Legal
GDPR & Data Rights
Last updated: January 1, 2026
JustCV is committed to complying with the General Data Protection Regulation (GDPR) and applicable data protection laws. This page explains our role as a data controller, the legal bases on which we process your personal data, and your rights as a data subject.
1. Data Controller
For the purposes of the GDPR, JustCV acts as the data controller of the personal data you provide when using our service. This means we determine the purposes and means of processing your personal data.
Data Controller Contact
Email: privacy@justcv.in
2. Legal Bases for Processing
We process your personal data on the following legal bases:
Contractual Necessity (Art. 6(1)(b))
Processing your account information, resume content, and billing details is necessary to provide the JustCV service under our Terms of Service.
Legitimate Interests (Art. 6(1)(f))
We process certain technical data (logs, analytics) to maintain service security, detect fraud, and improve the platform. Our legitimate interests do not override your rights and freedoms.
Consent (Art. 6(1)(a))
Where we send optional marketing communications, we rely on your explicit consent. You may withdraw consent at any time.
Legal Obligation (Art. 6(1)(c))
We may retain certain data where required to comply with tax, accounting, or other legal obligations.
3. Your Rights Under GDPR
If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights:
- Right of Access (Art. 15) — Request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16) — Request correction of inaccurate or incomplete data.
- Right to Erasure (Art. 17) — Request deletion of your personal data where there is no compelling reason for continued processing.
- Right to Restriction (Art. 18) — Request that we restrict processing of your data in certain circumstances.
- Right to Data Portability (Art. 20) — Receive your personal data in a structured, machine-readable format.
- Right to Object (Art. 21) — Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent — Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
- Right Not to Be Subject to Automated Decisions — We do not make solely automated decisions with significant legal effects about you.
To exercise any of these rights, contact us at privacy@justcv.in. We will respond within 30 days.
4. Data Transfers
Your data may be transferred to and processed in countries outside the EEA, including the United States. Where this occurs, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Transfers to countries with an adequacy decision
- Other legally recognised transfer mechanisms
5. Data Retention
We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy and to comply with legal obligations. When data is no longer required, it is securely deleted or anonymised.
- Account data: retained for the duration of your account, then deleted within 30 days of closure
- Resume content: retained until you delete it or close your account
- Transaction records: retained for up to 7 years for tax and legal compliance
6. Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include encryption in transit (TLS/HTTPS), hashed passwords, and access controls.
7. Supervisory Authority
If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO). In EU member states, contact your national Data Protection Authority.
8. Updates to This Page
We may update this GDPR information page from time to time. Material changes will be communicated via email or a prominent notice on our website.
9. Contact Our Data Protection Team
For any GDPR-related enquiries or to submit a data subject request: