Legal
Privacy Policy
Last updated: June 2026. This policy explains how we handle your personal data and your rights over it.
1. Who we are
NHS CareerMate ("the Platform") is operated by Arouna Salem, a sole trader based in the United Kingdom, who is the data controller for the personal data described in this policy. For any privacy question or to exercise your rights, contact arouna.salem@gmail.com. The Platform is independent and is not affiliated with, endorsed by, or sponsored by the NHS or any government body.
2. What we collect
We collect: (a) account details you provide — your name, email address, and password (passwords are stored hashed by our authentication provider, never in plain text); (b) profile and application content you choose to add — career history, qualifications, professional registrations, saved vacancies and their criteria, and the STAR examples and supporting statements you write; (c) the text of any job advert or description you submit to the analyser; (d) messages you send us through the contact form; and (e) limited technical data needed to run the service securely (e.g. your IP address for rate limiting and abuse prevention).
3. How we use your data, and our lawful bases
We use your data to provide the Platform — to create and secure your account, store your profile and applications, generate and save your supporting statements, and respond to your enquiries. Our lawful bases under UK GDPR are: performance of a contract (providing the service you signed up for); our legitimate interests (keeping the service secure, preventing abuse, and improving it); and your consent where you voluntarily submit content. We do not sell your data, and we do not use it for advertising.
4. AI processing
When you use the vacancy analyser or the statement tools, the text you submit (such as a job advert or your draft answers) is sent to our AI provider, Anthropic, to extract the person specification and assist your preparation. Under Anthropic's commercial API terms, this content is not used to train their models. Please avoid pasting any information you would not want processed in this way. AI output can contain errors — always review it before you rely on it.
5. Where your data is stored and who processes it
We use a small number of trusted processors to run the Platform: Supabase (authentication and database hosting, in an EU/UK region); Vercel (application hosting and delivery); and Anthropic (AI processing, in the United States). Where data is transferred outside the UK — for example to Anthropic in the US — it is protected by appropriate safeguards such as the provider's standard contractual clauses. We share your data only with these processors for the purposes above, or where required by law.
6. Cookies
The Platform uses only strictly necessary cookies — the session cookies that keep you signed in. These are exempt from consent requirements under the Privacy and Electronic Communications Regulations, so we do not show a cookie banner. We do not use advertising or cross-site tracking cookies.
7. How long we keep your data
We keep your account and the content you create for as long as your account is active. If you ask us to delete your account, we will remove your personal data, except where we must retain limited information to comply with a legal obligation. Messages sent through the contact form are kept only as long as needed to handle your enquiry.
8. Your rights
Under UK GDPR you have the right to access your data, to correct it, to have it erased, to restrict or object to its processing, and to data portability. You can edit much of your data directly in the app, and you can exercise any of these rights by emailing arouna.salem@gmail.com. We will respond within one month. There is no charge for a reasonable request.
9. Children
The Platform is intended for adults preparing for NHS employment. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Complaints
If you have a concern about how we handle your data, please contact us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
11. Changes to this policy
We may update this policy from time to time. Where changes are material, we will notify users via the Platform. The "last updated" date below always reflects the current version.
Questions about your data? Contact us. See also our Terms and Conditions.