Privacy Policy

Last updated 4 November 2024

At Sore Thumb, we are committed to protecting your privacy and safeguarding your personal information. This Privacy Policy outlines the types of information we collect, how we use and protect that information, and your rights regarding your data. By using our services, you agree to the practices described herein.

1. Information We Collect

We collect information that is necessary to provide our services, ensure a quality client experience, and improve our offerings. This includes, but may not be limited to:

  • Personal Information: When you engage with our services, we may collect personal details such as your name, email address, phone number, and payment information.

  • Career Information: To build effective career documents, we may gather details about your employment history, education, achievements, skills, and professional interests.

  • Usage Information: We may collect information about how you interact with our website, including IP addresses, browser types, and other technical data to improve our website's performance and your user experience.

2. How We Use Your Information

We use your information to provide, maintain, and improve our services. Specific uses include:

  • Service Delivery: To develop and deliver your resume, CV, LinkedIn profile, and other professional documents tailored to your career goals.

  • Client Communication: To communicate with you regarding service updates, deadlines, revisions, or any other aspect of our service relationship.

  • Improvement of Services: To analyze service use patterns and preferences in order to enhance our services and user experience.

  • Legal Compliance: To comply with applicable legal and regulatory requirements.

3. Legal Basis for Processing Personal Data (EEA Residents)

If you are a resident of the European Economic Area (EEA), we process your personal information under the following lawful bases:

  • Consent: When you have given consent to process your personal data for specific purposes.

  • Contract: When processing is necessary for the performance of a contract with you.

  • Legal Obligation: When processing is necessary to comply with a legal obligation.

  • Legitimate Interests: When processing is necessary for our legitimate interests, provided that your rights and interests do not override those interests.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored on your device that help us understand how you interact with our site. You can control the use of cookies through your browser settings, but disabling them may affect the functionality of our website.

5. Information Protection

We are committed to ensuring that your information is secure. We take the following measures to safeguard your personal and career-related information:

  • Encrypted Storage: All data is stored on encrypted hard drives, ensuring that your personal information is protected at rest. This encryption helps prevent unauthorized access in the unlikely event that the storage device is lost or stolen.

  • Secure Workspace: Access to your personal information is limited to authorized personnel only. We maintain secure workspaces to prevent unauthorized physical access to devices containing your data.

  • Access Controls: Devices used to store your information are protected with strong passwords and, where possible, multi-factor authentication to add an extra layer of security.

  • Secure Communication: We use secure methods for transmitting sensitive information, such as encrypted email services or reputable secure file-sharing platforms, to protect your data during transmission.

  • Regular Updates and Security Software: All devices and software are kept up-to-date with the latest security patches and antivirus solutions to protect against malware, viruses, and other cyber threats.

  • Data Minimization: We collect only the information necessary to provide our services, reducing the amount of sensitive data stored.

  • Regular Backups: Encrypted backups are maintained to prevent data loss in case of hardware failure or other incidents, ensuring business continuity and the protection of your information.

Despite these measures, please be aware that no method of electronic storage or transmission over the Internet is entirely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. If you have any concerns about the security of your data, please feel free to contact us at clientcare@sorethumb.pro for more information.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Typically, we retain client data for seven (7) years after the completion of services to comply with legal obligations and for record-keeping purposes.

7. Sharing of Information

Your personal information will never be sold, rented, or otherwise shared with third parties without your consent, except in the following instances:

  • Service Providers: We may share information with trusted third-party providers who assist in delivering our services, such as secure payment processors or data storage services. These providers are bound by confidentiality agreements.

  • Legal Requirements: We may disclose your information if required by law, legal process, or government request.

8. International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. This is due to our use of third-party service providers like Squarespace, which may store or process data on servers located outside your home country. These countries may have data protection laws different from those in your jurisdiction.

We rely on Squarespace's commitment to data protection, which includes compliance with frameworks like the EU-U.S. Data Privacy Framework and Standard Contractual Clauses where applicable. While we cannot control all aspects of data handling by Squarespace, we take reasonable steps to ensure that your personal information is treated securely and in accordance with this Privacy Policy.

For more detailed information on Squarespace's data protection practices, please refer to their Privacy Policy and Data Processing Addendum.

9. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

  • Access: Request confirmation of whether we are processing your personal data and access to it.

  • Correction: Request correction of inaccurate or incomplete personal data.

  • Deletion: Request deletion of your personal data under certain circumstances.

  • Restriction: Request restriction of processing your personal data.

  • Objection: Object to the processing of your personal data for direct marketing purposes.

  • Data Portability: Request a copy of your personal data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact us at clientcare@sorethumb.pro. We will respond to your request in accordance with applicable data protection laws.

If you believe we are unlawfully processing your personal information, you have the right to lodge a complaint with your local data protection supervisory authority. Contact details for data protection authorities in relevant regions are listed below:

  • European Economic Area (EEA): Contact details for data protection authorities in the EEA are available here.

  • Switzerland: The Federal Data Protection and Information Commissioner (FDPIC) provides contact information here.

  • United Kingdom: The Information Commissioner’s Office (ICO) oversees data protection in the UK. Contact details are available here.

  • Canada: The Office of the Privacy Commissioner of Canada (OPC) enforces privacy laws such as the Personal Information Protection and Electronic Documents Act (PIPEDA). Contact details are available here.

  • Argentina: The Agency for Access to Public Information (Agencia de Acceso a la Información Pública) is the primary authority on data protection. Contact details are available here.

  • Brazil: The National Data Protection Authority (Autoridade Nacional de Proteção de Dados, ANPD) oversees compliance with Brazil's General Data Protection Law (LGPD). Contact details are available here.

  • Mexico: The National Institute for Transparency, Access to Information, and Personal Data Protection (INAI) provides guidance on data protection in Mexico. Contact details are available here.

You have the right to access, correct, or delete your personal information, as well as the right to withdraw consent to our use of your information at any time. If you wish to exercise any of these rights, please contact us at clientcare@sorethumb.pro.

10. California Privacy Rights

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA):

  • Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you.

  • Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.

  • Right to Opt-Out: You have the right to opt-out of the sale of your personal information. Note that we do not sell personal information.

To exercise your rights, please contact us at clientcare@sorethumb.pro. We will not discriminate against you for exercising any of your CCPA rights.

11. Children's Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently received personal information from a child under 13, we will delete such information from our records.

12. Changes to This Privacy Policy

We may periodically update this policy to reflect changes in our practices, services, or legal requirements. Updates will be posted on our website, and we encourage you to review this page regularly to stay informed of our practices.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at clientcare@sorethumb.pro. Your privacy and trust are essential to us, and we are here to address any inquiries you may have.