Privacy Policy

ApprentiFinder is the data controller for personal data collected through this service.

Contact: hello@apprentifinder.co.uk

Data Protection Officer: Mel Rollason — hello@apprentifinder.co.uk

We collect the following categories of personal data:

We do not collect special category data (e.g. ethnicity, health, religion) unless you voluntarily include it in a free-text field.

We use your data to:

• Create and maintain your account
• Match you with relevant degree apprenticeship opportunities
• Generate AI-assisted CV, cover letter, and hiring insight drafts
• Send deadline reminders and service notifications (where opted in)
• Improve the accuracy and performance of our recommendation engine
• Meet our legal obligations and enforce our Terms of Service

We do not sell your personal data to third parties. We do not use your data to train AI models.

We rely on the following lawful bases:

• Contract - processing necessary to provide the service you signed up for (profile, matching, document generation)
• Legitimate interests - improving the service, preventing fraud, and maintaining security
• Consent - marketing emails (you may withdraw consent at any time)
• Legal obligation - where required by law

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

Uploaded documents (CV, cover letter) are deleted from our storage within 30 days of account deletion.

We use the following third-party processors. All process data within the UK or EU/EEA under appropriate data processing agreements:

• Amazon Web Services (AWS) — cloud infrastructure, database storage, file storage, and AI inference (eu-west-2 / EU regions)
• GOV.UK Find an Apprenticeship API — source of vacancy data (no personal data is shared with this service)

No personal data is transferred outside the UK or EEA without appropriate safeguards.

You have the right to:

• Access - request a copy of the personal data we hold about you
• Rectification - ask us to correct inaccurate data
• Erasure - request deletion of your data ("right to be forgotten")
• Restriction - ask us to limit how we process your data
• Portability - receive your data in a machine-readable format
• Objection - object to processing based on legitimate interests

To exercise any of these rights, email us at hello@apprentifinder.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We use industry-standard measures to protect your data, including encryption at rest (AES-256 with customer-managed keys for personal data) and in transit (TLS). Access to your data is restricted to authorised personnel only.

Despite these measures, no internet service can guarantee absolute security. Please use a strong, unique password and keep your login credentials confidential.

We use essential cookies to keep you signed in and to secure your session. These cannot be switched off as they are necessary for the site to function.

With your consent, we also use PostHog analytics cookies to understand how visitors use ApprentiFinder, so we can improve the site. These are not set until you accept them, and you can change your choice at any time using the "Cookie settings" link in the footer. PostHog data is hosted in the EU.

Our service is intended for users aged 16 and over. Users under 18 must have parental or guardian consent. If you believe a child under 16 has provided us with personal data, please contact us immediately so we can delete it.

We may update this policy from time to time. We will notify you of material changes by email or via an in-app notice, and ask you to re-accept where required by law.

ApprentiFinder
Email: hello@apprentifinder.co.uk
[Registered address - to be added]