ
Right to restrict processing
You can ask us to temporarily stop processing your data while we resolve a concern β for example, if you've disputed accuracy.
π¦
Right to data portability
You can request your data in a structured, machine-readable format so you can take it to another service.
β
Right to object
You can object to processing based on our legitimate interests. We'll stop unless we have compelling grounds to continue.
π€
Rights around AI decisions
If an AI-generated assessment affects you (like a match score), you can request human review. Our AI outputs are advisory, not automated decisions.
π’
Right to complain
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at any time.
How to make a data request
Exercising your rights is straightforward. Here's how:
- Email us at privacy@jude.works with the subject line "Data Request" and tell us which right you'd like to exercise.
- Verify your identity. For your protection, we'll confirm your identity before processing the request. We may ask you to confirm the email address associated with your account.
- We respond within one month. UK GDPR requires us to respond within one calendar month of receiving your request. If your request is complex, we may extend this by up to two additional months β but we'll let you know.
- It's free. We do not charge a fee for data requests unless they are manifestly unfounded or excessive.
What data do we hold?
When you use Jude.works, we may hold the following categories of personal data:
- Account data: Name, email, password (hashed), user role
- CV data: Your uploaded CV document and AI-extracted information (skills, experience, qualifications, job titles)
- Preferences: Target role, location preferences, salary expectations
- Match data: Job match scores, skill gap analyses, apply click history
- AI interaction data: Usage counts for AI features (for rate limiting), career coaching conversation history
- Technical data: IP address (for UK geolocation check), session data
For full details on how we collect and use your data, see our Privacy Policy.
How we protect your data
- All data is transmitted over encrypted connections (HTTPS/TLS)
- Passwords are securely hashed β we never store them in plain text
- AI processing is done via secure API calls to Anthropic, who do not use API data to train their models
- We perform daily maintenance to clean up stale data and ghost listings
- Access to personal data is restricted to authorised personnel only
Data deletion
You can delete your data in two ways:
- Self-service: Delete your CV from your profile page, or delete your entire account from Settings. This takes effect immediately.
- By request: Email privacy@jude.works and we'll remove all your data within 30 days.
After deletion, some anonymised, aggregated data may be retained for platform analytics (e.g., total user counts), but this cannot be linked back to you.
AI and automated processing
Jude.works uses AI extensively, but we want you to understand exactly how:
- CV analysis: When you upload your CV, our AI extracts your skills, experience, and qualifications to build your profile.
- Job matching: Our semantic engine compares your profile against job listings to generate match scores.
- Career coaching: Ask Jude uses AI to provide personalised career advice based on your profile.
These AI outputs are advisory only β they inform, but do not make, employment decisions. No one is automatically rejected or selected based solely on an AI score. You can always request human review of any AI assessment.
Contact the ICO
If you believe we have not handled your data properly, you have the right to complain to the UK's data protection authority:
- Information Commissioner's Office (ICO)
- Website: ico.org.uk
- Telephone: 0303 123 1113
- Post: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We'd appreciate the chance to address your concerns first β please reach out to privacy@jude.works before contacting the ICO.