Privacy Policy

Who we are

JustMakeCV.com is a professional CV and resume creation platform operated by Sudoway Solutions. Our website address is: https://justmakecv.com

Contact Information:

    • Company: Sudoway Solutions

    • Address: Islamabad, Pakistan

    • Email: info@sudoway.com

What Personal Data We Collect and Why We Collect It

CV and Resume Information

When you create a CV or resume using our platform, we collect and store the following personal information:

    • Personal Details: Full name, email address, phone number, home address, date of birth, nationality

    • Professional Information: Work experience, job titles, company names, employment dates, job descriptions, salary information

    • Educational Background: School names, degrees, graduation dates, grades, certifications

    • Skills and Qualifications: Technical skills, languages, professional certifications, awards

    • Personal Statement: Career objectives, professional summaries, cover letter content

    • Media Files: Profile photos, portfolio images, document uploads

Legal Basis: We process this data based on your consent and our legitimate interest in providing CV creation services. This data is essential for generating your personalized CV documents.

Account Information

    • Username and password for account access

    • Account preferences and settings

    • Subscription and payment history

Legal Basis: Processing is necessary for contract performance and account management.

Technical Data

    • IP addresses and device information

    • Browser type and version

    • Operating system and platform

    • Website usage patterns and analytics data

    • Cookies and similar tracking technologies

Legal Basis: Legitimate interest in website optimization and security.

Comments

Our website may include a blog or comment section. When you leave comments, we collect:

    • Name and email address (required)

    • Website URL (optional)

    • Comment content and timestamp

    • IP address for spam detection

Comments are retained indefinitely unless you request deletion.

Media

Users can upload profile photos and other media files to enhance their CVs. Please note:

    • All uploaded files are stored securely on our servers

    • Profile photos may be included in your downloadable CV documents

    • You retain ownership of all uploaded content

    • We do not use your uploaded media for any purpose other than CV generation

Contact Forms

When you contact us through our website forms, we collect:

    • Name and email address

    • Message content and subject

    • Date and time of submission

We retain contact form submissions for up to 2 years for customer service purposes. We do not use this information for marketing without your explicit consent.

Cookies

Our website uses the following types of cookies:

Essential Cookies

    • Session cookies for account login and security

    • Shopping cart and checkout functionality

    • User preference settings

Analytics Cookies

    • Google Analytics (anonymized IP tracking)

    • Website performance monitoring

    • User behavior analysis for service improvement

Marketing Cookies (Optional)

    • Social media integration cookies

    • Advertising network cookies

    • Remarketing pixels

You can manage your cookie preferences through your browser settings or our cookie consent banner.

Analytics

We use Google Analytics to understand how visitors interact with our website. Google Analytics collects information anonymously and reports website trends without identifying individual visitors.

You can opt out of Google Analytics by:

    • Installing the Google Analytics opt-out browser add-on

    • Adjusting your cookie preferences in our cookie banner

For more information, review Google’s Privacy Policy.

Who We Share Your Data With

We may share your personal data with the following third parties:

Essential Service Providers

    • Hosting Provider: [Your hosting provider] – for website infrastructure and data storage

    • Payment Processors: [e.g., Stripe, PayPal] – for subscription and payment processing

    • Email Service: [e.g., Mailchimp, SendGrid] – for account notifications and customer communications

Analytics and Performance

    • Google Analytics – for website analytics (anonymized data only)

    • Content Delivery Network (CDN) – for website performance optimization

Legal Requirements

We may disclose your personal data if required by law, court order, or to protect our legal rights and interests.

Important: We never sell your personal data to third parties for marketing purposes.

How Long We Retain Your Data

    • CV and Resume Data: Retained for the duration of your active account plus 30 days after account deletion

    • Account Information: Retained until account deletion is requested

    • Contact Form Submissions: 2 years from submission date

    • Analytics Data: 26 months (Google Analytics default)

    • Payment Records: 7 years (required for tax and accounting purposes)

    • Marketing Emails: Until you unsubscribe or request deletion

What Rights You Have Over Your Data

Under applicable data protection laws, you have the following rights:

Access and Portability

    • Request a copy of all personal data we hold about you

    • Download your CV data in a portable format (PDF, Word, etc.)

Rectification

    • Correct any inaccurate or incomplete personal data

    • Update your CV information at any time through your account

Erasure (“Right to be Forgotten”)

    • Request deletion of your personal data and account

    • Automatic data deletion upon account cancellation

Restriction and Objection

    • Restrict processing of your personal data in certain circumstances

    • Object to processing based on legitimate interests

Data Portability

    • Transfer your CV data to another service provider

    • Export your data in machine-readable formats

To exercise these rights, contact us at [privacy email address].

Where Your Data Is Sent

Your personal data may be transferred to and stored in countries outside the European Union, including:

    • United States: Our hosting and cloud storage providers may store data on servers located in the US

    • Other Jurisdictions: Payment processors and service providers may operate globally

We ensure adequate protection through:

    • Standard Contractual Clauses (SCCs) with all non-EU processors

    • Adequacy Decisions: Processing only in countries with EU-adequate privacy protections

    • Certification Programs: Partners certified under recognized privacy frameworks

How We Protect Your Data

We implement comprehensive security measures to protect your personal data:

Technical Measures

    • SSL/TLS encryption for all data transmission

    • AES-256 encryption for data storage

    • Regular security updates and patches

    • Secure backup systems with encryption

Access Controls

    • Two-factor authentication for user accounts

    • Role-based access controls for staff

    • Regular access reviews and audits

Staff Training

    • Regular privacy and security training for all employees

    • Confidentiality agreements with all staff and contractors

    • Clear data handling procedures and policies

Security Monitoring

    • 24/7 monitoring for security threats

    • Incident response procedures

    • Regular vulnerability assessments and penetration testing

Data Breach Procedures

In the event of a data breach:

    1. Immediate Response: Contain the breach and assess the scope within 72 hours

    1. Notification: Report to relevant data protection authorities within 72 hours if required

    1. User Communication: Notify affected users within 72 hours if high risk to rights and freedoms

    1. Investigation: Conduct thorough investigation and implement corrective measures

    1. Documentation: Maintain detailed records of all incidents and responses

If you suspect a security incident, immediately contact us at [security email address].

Contact Information

For privacy-related questions or to exercise your data protection rights, contact us:

Email: privacy@sudoway.com
Response Time: We aim to respond to all privacy requests within 30 days.

Additional Information

Children’s Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it immediately.

International Transfers

As detailed above, your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place for all international transfers.

Changes to This Policy

We may update this privacy policy periodically. We will notify users of material changes by:

    • Email notification to registered users

    • Prominent notice on our website

    • Updated “Last Modified” date at the top of this policy

Complaints

If you have concerns about how we handle your personal data, you can:

For EU residents: Contact your national Data Protection Authority

Contact us directly using the information above

File a complaint with your local data protection authority