Privacy Policy
This policy explains what we collect, why we collect it, and the controls you have. We keep it plain-English and focused on how MyWorkLife works.
Summary
- We collect account details you provide (email, name, profile info) to run the service.
- We store qualifications and evidence files to generate your Skills Passport and reminders.
- Share links are created by you and can be revoked; access is logged for auditability.
- Optional course marketing is sent only where we have recorded an approved legal basis, and it can be stopped at any time.
- We do not sell your personal data.
Data we collect
Account data: email, name, hashed password, and verification timestamps.
Profile data: optional phone and address, plus preferences you set.
Skills Passport data: qualifications you add, award/expiry dates, notes, and evidence file metadata.
Usage and audit: timeline events, share-link access logs (timestamp, IP, user agent), and admin audit logs.
Marketing preferences: the consent or other approved basis, notice version, source, time, unsubscribe and suppression history associated with an email address.
Email performance: provider acceptance, delivery failures, complaints, unsubscribe actions, first-party link clicks, and purchases attributed to an opaque campaign identifier. We do not use an open-tracking pixel by default.
How we use data
- Provide authentication and account features.
- Store and display your qualifications and documents.
- Send reminders you’ve enabled (email/SMS) before expiry dates.
- Generate a CV view and share links you choose to create.
- Protect the platform through monitoring, audit logs, and abuse prevention.
- Where permitted, send relevant course information, enforce your preferences, measure campaign performance, and avoid sending after you have bought the promoted product.
Where data is stored
We use a database for structured records (e.g. qualifications) and object storage for files. For vault metadata, we use application-level encryption.
Your controls
- Update your profile and notification preferences anytime.
- Choose what to share, set purpose and expiry, and revoke links whenever you want.
- Request account support via the contact form.
- Use the link in any marketing email to unsubscribe without signing in. This does not stop essential account, security, purchase, or fulfilment messages.
Retention
We keep data for as long as you maintain an account, unless we’re required to retain specific audit records for security or legal reasons. Campaign event-level data is normally retained for up to 13 months. We may retain a non-reversible suppression lookup so that deleting a contact record does not cause marketing to resume.
Contact
If you have privacy questions, contact support via the contact form.
Last updated: 2026.