Your data is yours.
We just help you get hired.
MakeResume is operated by Vimatech Ltd (Company No. 17001986), registered with the UK Information Commissioner's Office. Here's exactly how we protect your data.
ICO Registered
We are registered with the UK Information Commissioner's Office — the authority that upholds data rights.
Registration: ZC155985
UK GDPR Compliant
We comply with the UK General Data Protection Regulation and the Data Protection Act 2018.
Lawful basis for every processing activity
Your Data, Your Control
Access, export, or delete your personal data at any time from your account settings. No hoops, no delays.
Right to erasure exercisable instantly
Never Sold. Never Shared.
Your resume content and personal data are never sold to third parties, used for advertising, or shared with recruiters.
Zero data broker relationships
Encrypted at Rest & in Transit
All data is encrypted using industry-standard TLS in transit and AES-256 at rest. Passwords are hashed with bcrypt.
SOC 2 compliant infrastructure
Minimal Data Collection
We only collect what's strictly necessary to provide the service. No trackers, no fingerprinting, no surveillance.
Data minimisation by design
How we handle your data
Security is built into every layer of our infrastructure.
Encrypted at rest and in transit
AES-256 encryption at rest. TLS 1.3 for all data in transit.
EU infrastructure
All data hosted on EU-based infrastructure with strict access controls.
No credit card data stored
Paddle is our Merchant of Record — we never see or store your payment details.
Regular security audits
We conduct regular security reviews and dependency audits to stay ahead of threats.
Third-party processors
We work with a minimal set of trusted sub-processors, each bound by data processing agreements.
| Provider | Purpose | Location |
|---|---|---|
| Paddle | Payments & billing (Merchant of Record) | UK / EU |
| Infrastructure provider | Application hosting & database | EU |
| Google OAuth | Authentication (optional sign-in) | US (EU SCCs) |
You're in control
Under UK GDPR, you have the right to:
- Access — Request a copy of your personal data
- Rectification — Correct inaccurate data we hold about you
- Erasure — Request deletion of your personal data
- Portability — Receive your data in a portable format
- Restrict processing — Limit how we use your data
- Object — Object to processing based on legitimate interests
- Withdraw consent — Withdraw consent at any time where consent is the legal basis
Exercise your rights
Contact our data protection team via our contact form. We'll respond within 30 days.
Have questions?
Read our full privacy policy or get in touch with our team.