NORESUME PRIVACY POLICY

Last Updated: 01 June 2025

1. INTRODUCTION

1.1 About This Privacy Policy

NORESUME LTD ("we," "us," "our," or "Noresume") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our B2B services marketplace.

Our Details:

  • Legal Name: NORESUME LTD

  • Registered Address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

  • Contact: info@nresume.com

  • Data Protection Contact: privacy@nresume.com

1.2 Who This Policy Applies To

This Privacy Policy applies to:

  • Businesses: Self-employed individuals, sole traders, partnerships, and limited companies offering professional services on our platform

  • Clients: Companies and organizations purchasing professional services through our platform

  • Visitors: Anyone browsing our website or platform

1.3 Legal Basis

We process your personal data in accordance with:

  • UK General Data Protection Regulation (UK GDPR)

  • Data Protection Act 2018

  • Privacy and Electronic Communications Regulations (PECR)

Our legal bases for processing:

  • Contract: To provide our Services to you

  • Legal Obligation: To comply with tax, VAT, and other legal requirements

  • Legitimate Interests: To operate, improve, and secure our platform

  • Consent: Where we have specifically asked for your permission

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

For All Users:

  • Name and contact information (email, phone number)

  • Account credentials (username, password)

  • Profile information and biography

  • Communication preferences

For Businesses (Service Providers):

  • Professional background and experience

  • Skills and qualifications

  • Portfolio and work samples

  • Availability and rates

  • Bank account details (for payments)

  • Business registration information:

    • Business name and trading name

    • Business address

    • VAT registration number (if VAT-registered)

    • Company registration number (if limited company)

For Clients:

  • Company name and details

  • Business address

  • Service requirements and project descriptions

  • Billing information

  • Payment method details

2.2 Information We Collect Automatically

Usage Data:

  • IP address and device information

  • Browser type and version

  • Pages visited and time spent

  • Referring website

  • Click patterns and interactions

Technical Data:

  • Cookies and similar technologies (see Section 8)

  • Log files and error reports

  • Performance and analytics data

2.3 Information from Third Parties

VAT Verification:

  • We verify VAT registration details with HMRC's VAT registration database

  • Information returned: VAT number validity, registered business name, registered address

Payment Processing:

  • Payment confirmation from Stripe

  • Bank account verification data

  • Transaction records

Authentication:

  • Basic profile information from Firebase Authentication

3. HOW WE USE YOUR INFORMATION

3.1 To Provide Our Services

We use your information to:

  • Create and manage your account

  • Match Businesses with suitable opportunities

  • Recommend service providers to Clients

  • Facilitate messaging and communication

  • Process payments and transactions

  • Provide customer support

  • Send service-related notifications

3.2 For Business Verification and Compliance

VAT Registration Verification:

  • Verify VAT registration status with HMRC

  • Confirm business name matches VAT registration

  • Validate registered business address

  • Perform periodic re-verification to maintain accurate records

  • Generate compliant invoices and payment records

Why We Verify VAT Registration:

  • Ensure tax compliance

  • Prevent fraud and misrepresentation

  • Meet our legal obligations as a payment facilitator

  • Provide accurate invoicing for both parties

Other Compliance Uses:

  • Comply with tax reporting obligations

  • Respond to legal requests and court orders

  • Prevent fraud, money laundering, and illegal activity

  • Enforce our Terms and Conditions

3.3 To Improve Our Platform

We use aggregated and anonymized data to:

  • Improve our matching algorithms

  • Analyze platform performance

  • Understand user behavior and preferences

  • Develop new features and services

  • Conduct market research

3.4 For Marketing (With Your Consent)

With your explicit consent, we may:

  • Send promotional emails about our Services

  • Provide updates about new features

  • Share relevant content and resources

You can opt-out at any time by:

  • Clicking "unsubscribe" in any marketing email

  • Adjusting preferences in your account settings

  • Contacting us at privacy@noresume.com

4. HOW WE SHARE YOUR INFORMATION

4.1 With Other Platform Users

Businesses (Service Providers): Your profile, skills, experience, and portfolio are visible to Clients when:

  • You submit a proposal

  • Clients search for service providers

  • Our matching system recommends you

Clients: Your company name, project descriptions, and requirements are visible to Businesses when:

  • You post a service listing

  • Businesses search for opportunities

Control Your Visibility: You can adjust privacy settings to control what information is publicly displayed.

4.2 With Service Providers and Partners

We share your information with trusted third parties who help us operate our platform:

Payment Processing:

  • Stripe: Processes payments and manages bank account information

  • Information shared: Payment details, transaction amounts, bank account details

Infrastructure and Hosting:

  • AWS (Amazon Web Services): Cloud hosting in West Europe (London)

  • Supabase: Database and backend services in West Europe (London)

  • Information shared: All platform data stored on their servers

Authentication:

  • Firebase Authentication: Manages account security

  • Information shared: Email, password hash, authentication tokens

VAT Verification:

  • HMRC VAT API: Verifies VAT registration status

  • Information shared: VAT number, business name

  • Information received: VAT validity, registered name, registered address

Analytics (If Applicable):

  • We may use analytics services to understand platform usage

  • Data is anonymized where possible

4.3 For Legal Reasons

We may disclose your information when required to:

  • Comply with legal obligations, court orders, or government requests

  • Enforce our Terms and Conditions

  • Protect our rights, property, or safety

  • Investigate fraud or security incidents

  • Respond to tax or VAT inquiries from HMRC

4.4 Business Transfers

If Noresume is acquired, merged, or sells assets, your information may be transferred to the new owner. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information with other parties when you give us explicit permission to do so.

