This Privacy Policy explains how RadGuide ("we", "us", "our") collects, uses and protects your personal data when you use our website and services. We comply with the UK GDPR and the Data Protection Act 2018.
1. Data controller
The data controller is Mohammed Khalil, a sole trader trading as RadGuide, based in the United Kingdom. Correspondence address: 275 Roundhay Road, Leeds, United Kingdom. You can contact us at privacy@radguide.shop.
2. What data we collect
- Account data: name, display name, email, password (hashed), role (talent/employer), company.
- Profile data: modalities, location, career stage, goals, CV content you upload.
- Usage data: pages visited, courses completed, AI assistant conversations, feature interactions.
- Payment data: billing email and subscription status. Card details are processed by Stripe and never stored on our servers.
- Technical data: IP address, device, browser, log data, cookies (see Cookies).
3. How we use your data
- To provide and personalise the Service (lawful basis: contract).
- To process payments and manage subscriptions (lawful basis: contract).
- To send transactional emails such as account, security and billing notifications (lawful basis: contract).
- To send the optional weekly digest and product updates (lawful basis: consent — you can unsubscribe at any time).
- To improve our service, debug issues and prevent abuse (lawful basis: legitimate interests).
- To comply with legal obligations.
4. Sharing your data
We share data only with trusted processors who help us run the service:
- Supabase — database, authentication and storage hosting.
- Stripe — payment processing.
- Lovable / Cloudflare — application hosting and email delivery.
- Google & OpenAI — AI model providers used by the RadGuide Assistant.
We never sell your data.
5. International transfers
Some processors may store or process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses.
6. How long we keep your data
We retain account data for as long as your account is active. If you delete your account, personal data is removed within 30 days, except where we are required to keep it (e.g. tax records: 6 years).
7. Your rights
Under UK GDPR you have the right to:
- access a copy of your personal data;
- request correction or deletion;
- object to or restrict processing;
- data portability;
- withdraw consent at any time;
- complain to the Information Commissioner's Office (ico.org.uk).
To exercise any right, email privacy@radguide.shop.
8. Security
We use industry-standard measures including encryption in transit (HTTPS), encrypted storage, role-based access and Row Level Security on our database. No system is 100% secure, but we work hard to protect your data.
9. Children
RadGuide is not intended for children under 16 and we do not knowingly collect their data.
10. Changes
We may update this Policy from time to time. Material changes will be notified by email or in-app.