PRIVACY
POLICY.

CHOOSETO LEARN LTD, registered in England and Wales, is the data controller responsible for your personal data on chooseto.ai and chooseto.co. You can reach us at privacy@chooseto.ai.

Account details: name, email, password (hashed), and any social profile we sign you in with (Google, Apple, Microsoft, GitHub).

Booking details: name, email, phone (if you give it), the events you've booked or registered interest in, and the price you paid.

Payment details: handled directly by Stripe. We never see your full card number; we only see the last four digits and the payment intent id.

Profile details: your occupation, company, short bio, mobile number (if you add it), and the reason you give when you apply to attend an event.

Job application details: your CV, name, phone number, location, LinkedIn address, current job title and employer, and your answers to whatever a role asks (such as your right to work). We also keep the notes we write while assessing you, and a record of when you agreed to our terms.

Ask Choosy career plans: the answers you give (the role you want, where you are now, your age bracket if you give it, your experience with AI, your education, roughly where you are and the hours you can give it), anything you write about what you want from AI, which CV you chose for Choosy to read, and the plan we write for you.

Pitches and enquiries: anything you write into a host pitch, an on-demand enquiry, or a hiring enquiry if you are a company asking us to recruit for you — your name, work email, company, and what you are hiring for.

Technical: IP address, browser, and device type, used for security and analytics. We log sign-in events for fraud detection.

We process data under three lawful bases:

Contract: to book your tickets, take payment, process your application to attend, and let you in at the door.

Legitimate interests: to run the site, prevent fraud, send essential service emails (order confirmations, refund notices, password resets), and improve what we do.

Consent: for optional things like the welcome email, newsletter, marketing, and non-essential cookies. You can withdraw consent at any time.

Account data: for as long as your account is active, plus 30 days after you close it.

Booking and payment records: six years from the date of the event, because UK tax law makes us.

Job applications, CVs and video introductions: two years from your last activity on an application, so we can answer questions about a decision and consider you for later roles if you asked us to. Ask us sooner and we will delete them, video included.

Ask Choosy career plans: for as long as your account is active, so you can come back to them. Ask us and we will delete them sooner. A CV you upload for Choosy is kept in your CV library under the rule for CVs above.

Employer enquiries: two years from your last contact with us, then deleted unless you are still a client.

Technical logs: 90 days, then deleted or anonymised.

Pitches and enquiries: two years, then deleted unless we're actively working with you.

Employers, when you apply for a role and we put you forward — see "Job applications" for exactly what they receive and when.

A small set of trusted processors, each bound by data-processing agreements:

Stripe: payments and refunds.
Resend: transactional email.
Bunny CDN: image and video hosting.
DigitalOcean: running the site itself, and storing CVs, documents and video introductions on private storage.
OpenAI: assessing job applications against a role's written criteria, and suggesting how to file a role or a talent profile. Where we send an application, we send the text of your CV and your answers. It also writes your Ask Choosy career plan: we send your answers except your age bracket, anything you write about what you want from AI, and the text of the CV you chose, with names, email addresses, phone numbers, postcodes and links taken out first.
Twilio: sending text messages, such as an interview time or a link to record a video introduction.
Google Analytics / Google LLC: site analytics, only if you accept analytics cookies.
Meta Platforms: measuring our Facebook and Instagram ads, only if you accept marketing cookies.
YouTube / Google LLC: the embedded video player, which only loads when you press play on a clip. We are not affiliated with them, and what they collect at that point is governed by Google's own privacy policy.

Event hosts and partners. Many events are run together with a host or partner: the talent, organiser, or company putting the event on. When you apply for, register interest in, or buy a ticket to one of their events, we share the details relevant to that event with the host so they can review applications, decide who attends, contact you about it, and run it on the day. Depending on the event, that can include your name, email, phone number (if you've added one), and anything you submit when applying, such as your occupation, company, short bio, and your reason for wanting to be there. By using the site and applying for or booking these events, you agree to this sharing. Hosts may only use what we share to run that specific event and to contact you about it; they're not permitted to use it for their own unrelated marketing, and we require them to handle your data in line with this policy and the law.

We never sell, rent, or trade your data, and we never hand it to advertising networks or to unrelated third parties for their own marketing.

Applying for a role through CHOOSETO works differently from booking an event.

What we collect: the details you enter on the application form, your CV, your answers to the questions that role asks, and a record of how you reached the advert.

Lawful basis: we process this to take steps at your request before entering a contract, and in our legitimate interest in running a recruitment service.

Who sees it: CHOOSETO, and the employer once we put you forward. At that point they receive your CV, your application and our written assessment of you, and your status page says so. If you choose to keep your profile for suitable future roles, we may also send your CV to employers for other highly relevant roles; switch that off at any time and we stop. We never sell your CV, and we never publish it.