5. DATA RETENTION

5.1 How Long We Keep Your Data

Active Accounts:

  • We retain your information for as long as your account is active

  • You can delete your account at any time

Closed Accounts:

  • After account closure, we retain certain information for legal and compliance purposes

  • Financial records: 6 years (UK tax law requirement)

  • VAT records: 6 years (HMRC requirement)

  • Transaction records: 6 years (accounting regulations)

  • Communications: Up to 2 years for dispute resolution

Aggregated Data:

  • Anonymized and aggregated data may be retained indefinitely for analytics and platform improvement

5.2 Deletion Requests

You can request deletion of your personal data by contacting privacy@nresume.com. Please note:

  • Some data must be retained for legal compliance (tax, VAT, financial records)

  • Deletion may not be immediate due to backup systems

  • We will confirm deletion within 30 days where legally permissible

6. YOUR RIGHTS

Under UK GDPR, you have the following rights:

6.1 Right to Access

Request a copy of the personal data we hold about you.

6.2 Right to Rectification

Request correction of inaccurate or incomplete data.

6.3 Right to Erasure

Request deletion of your personal data (subject to legal retention requirements).

6.4 Right to Restrict Processing

Request that we limit how we use your data.

6.5 Right to Data Portability

Request a copy of your data in a structured, machine-readable format.

6.6 Right to Object

Object to processing based on legitimate interests or for marketing purposes.

6.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

6.8 Right to Complain

You have the right to lodge a complaint with the Information Commissioner's Office (ICO):

To Exercise Your Rights: Contact us at privacy@nresume.com with your request. We will respond within 30 days.

7. DATA SECURITY

7.1 How We Protect Your Data

We implement appropriate technical and organizational measures to protect your personal data:

Technical Measures:

  • Encryption of data in transit (TLS/SSL)

  • Encryption of sensitive data at rest

  • Secure password hashing

  • Regular security testing and updates

  • Access controls and authentication

  • Firewall protection

Organizational Measures:

  • Limited access to personal data (need-to-know basis)

  • Staff training on data protection

  • Regular security audits

  • Incident response procedures

Data Storage Location:

  • Primary servers: West Europe (London), United Kingdom

  • Backup servers: Within EU/UK regions

  • No data transfers outside UK/EU without appropriate safeguards

7.2 Your Responsibility

You are responsible for:

  • Keeping your password secure and confidential

  • Not sharing your account credentials

  • Notifying us immediately of any unauthorized access

We will never ask for your password via email or phone.

8. COOKIES AND TRACKING

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. We use cookies to:

  • Keep you logged in

  • Remember your preferences

  • Analyze how you use our platform

  • Improve user experience

8.2 Types of Cookies We Use

Essential Cookies:

  • Required for the platform to function

  • Cannot be disabled

  • Examples: Session cookies, authentication tokens

Functional Cookies:

  • Remember your preferences and settings

  • Can be disabled in your browser

Analytics Cookies:

  • Help us understand how users interact with our platform

  • Data is typically anonymized

  • Can be disabled in your browser

8.3 Managing Cookies

You can control cookies through:

  • Browser settings: Most browsers allow you to refuse or delete cookies

  • Our cookie preferences: Adjust settings in your account (if available)

Note: Disabling essential cookies may affect platform functionality.

9. INTERNATIONAL DATA TRANSFERS

9.1 Data Storage

Our primary servers are located in West Europe (London), United Kingdom. Your data is stored within the UK/EU region.

9.2 Third-Party Services

Some third-party services we use may process data outside the UK/EU:

  • Stripe: May process payment data in multiple regions with appropriate safeguards

  • AWS: Data stored in EU region but AWS is a US company

  • Firebase: Google service, data may be processed in US with appropriate safeguards

Safeguards in Place:

  • Standard Contractual Clauses (SCCs)

  • EU-US Data Privacy Framework participation (where applicable)

  • UK GDPR-compliant data processing agreements

10. CHILDREN'S PRIVACY

Our Services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it immediately.

If you believe a child has provided us with personal information, please contact us at privacy@noresume.com.

11. CHANGES TO THIS PRIVACY POLICY

11.1 Updates

We may update this Privacy Policy from time to time to reflect:

  • Changes in laws or regulations

  • Changes to our Services

  • Changes in our data practices

11.2 Notification

If we make material changes, we will notify you by:

  • Email to your registered address

  • Prominent notice on our platform

  • Updating the "Last Updated" date at the top of this policy

Your continued use of our Services after changes constitutes acceptance of the updated Privacy Policy.

12. CONTACT US

12.1 Privacy Questions

For any questions about this Privacy Policy or our data practices:

Email: privacy@nresume.com

Post: NORESUME LTD
Data Protection Officer
71-75 Shelton Street
Covent Garden
London, United Kingdom
WC2H 9JQ

12.2 Data Protection Authority

If you are not satisfied with our response, you can contact:

Information Commissioner's Office (ICO)

  • Website: www.ico.org.uk

  • Phone: 0303 123 1113

  • Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF