DuellaPEOPLE. POTENTIAL. OPPORTUNITIES.Back to home
This is a starting template, not a finished legal document — it hasn't been reviewed by a solicitor or a data protection specialist. Since Duella handles employment history and uploaded certificates, get this properly reviewed for UK GDPR compliance before relying on it with real users.

Privacy Policy

Last updated: 19 September 2026

1. What we collect

Account details (name, email, password); profile information you add (job title, location, bio, photo); career history, skills and qualifications, including any certificates you upload; messages and recognition submitted about you by others; and basic technical data needed to run the service (e.g. login sessions).

2. How we use it

To run your account and profile; to let employers discover and contact candidates who choose to be visible; to send verification-request links to people you name, and to notify you and employers about invitations and responses; and to improve the platform. We don't sell your personal data.

3. Who sees what

Your public profile content (name, job title, location, skills, verified counts) is visible to other signed-in users, and to employers via search, as the platform is designed to do. Some details — like your account email and certain preferences — are kept private to you unless you choose to share them. When you request verification of something, the person you name receives only the specific claim you're asking them to confirm, not your full profile.

4. Email

We send transactional emails related to your use of the platform — verification-request links, invitation notifications, and password resets. These aren't marketing emails and are sent because they're necessary to the service you've asked for.

5. Where data is stored

Data is stored with our infrastructure providers (currently Supabase for the database and file storage, and Resend for sending email). These providers may process data outside the UK/EEA under their own safeguards.

6. Your rights

Under UK GDPR you can ask to access, correct, or delete your personal data, and you can delete uploaded certificates or profile content yourself at any time from your dashboard. Contact us using the details provided on the platform to exercise these rights.

7. Retention

We keep your data while your account is active. If you delete your account, we remove your profile data within a reasonable period, except where we need to keep limited records for legal reasons.

8. Changes

We may update this policy as the platform develops, and will note the date above when we do.

See also our Terms of Service.