Privacy Policy
The Agency · Effective date: 27 June 2026
1. Who we are
The Agency (“we”, “us”, “our”) provides software that automatically formats CVs into a recruiter’s branded template. This policy explains how we handle personal data in connection with our website (gettheagency.co.uk) and our software.
The Agency is a trading name of JK Workshops Ltd, a company registered in England and Wales under company number 17096676, with its registered office at 14 Woodah Road, Exeter, EX4 1RP. JK Workshops Ltd is the data controller for the personal data described in this policy.
For any privacy question, or to exercise your rights, contact us at jess@gettheagency.co.uk.
2. The two roles we play
Data protection law treats us differently depending on whose data we handle. Understanding this is the key to the rest of this policy.
Controller. For our own business data, for example people who enquire about the product, our customers and their users, billing records and website visitors, we decide why and how the data is used. For that data, we are the controller and this policy applies.
Processor. When a customer uploads a candidate CV into our software so that it can be reformatted, we process that candidate data only on the customer’s instructions and for the purpose of providing the service. In that situation the recruiter or agency is the controller and we are their processor. The recruiter’s own privacy notice governs that candidate relationship. Where we act as a processor we make a data processing agreement available to customers, as required by Article 28 of the UK GDPR.
3. Personal data we collect as controller
Enquiry and booking data
When you book a call or enquiry through our Calendly link, we receive your name, email address, any details you provide and the meeting time. This is used to arrange and hold the call.
Account data
When you sign up, we collect your name, business name, email address, login credentials and the users you invite to your account.
Billing data
Subscriptions are billed through Stripe on a rolling 30 day basis. When you pay, you are taken to Stripe’s secure checkout page, where Stripe collects and processes your card details. We do not see or store your full card number; we receive limited information such as your billing name, the last four digits of your card, and whether the payment succeeded.
Usage and technical data
When you use our website or software we collect technical data such as IP address, browser type, device information and pages visited. Please see our separate Cookie Policy for how this works on our website.
Support and correspondence
If you email us or contact support, we keep that correspondence and any information in it so that we can help you and keep a record.
4. How we use your data and our lawful bases
- To provide the service, manage your account and process CVs as instructed. Lawful basis: performance of a contract.
- To take payment and manage subscriptions. Lawful basis: performance of a contract.
- To respond to enquiries and arrange demonstration calls. Lawful basis: legitimate interests and steps taken at your request before entering a contract.
- To send service messages, for example billing or security notices. Lawful basis: performance of a contract and legitimate interests.
- To send you marketing about our product. Where you are a customer or have enquired about a similar product, we rely on our legitimate interests (the soft opt in rule). For other prospects we rely on your consent. Every marketing message includes an easy way to opt out, and you can opt out at any time by emailing us.
- To keep our service secure, prevent misuse and improve it. Lawful basis: legitimate interests.
- To meet legal and accounting obligations. Lawful basis: legal obligation.
5. Candidate data processed through the software
When a customer uploads a CV, our software reads the content, restructures it and applies the customer’s branded template. CVs can contain personal data about candidates, including contact details, work history and education. We process this data only to deliver the formatting service to the customer who uploaded it.
Formatted CVs, and the original files you upload, are stored in your account so that you and your team can access and download them again. They remain in your account until you delete them or close your account, after which they are removed.
We do not use candidate CVs for our own marketing, and we do not sell candidate data. Candidates who want to know how their data is held should contact the recruiter or agency that holds their CV, because that recruiter is the controller of that data.
Where the anonymisation feature is used for blind submissions, the software can remove identifying details from a CV before it is sent. This is carried out on the customer’s instruction.
6. Artificial intelligence and automated processing
Our software uses Anthropic’s AI service (the Claude API) to read, restructure and format the content of CVs. Under Anthropic’s commercial API terms, the content we send for processing is not used to train Anthropic’s models.
This processing is automated, but it produces a formatted document for a person to review and send; it does not make decisions that have legal or similarly significant effects on candidates. A person at the recruiting business reviews and chooses whether to use each formatted CV.
7. Who we share data with
We share personal data with trusted service providers who help us run our business. These act as our processors or sub processors and are bound by contract to protect the data. They include:
- Anthropic for the AI powered CV formatting feature.
- Stripe for subscription checkout and payment.
- Calendly for scheduling enquiry and demonstration calls.
- Our hosting and cloud infrastructure providers for running the website and software.
- Professional advisers and authorities where we are required to share data by law.
8. International transfers
Some of our providers, including Anthropic, are based in the United States, so your data may be processed outside the United Kingdom. Where this happens we make sure an appropriate safeguard is in place, such as the UK addendum to the standard contractual clauses or an adequacy decision, so that your data stays protected.
9. How long we keep data
We keep personal data only for as long as we need it. Account and billing records are kept for the life of your subscription and then for the period required by law, for example tax records are kept for six years. Enquiry data is kept for a reasonable period if you do not become a customer. Candidate CVs are stored in your account until you delete them or close your account, and are not kept longer than needed to provide the service.
10. How we protect your data
We use appropriate technical and organisational measures to keep personal data secure, including encryption in transit, access controls and restricting access to staff who need it. No system is completely secure, but we work to protect your information and to respond quickly if something goes wrong.
11. Your rights
Under UK data protection law you have the right to:
- Be informed about how we use your data.
- Access a copy of the personal data we hold about you.
- Have inaccurate data corrected.
- Have your data erased in certain circumstances.
- Restrict or object to how we use your data.
- Data portability, where it applies.
- Withdraw consent at any time, where we rely on consent.
To exercise any of these rights, email us at jess@gettheagency.co.uk. If your request relates to a candidate CV held by a recruiter, please contact that recruiter, as they are the controller.
12. Cookies
Our website uses cookies and similar technologies. Please see our Cookie Policy for full details of what we use and how to manage your choices.
13. Complaints
If you have a concern about how we handle your data, please contact us first at jess@gettheagency.co.uk. You also have the right to complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk.
14. Changes to this policy
We may update this policy from time to time. When we do, we will change the effective date at the top, and for significant changes we will give you reasonable notice.
15. Contact us
If you have any questions about this policy, contact us at jess@gettheagency.co.uk.