Privacy notice

I, Joseph Connoley, trading as Dilatare ("I", "me" or "my"), am committed to protecting and respecting your privacy. This privacy notice explains how I collect, use and protect your personal data when you use my career analysis service.

For the purposes of UK data protection law, the data controller is Joseph Connoley, trading as Dilatare, registered with the Information Commissioner's Office under number ZC287598. You can contact me at hello@dilatare.co.uk.

1. What information I collect

I collect and process the following personal data:

• Information you provide: your email address, questionnaire answers, any written correspondence, and your CV (with sensitive information redacted by you before submission).
• Payment information: I process payments securely via Stripe. I receive your name, email address and the payment details Stripe needs to confirm or refund a payment. I never see or store your full card number.

2. How and why I use your personal data

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases I rely on for processing this information are:

• Performance of a contract: to deliver the career analysis service you have purchased.
• Legal obligation: to maintain accurate financial and tax records as required by HM Revenue & Customs (HMRC).
• Legitimate interests: to improve my services and analyse career trends using anonymised datasets where all identifying details have been removed.
• Consent: to manage my waiting list if you choose to join it. You can withdraw this consent at any time by emailing me.

I need your email address, your questionnaire answers and your CV to perform the contract; without them I cannot prepare your analysis (see section 3 of the terms and conditions, Client deadlines and rescheduling). Sensitive information is always optional.

3. Special category data

If you choose to disclose sensitive personal information (such as data regarding your health, religion, ethnicity, sexuality, political opinions, trade union membership or criminal record) within the questionnaire, I will only use this information to draft your career analysis. I process this data strictly on the basis of your explicit consent, which is given voluntarily when completing the questionnaire.

4. Who has access to your information

Your data is handled directly by me, the person who writes your analysis. I do not sell your information, nor do I ever share it with employers.

To operate my business effectively, I share data with trusted third-party service providers who operate under their own data protection terms:

• Payment processing: Stripe
• Communications: Zoho (email)
• Website infrastructure and security: Cloudflare (hosting)
• Mail management: UK Postbox
• Research and analysis tools: I use specialist software, including AI-assisted tools, to support research and drafting. Identifying details are removed before any client material is used, my settings do not allow that material to train any provider's models, and no decision is automated: every analysis is prepared and finalised by me.

5. International data transfers

Some of my third-party providers process data outside the United Kingdom. Where data is transferred outside the UK, I ensure appropriate safeguards are in place:

• Stripe processes information in the United States under the UK International Data Transfer Addendum and the UK Extension to the EU–US Data Privacy Framework.
• My software providers that process information outside the UK do so under the UK International Data Transfer Addendum, the UK Extension to the EU–US Data Privacy Framework or Standard Contractual Clauses, as applicable.

6. Data retention periods

I only keep your personal data for as long as necessary to fulfil the purposes I collected it for:

• Career submissions and documents: your questionnaire answers, CV and final PDF analysis are securely stored for twelve months after your analysis is delivered, after which they are permanently deleted.
• Financial records: payment and invoice records are retained for six years following the end of the financial year, as required by HMRC.
• Waiting list: your email address is retained until a booking slot is offered to you or until you ask to leave the list.

7. Your legal rights

Under UK data protection law, you have significant rights regarding your data, including the right to:

• Access the personal data I hold about you.
• Rectify any inaccurate or incomplete information.
• Erase your personal data (the "right to be forgotten"), subject to my legal retention requirements.
• Restrict or object to my processing of your data.
• Receive the personal data you gave me in a structured, commonly used, machine-readable format (data portability).
• Withdraw your consent at any time where consent is my legal basis.

To exercise any of these rights, please email me at hello@dilatare.co.uk. I will respond to your request within one calendar month.

If you have concerns about how I handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk, or by telephone on 0303 123 1113.

8. Cookies

My website does not set any first-party cookies. The payment checkout process takes place directly on Stripe's secure hosted platform, which is governed by Stripe's own cookie and privacy policies.