Legal
Privacy Policy
Last updated: 8 October 2026
Who we are
Career Designer is operated by Level Group Ltd, a company registered in England and Wales (company number 05538601), registered office 3 Warwick House, Wells Road, Malvern, England, WR14 4RP. Level Group Ltd is the data controller for the personal data described in this policy.
Questions about this policy or your data: info@dan-ford.com.
The short version
You write things in Career Designer that are personal. We treat that seriously. Nothing you write is shared with other users, sold, or used for advertising. Your content is used for one purpose: providing the service to you. You can ask us for a copy of everything you have written, or ask us to delete it, and we will do either within one month.
What we collect
Account data. Email address and a password (stored as a secure hash; we cannot read it). Your name if you choose to provide it.
Career content. What you write in the platform: assessment responses, exercise inputs, your profile, plans and drafts. This can include information about your values, personality, working preferences, career history and ambitions. You control what you enter.
Payment data. Payments are processed by Stripe. We receive confirmation of payment, the product purchased and the last four digits of your card. We never receive or store full card details. When you subscribe, we keep a record of your agreement to the terms of sale, with your IP address and browser user agent, as evidence of that agreement.
Technical data. IP address, browser and device type, and server logs generated when you use the service. Used for security, fault diagnosis and keeping the service running.
Correspondence. Emails you send us.
What we do with it
| Purpose | Data used | Lawful basis |
|---|---|---|
| Providing the service, including generating AI-assisted content from your inputs | Account data, career content | Performance of a contract |
| Taking payment and managing subscriptions | Account and payment data | Performance of a contract |
| Sending your assessment report when you request it | Email address, assessment responses | Performance of a contract (at your request) |
| Sending occasional articles, only if you opt in | Email address | Consent, withdrawable at any time via the unsubscribe link |
| Security, fraud prevention and service integrity | Technical data | Legitimate interests |
| Complying with law, including tax and accounting | Payment records | Legal obligation |
We do not use your data for advertising, we do not sell it, and we do not build profiles of you for any purpose other than the profile you build yourself inside the product.
Coaching clients
If your access is included in a Dan Ford Coaching package, your coach does not have access to your Career Designer account or content. Anything you choose to share in a coaching session is shared by you, on your terms.
AI processing
Career Designer uses an AI model provided by Anthropic to generate content from your inputs, for example synthesising your profile narrative or drafting text for you to edit. Your relevant content is sent to Anthropic's API for this purpose only. Under Anthropic's commercial API terms, data submitted this way is not used to train their models. We do not use your content to train any model of our own.
Career Designer also includes an in-app assistant. So that it can answer questions about your work without you pasting anything in, it reads your Career Profile in full, together with the records you have created in the tools, and it can make changes to them when you ask it to. That happens by default whenever the assistant is open. Your conversations with it are stored against your account so you can return to them. If you would rather it did not read something, do not put that thing in Career Designer, and write to us if you want a conversation removed.
Who we share data with
Only service providers who process data on our instructions under contract:
| Provider | Role | Location |
|---|---|---|
| Supabase | Database, authentication and application functions | EU/US |
| Anthropic | AI processing as described in section 6 | US |
| Stripe | Payment processing | US/EU |
| Vercel | Website hosting | US/EU |
| Railway | Application services | US |
| Google (Google Workspace) | Business email and correspondence | US/EU |
| Cloudflare | Bot protection on sign-in, sign-up, password reset and checkout. It receives your IP address and signals from your browser, to confirm a person is making the request | Global |
| Resend | Sending our emails, such as assessment reports, purchase confirmations and account codes. It receives your email address, your first name where you gave it, and the email itself | US |
| Sentry | Error monitoring. It receives technical details of an error, such as the page address and your browser and device type. Request contents and assessment report links are removed before anything is sent | EU (Germany) |
| Unsplash | Image search for the vision board. It receives the search words you enter, and your browser loads the images you choose from Unsplash | US |
| Tavily | Web search for the in-app assistant. It receives the search queries the assistant writes, which it is instructed to keep to companies, roles and industries and not to fill with your personal details | US |
We may also disclose data where the law requires it, or as part of a sale or reorganisation of the business, in which case this policy would continue to apply to your data.
International transfers
Some providers process data outside the UK, principally in the United States. Where they do, transfers are protected by UK-approved safeguards: the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or the UK International Data Transfer Addendum to standard contractual clauses.
How long we keep it
- Your account and content: for as long as your account exists. When you delete your account, your content is deleted from live systems within 30 days and from backups within 90 days.
- Assessment results linked only to an email address: deleted 12 months after you completed the assessment, whether or not you asked to hear from us.
- Payment and tax records: 6 years, as UK law requires.
- Server logs: up to 12 months.
Your rights
Under UK data protection law you can ask us to: provide a copy of your data; correct it; delete it; restrict or object to processing; provide it in a portable format; and you can withdraw consent at any time where consent is the basis. These are handled by our team on request rather than by a button in the product, and the address below is the way to ask.
To exercise any right, email info@dan-ford.com. We respond within one month. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, though we would welcome the chance to resolve any concern first.
Security
Data is encrypted in transit and at rest. Access to production systems is restricted and logged. Passwords are hashed. No system is perfectly secure, but if a breach ever affects your data we will tell you and the ICO as the law requires.
Age
Career Designer is for adults. We do not knowingly collect data from anyone under 18.
Changes
If this policy changes materially we will tell account holders by email before the change takes effect. The current version is always at this page, with its date above.