Privacy policy

This policy explains what personal data we collect on acttuary.com, why, how long we keep it, and what your rights are. The data controller is Acttuary (contact: hello@acttuary.com). Our registration with the UK Information Commissioner’s Office (ICO) is in progress; the registration number will appear here once it is issued.

What we collect

• Waitlist email, if you gave us one before we took the form down. Your email address and which product you were interested in. We no longer collect these: the sign-up form is off the site. We still hold the addresses given while it was up. Legal basis: consent. Withdraw it by unsubscribing from any email and we delete your address.
• Your account. If you sign up, our authentication provider (Clerk) holds your email address, your name if you give one, and your sign-in credentials. We store the account identifier it issues, plus your email address, so we can attach your purchases and progress to you. Legal basis: performance of our contract with you.
• Subscription and payment records. Your plan, its status, the current period end and your Stripe customer reference. Payments are taken by Stripe: card details go straight to them and we never see or store a card number. Legal basis: contract, and legal obligation for the accounting records.
• Course progress. Which lessons you have marked complete, when, and your score on a lesson quiz, so that your progress bars, next-lesson links and track certificates work. Legal basis: contract.
• Your certificate record. When you finish a track we store the certificate’s reference, which track it is for, the name on your account and the date you earned it. That record is what a certificate rests on, rather than a page that recalculates itself every time you open it. It stays private unless you publish it, which is the next bullet. Legal basis: contract.
• Publishing a certificate, which is your choice. Certificates are private by default. If you press Publish on your own certificate, that record becomes readable by anyone who has the link, at an address of the form acttuary.com/verify/ followed by the reference. That page shows your name, the track, the date you earned it and our small print, and nothing else: no email address, no exam marks, no record of which lessons you read. This is what lets you add the certificate to your LinkedIn profile, because LinkedIn needs a credential page an employer can open. Legal basis: consent. Press Unpublish on the same page at any time and the public page stops showing it straight away.
• CV review orders. Your email address, whether you added a cover-letter review, the amount paid, the order’s status and our delivery notes.
• The CV itself (and cover letter, if you send one). Stored in encrypted file storage that only our server can reach, used only to write your review, and never shared with employers, recruiters or anyone else. Legal basis: contract. A CV usually contains far more about you than we need. Please do not include a date of birth, a photograph, health information or anything else the role does not call for.
• Booked sessions (mock interviews and 1-1 coaching). For both: your email address, the slot you chose and the amount paid. Afterwards we store the written feedback we send you and, once your session is done, the meeting link is cleared. Legal basis: contract.
• What a mock interview booking asks for. The questionnaire may collect the employer, the role, the practice area, the stage you have reached, the date of the real interview, and a free-text box where we invite you to paste a CV summary, a job advert or an application answer. We use those answers to prepare the session and to brief the actuary taking it. Legal basis: contract. Please put no more in the free-text box than the session needs, and no health information, date of birth or photograph.
• What a coaching booking asks for. Only what we need to understand the question you want to discuss, plus anything you choose to send us with it. Legal basis: contract. The same request applies: no more than the session needs, and nothing about your health or your circumstances that the question does not turn on.
• Schemes you are tracking. If you use the graduate scheme tracker while signed in, we store the schemes you track, the stage you have reached on each one (saved, applied, interviewing and so on) and a short note of your own if you write one. Untracking a scheme deletes that record. Legal basis: contract. The note is free text, so please put nothing sensitive in it: it is there for “ask about the Bristol office” rather than anything about your health or your circumstances.
• Closing-date reminders, if you switch them on. We store that you asked for them and how many days’ warning you want, and we record which reminders we have already sent you so the same one never goes twice. The emails go to the verified address on your account; we do not keep a copy of it, we ask Clerk for it when a reminder is due. Legal basis: consent. Switch the reminders off on the tracker at any time and they stop.
• Analytics. We use Plausible, a cookieless analytics service, to count page views, referrers and device type in aggregate. It sets nothing on your device and builds no profile of you. It is run by a third party, so the address of the page you are on reaches their servers, which is why we switch it off entirely on the two pages whose address contains a private link: your booking page and the CV upload page. No advertising trackers, no cross-site profiles, no personal identifiers, no profiling. Legal basis: legitimate interest in understanding how the site is used.
• Technical logs. Our host records standard request logs, including IP addresses, for security and debugging, and tells our checkout which country a request came from so we only sell where we are set up to. Legal basis: legitimate interest in running a secure, lawful service.

How long we keep it

• CV files: deleted 90 days after your review is delivered, automatically, by a job that runs every day. Ask us sooner and we delete it on the spot.
• Order and payment records: six years after the end of the relevant tax year, because HMRC requires it. That record keeps the order details, not the CV.
• Session questionnaires and prep packs: deleted 12 months after the session. That covers the free-text answers, the material we prepare for a mock interview, anything a coaching customer sends us, and our session notes. We keep the written feedback we sent you for the same period so you can ask for it again, and the booking record itself (date, service, amount) stays with the order records below. Ask us sooner and we delete it on the spot.
• Account, subscription, progress and certificate records: while your account exists. Ask us to close it and we delete it, published certificates included, and their public pages stop answering.
• Schemes you are tracking, and the reminders: while your account exists. Untrack a scheme and its record goes immediately, note included. Switching the reminders off stops them and keeps the record of which have already been sent, so turning them back on does not resend anything. Ask us to close your account and all three go with it.
• A published certificate: visible to anyone with the link until you unpublish it. Unpublishing takes effect immediately. We do not control anything a third party has already copied, which is worth knowing before you publish anything anywhere.
• Waitlist email: until you unsubscribe, or until we have finished the emails you signed up for. No new addresses are being collected.

Under 18?

Parts of the site are useful to sixth-form students, and we design for that: we collect the minimum, apply high-privacy defaults, run no advertising, profiling or behavioural tracking, and never knowingly sell to under-18s. Paid products are for adults, or for a parent or guardian buying on a young person’s behalf. If you are under 13, please don’t submit your email address. A parent or guardian can email us to have a young person’s data deleted, no questions asked.

Who processes data for us

These providers process personal data on our behalf, under their standard data-processing terms, and only on our instructions:

• Vercel: hosting and request logs.
• Supabase: our database and the encrypted CV storage.
• Clerk: accounts and sign-in.
• Stripe: payments, subscriptions and refunds. Stripe is a controller in its own right for fraud prevention and its regulatory duties.
• Resend: the emails our system sends, including the order alerts that reach the founders.
• Plausible: aggregate, cookieless statistics. Not loaded at all on your booking page or the CV upload page.

Some of them process data outside the UK. Where that happens it is covered by the UK’s approved transfer safeguards: an adequacy decision, or the International Data Transfer Agreement or Addendum. We do not sell personal data to anyone, ever, and we do not use it to train machine-learning models.

Your rights

You can ask us for a copy of your data, ask us to correct it or delete it, ask for it in a portable format, object to processing based on legitimate interests, and withdraw consent at any time. Email hello@acttuary.com. We normally respond within one month. In the limited circumstances allowed by data-protection law, a longer response period or a reasonable administrative fee may apply. If you’re unhappy with how we handle your data you can complain to the ICO at ico.org.uk, though we would rather you gave us the chance to fix it first.

Security

The site is served over HTTPS only. CV files sit in private storage that no public URL reaches. Only our server can read them, and only to deliver your review. Administrative access to personal data is access-controlled and limited to authorised members of the Acttuary team who need it to provide or administer the service.

Changes

We’ll update this policy before any new data collection begins, and the date at the top tells you when it last changed.