Summary: We collect only what we need to run CyberGrad. We never sell your data. We never share it with third parties for marketing. You can request deletion at any time by emailing cybergraduk@gmail.com.
1. Who we are
CyberGrad is operated by Rakesh Elamaran, based in the United Kingdom. We provide career guidance tools and a structured programme for international cybersecurity graduates navigating the UK job market.
Contact: cybergraduk@gmail.com · +44 7823 800609 · cyber-grad.co.uk
2. What data we collect
When you use CyberGrad, we may collect the following:
- Account information: Your name, email address, university, course, graduation year, and current status (studying or graduated)
- CV data: Text content you paste into the CV Scorecard tool. This is processed in-session and is not permanently stored on our servers.
- Payment information: Processed securely by Stripe. We never store card details. We only receive confirmation of payment and a customer reference.
- Usage data: Pages visited, features used, and device/browser information collected via analytics tools to improve the platform.
- Communications: Emails and messages you send us directly.
3. How we use your data
- To create and manage your CyberGrad account
- To deliver the services you have signed up for (CV Scorecard, programme sessions, resources)
- To send you programme updates, session reminders, and relevant communications
- To process payments securely via Stripe
- To improve our platform and understand how students use CyberGrad
- To comply with legal obligations
4. Legal basis for processing (UK GDPR)
- Contract: We process your data to fulfil the service you have paid for or signed up to use.
- Legitimate interests: To improve our platform and communicate relevant updates.
- Consent: For optional marketing communications. You can opt out at any time.
5. Who we share your data with
We only share your data with the following trusted service providers who help us run CyberGrad:
- Supabase — database and authentication (EU/US servers, SOC 2 compliant)
- Stripe — payment processing (PCI DSS compliant)
- Resend — transactional email delivery
- Vercel — website hosting
We do not sell your data. We do not share your data with advertisers or third-party marketing companies.
6. CV data and privacy
When you use the CV Scorecard, your CV text is processed locally in your browser and through our scoring engine. We do not permanently store the full text of your CV. Your CV score is saved to your account to track progress over time. The content of your CV is never shared with third parties.
7. Data retention
We retain your account data for as long as your account is active. If you request deletion, we will remove your personal data within 30 days, except where we are legally required to retain certain records (for example, payment records for tax purposes).
8. Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Request a copy of your data in a portable format
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, email cybergraduk@gmail.com. We will respond within 30 days.
9. Cookies
We use essential cookies to keep you logged in and remember your preferences. We use analytics cookies to understand how students use the platform. You can accept or decline non-essential cookies via the banner shown on your first visit.
10. Security
We use industry-standard security measures including encrypted connections (HTTPS), secure authentication via Supabase, and row-level security on all database tables. No system is 100% secure, but we take your data security seriously.
11. Changes to this policy
We may update this policy from time to time. We will notify active users of significant changes by email. The date at the top of this page shows when it was last updated.
12. Contact and complaints
If you have questions about this policy or how we handle your data, contact us at cybergraduk@gmail.com.
If you are unhappy with how we have handled your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.