Data Protection
Last Updated: 1 March 2026
1. Data Controller
Stellarizon Digitals Ltd (Company No. 16748429), registered in England and Wales, is the data controller responsible for your personal data processed through GlobalJobSuccess.
Registered office: 86–90 Paul Street, London EC2A 4NE
ICO Registration Number: ZC057718
Contact: [email protected]
2. Our Commitment
We are committed to protecting your personal data in accordance with:
- The UK General Data Protection Regulation (UK GDPR)
- The Data Protection Act 2018
- The Privacy and Electronic Communications Regulations (PECR)
- The California Consumer Privacy Act (CCPA) for US-based users
3. Data We Process
We process the following personal data to provide our services:
- Identity Data: First name, last name, email address.
- CV Data: Work experience, education, skills, achievements, and other career information you provide.
- Job Description Data: Text content submitted for ATS analysis.
- Transaction Data: Payment amounts, dates, and Stripe transaction IDs. We never store card details.
- Technical Data: IP address, browser type, device information, and usage patterns.
4. Lawful Basis for Processing
We process your data under the following lawful bases:
- Contract: To provide the services you have purchased (CV building, ATS analysis, lead generation).
- Consent: For optional marketing communications and analytics cookies.
- Legitimate Interests: To improve our services, prevent fraud, and maintain security.
- Legal Obligation: To comply with tax, accounting, and regulatory requirements.
5. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
- Encryption of passwords using bcrypt hashing.
- HTTPS/TLS encryption for all data in transit.
- Secure cloud infrastructure with access controls.
- Payment processing exclusively through PCI-DSS compliant Stripe.
- Regular security reviews and updates.
6. Data Retention
- Account data: Retained for the duration of your account plus 2 years.
- CV data: Retained for the duration of your account. Deleted upon account deletion.
- Payment records: Retained for 7 years to comply with UK tax obligations.
- Technical logs: Retained for up to 90 days.
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of Access: Request a copy of all personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten").
- Right to Restriction: Request we limit how we process your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Rights Related to Automated Decision-Making: Not be subject to decisions based solely on automated processing.
8. California Residents (CCPA)
If you are a California resident, you have additional rights:
- Right to know what personal information is collected, used, shared, or sold.
- Right to delete personal information held by us.
- Right to opt-out of the sale of personal information. We do not sell your personal data.
- Right to non-discrimination for exercising your CCPA rights.
9. International Transfers
Your data may be transferred to and processed in countries outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and adequacy decisions.
10. Data Breach Procedures
In the event of a personal data breach that poses a risk to your rights and freedoms, we will:
- Notify the Information Commissioner's Office (ICO) within 72 hours.
- Notify affected individuals without undue delay if the breach is high-risk.
- Document the breach and remedial actions taken.
11. Complaints
If you believe your data protection rights have been breached, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
12. Contact the Data Controller
For any data protection enquiries or to exercise your rights:
Stellarizon Digitals Ltd
86–90 Paul Street, London EC2A 4NE
Email: [email protected]
Company No. 16748429 (England & Wales)
ICO Registration: ZC057718