What we write about you: we keep internal notes, and a record of what we said to the employer and to you.

How we use AI, and where it stops: every role has a written set of criteria. An AI model reads your application against those criteria and proposes a score and a short note for each one, with the line from your application it is relying on. It advises; it never decides. A person reads your application and the model's reading of it, scores it themselves, and makes every call at every stage. Nothing is accepted or rejected automatically, and no offer, rejection or introduction happens without a person. To do this we send the text of your CV and your answers to OpenAI, which does not use them to train its models. You can ask us for what the model said about you, and you can ask for a decision to be looked at again by a different person. A role may require a particular answer — most often the right to work in the UK — and where it does, the form says so before you submit.

Text messages: if you give us a mobile number we may text you about your application — an interview time, or a link to record a video introduction. Tell us to stop and we will use email instead.

Video introductions: at some stages we may ask you to record a short video on your phone, through a private link that expires. We only record while you press record, you can watch it back before sending, and it is stored privately with your application. Only CHOOSETO watches it, and the employer if we put you forward. It is never published.

Your CV: stored privately, never on a public address, and reachable only through a signed, expiring link after you or an administrator has signed in.

Withdrawing: you can withdraw any application yourself, at any time, from its status page. We stop, and the employer is told nothing beyond the fact that you withdrew.

Ask Choosy writes you a plan for getting into an AI role. You need an account to use it, because the plan is kept for you to come back to.

What we collect: your answers, including your age bracket if you choose to give it (never your exact age), anything you choose to write about what you want from AI, and, if you choose one, the CV you want Choosy to read. You can upload a CV there or pick one already in your CV library. All of it is optional apart from the role and where you are now.

What it is used for: only to write your plan. The plan, your answers and what you write about your aims are private to you. They are never shared with employers or any other company, and they are not used when you apply for a role.

How the AI is used: we send your answers (but not your age bracket), your aims and the text of your CV to OpenAI, which writes the plan on our behalf and does not use it to train its models. Before anything is sent we take out names, email addresses, phone numbers, postcodes and links. The plan only uses skills, clips, workshops and roles from our own site.

Your CV: a CV you upload for Choosy is kept privately in your CV library, the same place as CVs for job applications. It only reaches an employer if you choose it when you apply for a role, as described under "Job applications". You can replace or remove it from your CV library, or ask us to delete it.

Sharing your plan: you can share a link to your plan with anybody you choose, and they can read it without an account. They see the plan and your first name, never your CV, your answers, your age bracket or what you wrote about your aims. The link is long and random so it cannot be guessed, and it stops working the moment you choose Stop sharing.

Lawful basis: we process this to provide the service you asked for.

Some processors are based outside the UK and EEA (e.g. Stripe in the US). Where this happens, we rely on UK Adequacy Regulations or the International Data Transfer Agreement / Standard Contractual Clauses to make sure your data is protected to UK GDPR standards.

Under UK GDPR you have the right to:

Access: get a copy of the personal data we hold about you.
Rectification: correct anything inaccurate.
Erasure: ask us to delete your data ("right to be forgotten") subject to legal retention.
Restrict processing: ask us to pause certain uses.
Portability: receive your data in a machine-readable format.
Object: to processing based on legitimate interests.
Withdraw consent: for anything you opted into.
Complain: to the Information Commissioner's Office (ICO).

To exercise any right, email privacy@chooseto.ai. We respond within one month.

We keep cookies to a minimum. Necessary cookies (session, CSRF token, cookie-consent state) run by default. Analytics (Google Analytics) and marketing (Meta Pixel) only run if you opt in, and their scripts are not loaded until you do. You can change your choice any time with Cookie settings at the foot of any page. Every cookie is listed in our cookie policy.

We send service emails (bookings, refunds, password resets, account changes) under the contract / legitimate interests bases. Anything else (newsletter, suggestions, programme drops) only goes out if you've opted in. Every marketing email has a one-click unsubscribe; opting out won't affect service emails.

Our service is for adults. We don't knowingly collect data about anyone under 18 without parental consent. If you think a child has provided data, email privacy@chooseto.ai and we'll delete it.

Data is encrypted in transit (TLS) and at rest where supported by the underlying service. Passwords are hashed with bcrypt. Production access is restricted, audited, and uses MFA. If we ever have a breach affecting your data, we'll notify the ICO within 72 hours and you as soon as practical.

We update this page from time to time. The "last updated" date at the top tells you when. Material changes will be flagged in the cookie banner and emailed to active account holders.

Anything privacy-related: privacy@chooseto.ai. For everything else: hello@chooseto.ai.