Privacy Policy

1. Who we are

CVSpan is the data controller for the information described in this policy. That means we decide why your information is collected and how it is used.

You can reach us at business@cvspan.com, or by post at 86 to 90 Paul Street, London, England, EC2A 4NE. We also have an office at No 6 Udysens Crescent, Mabushi, Abuja, Nigeria.

2. Information we collect

We only collect what we need. Most of it comes directly from you.

Information you give us

• Your name, email address and any details you include when you fill in our contact form
• Information you share while we scope or deliver a project, including files, feedback and access to systems you ask us to work on
• Your details if you apply for a role with us, including your CV and portfolio
• Your email address if you ask to hear from us

Information we collect automatically

• Your IP address and rough location, which usually means the city or country you are in
• Your browser and device type, and the operating system you use
• Which pages you visited, how long you stayed and which site sent you to us
• Cookie data, which we explain in our Cookie Policy

If you send us information about another person, such as a colleague you want us to contact, please make sure they are happy for you to share it.

3. How we use your information

We use what we collect to:

• Reply to your enquiry and talk to you about a possible project
• Deliver work you have hired us to do, and keep you updated on it
• Send invoices and keep our accounting records straight
• Review your application if you apply to join the team
• Understand which parts of our website people find useful, so we can improve it
• Send you updates about our work, but only if you asked to receive them
• Meet our legal and tax obligations

We do not make decisions about you using automated processing alone.

4. Our legal grounds for using it

Data protection law asks us to have a valid reason for using your information. Ours are:

• Contract, when we need your details to quote for work or deliver a project you have hired us for
• Legitimate interests, when we run and improve our website, keep our records in order and protect the business from fraud or misuse
• Consent, when you opt in to marketing emails. You can withdraw it whenever you like
• Legal obligation, when tax or company law requires us to keep certain records

5. Who we share it with

We share your information only where there is a clear reason to. That may include:

• Service providers who help us operate, such as our hosting, email and analytics providers
• Contractors and specialists who work on a project with us, who are bound by confidentiality terms
• Our accountants and legal advisers, where they need it to advise us
• Authorities or regulators, where the law requires us to hand something over
• A buyer or successor, if the business is ever sold or reorganised

Everyone we share information with is required to keep it secure and to use it only for the purpose we gave it to them.

6. Sending information abroad

We work with a remote team and with suppliers in different countries, so your information may be handled outside the country you live in. When that happens, we take steps to make sure it is still protected to a similar standard, usually by putting approved contract terms in place with the provider.

7. How long we keep it

We keep information for as long as we need it, then remove it.

• Enquiries that do not turn into work are kept for up to two years, in case you come back to us
• Project and client records are kept for seven years after the work ends, because tax rules require it
• Job applications are kept for twelve months unless you ask us to remove them sooner
• Marketing contacts are kept until you unsubscribe

8. Your rights

Depending on where you live, you have some or all of these rights:

• Ask for a copy of the information we hold about you
• Ask us to correct anything that is wrong or out of date
• Ask us to delete your information, where we have no need to keep it
• Ask us to limit how we use it while a question is being sorted out
• Object to us using it for our own legitimate interests
• Ask us to send your information to another provider
• Withdraw your consent to marketing at any time

Email business@cvspan.com and we will respond within one month. There is no charge. If you are not happy with our answer, you can complain to your local data protection regulator. In the UK that is the Information Commissioner’s Office.

9. Keeping your information safe

We use encrypted connections, limit who on the team can open client files, and review our tools and access regularly. No system online is completely safe, so we cannot promise perfect security, but we treat your information carefully and we will tell you and the regulator promptly if something goes wrong.

10. Cookies

Our website uses cookies and similar technology. Our Cookie Policy explains which ones we use and how to turn them off.

11. Other websites

Our site links to other places, including our social profiles and work we have published elsewhere. Once you leave our website you are covered by that site’s privacy policy, not ours, so it is worth reading theirs.

12. Children

Our website and services are meant for businesses and adults. We do not knowingly collect information about children under 16. If you think a child has sent us their details, contact us and we will delete them.

13. Changes to this policy

We review this policy from time to time. When we change it we update the date at the top of this page. If the change affects you in a meaningful way we will let you know directly where we can.

14. Contact us

For anything to do with your information, email business@cvspan.com and put Privacy in the subject line. We are happy to help.