Last updated: 26th April 2026

At Psychology Careers ("Psychology Careers", "I", "me", or "my"), I am committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how I collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). This policy is governed by the laws of England and Wales.

1. Who I Am

Psychology Careers is operated by Melisa Eyuboglu, a sole trader based in the United Kingdom, providing career coaching and review services. I am the data controller responsible for your personal information.

If you have any questions about this policy, please contact me at:

📧 careers@mepsychologygroup.com

2. What Personal Data I Collect

I may collect and process the following categories of personal information:

  • Identity and contact data — name, email address, and phone number (where you choose to provide it, e.g. for booking confirmations or session reminders)

  • Communications data — emails, messages, and any correspondence you send me

  • Booking and service data — appointments, session history, and notes from coaching sessions

  • Career documents you submit — CVs, cover letters, personal statements, and any other documents shared as part of the service

  • Payment data — processed by Stripe; I do not store full card details myself

  • Website usage data — analytics data and information collected via cookies (see Section 9)

  • Social media handles — where you interact with Psychology Careers via social media or include them in submitted documents

  • Special category data (Article 9 UK GDPR) — career documents and coaching conversations may include references to your physical or mental health, ethnic origin, religious beliefs, sexual orientation, or other sensitive details. I process this data only with your explicit, separately documented consent (via a GDPR consent form) and only to the extent needed to deliver the service you have booked.

3. How I Use Your Data

I use your data to:

  • Provide and deliver services (e.g. coaching sessions, document reviews)

  • Process payments and confirm bookings

  • Communicate with you about your sessions, requests, or follow-up matters

  • Improve my services and website

  • Comply with legal obligations, including HMRC tax and accounting requirements

  • Send marketing communications only where you have given specific opt-in consent. Every marketing email contains an unsubscribe link, and you can withdraw consent at any time.

I will never sell your personal data, and I will not share it with third parties for their own marketing purposes.

I do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

4. Lawful Basis for Processing

I process your personal data on the following lawful bases under Article 6 (and, where applicable, Article 9) of the UK GDPR:

  • Contract — to deliver the services you have booked, process payments, and communicate about your sessions.

  • Consent — for example, when you submit a CV or career document for review, sign up to a marketing list, or share special category data. You may withdraw consent at any time (see Section 7).

  • Legal obligation — for record-keeping, accounting, and tax purposes.

  • Legitimate interests — limited business administration, service improvement, security, and the use of publicly posted testimonials. I have weighed these interests against your rights and consider the privacy impact minimal.

  • Explicit consent (Article 9) — where I process special category data, I obtain separate, explicit consent via a GDPR consent form before doing so.

5. How I Store and Protect Your Data

Your data is stored on reputable, security-vetted platforms with the following safeguards:

  • Multi-factor authentication on all accounts holding client data

  • Strong, unique passwords

  • Encrypted storage and encrypted transit (HTTPS / TLS) for files containing personal data

  • Full-disk encryption and screen-lock on devices used to access client data

  • Access is limited to me personally — no employees or contractors handle your data without your prior knowledge

I take reasonable, proportionate steps to protect your data from loss, misuse, and unauthorised access. In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, I will notify the ICO within 72 hours and inform you without undue delay where required by law.

Retention periods

I retain different categories of data for different periods:

Coaching/session notes and submitted documents (CVs, cover letters, etc.)

Up to 12 months after service completion, then deleted unless you ask for longer retention

Booking and contact records

Up to 12 months after final interaction

Financial and tax records (invoices, payment records)

6 years from the end of the relevant tax year, as required by HMRC

Marketing consent records

Until you withdraw consent, plus a short audit period

Website analytics data

As configured by the analytics provider

6. Testimonials and Reviews

I may display testimonials or reviews on my website or marketing materials. Where this occurs:

  • Reviews provided directly to me are used only with your consent.

  • Reviews you have publicly posted on external platforms (such as LinkedIn) may be quoted with attribution (your name and the platform). I rely on legitimate interests as the lawful basis, having considered that the content is already public, attribution is faithful to the original, and you can object at any time.

  • No reviews are edited in a way that misrepresents the original content.

  • You may request that your testimonial be removed at any time by emailing me, and I will action the request promptly.

7. Your Rights

Under UK GDPR, you have the right to:

  • Be informed about how I use your personal data (this policy)

  • Access the personal data I hold about you

  • Request correction of inaccurate or incomplete data

  • Request erasure ("right to be forgotten") in certain circumstances

  • Request restriction of processing

  • Object to processing, including direct marketing — where you object to direct marketing, I will stop without exception

  • Data portability — request a copy of data you've provided in a commonly used, machine-readable format

  • Withdraw consent at any time where I rely on consent (this will not affect the lawfulness of processing carried out before you withdrew consent)

  • Lodge a complaint with the Information Commissioner's Office (ICO): https://ico.org.uk/

To exercise your rights, please contact me at careers@mepsychologygroup.com. I will respond within one calendar month of receiving a verifiable request.

8. Third-Party Services and International Transfers

I use trusted third-party platforms to operate my business, including:

These platforms act as data processors on my behalf and are responsible for their own privacy compliance. Please refer to their individual privacy policies for details.

Some of these providers process data outside the UK. Your personal data may therefore be transferred to and processed in countries including the United States and the European Economic Area. Where this happens, transfers are protected by appropriate safeguards under UK GDPR — typically the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or a UK adequacy regulation.

9. Cookies

My website uses cookies and similar technologies. Under PECR, non-essential cookies (including analytics and marketing cookies) are only set after you give consent via the cookie banner on your first visit. The banner offers you the option to accept all, reject all, or manage your preferences. You can change or withdraw your preferences at any time using the cookie settings on the site.

10. Children's Data

My services are intended for adults aged 18 and over. I do not knowingly collect personal data from children below this age. If you believe a child has provided me with personal data, please contact me and I will delete it.

11. Changes to This Policy

I may update this Privacy Policy from time to time. The current version, with the date last updated, will always be available on this page. Where changes materially affect how I process your personal data, I will inform you directly where reasonably possible.

12. Contact

For questions or concerns about this policy, or to exercise any of your rights, contact:

📧 careers@mepsychologygroup.com

Privacy Policy