MyLifeCV
Menu
How it works Features Pricing FAQ Find someone Sign in Claim your page
Legal

Privacy Policy

Last updated: Sunday 05 July 2026

1. Who we are

MyLifeCV ("we", "us", "our") operates the website mylifecv.co.uk, a service that lets you build and optionally publish a public timeline of your life. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it.

MyLifeCV is the data controller for the personal data described in this policy. If you have any questions about it, contact us using the details in the "Contact us" section below.

2. The data we collect

Account information

When you create an account we collect your name, email address, chosen page address (your "slug") and a password. Your password is stored in hashed form and we never see it in plain text.

Timeline content

Everything you add to your timeline — dates, life events, descriptions, photos, links and press mentions — is content you choose to provide. Because MyLifeCV is a life-story service, this content may include information about your health, family, relationships, beliefs or other personal matters. You decide what to include, and nothing is visible to anyone else until you publish.

Payment information

Payments are processed by Stripe. We never receive or store your full card details. We keep records of your subscription status, plan and payment history so we can operate your account.

Usage and technical data

Like most websites we collect technical data when you visit: IP address, browser type, device information, pages visited and approximate location. This helps us keep the service secure and understand how it is being used.

3. How we use your data

  • To provide the service — creating your account, storing your timeline, rendering your public page if you publish, and processing payments.
  • To communicate with you — service emails such as account confirmation, payment receipts, renewal reminders and important changes to the service.
  • To keep the service secure — detecting fraud, abuse and unauthorised access.
  • To improve the service — understanding how the site is used so we can make it better.
  • To meet legal obligations — including tax, accounting and lawful requests from authorities.

Lawful bases

Under UK GDPR we rely on: contract (providing the service you signed up for), legitimate interests (security, fraud prevention and service improvement), consent (non-essential cookies and, where applicable, any special category data you choose to include in your timeline), and legal obligation (tax and accounting records).

4. Public profiles — read this bit

When you publish your profile, it becomes a public web page. It is deliberately built to be indexed by search engines, including Google, so that it appears when someone searches your name. Anyone on the internet can view it. Do not publish anything you would not want to be publicly and permanently visible.

You can unpublish your profile at any time and your page comes down straight away. However, search engines and third parties may retain cached or archived copies of previously public pages, and we cannot control those copies. Unpublishing removes the page from our servers; it cannot guarantee removal from the wider internet.

You are responsible for the content you publish, including any information it contains about other people. If you name other living people on your public timeline, make sure you are comfortable doing so and, where appropriate, have their agreement.

5. Who we share your data with

We do not sell your personal data. We share it only with service providers who help us run MyLifeCV:

  • Hosting and infrastructure — our platform runs on Google Cloud / Firebase, which stores account data, timeline content and uploaded images.
  • Payments — Stripe processes card payments on our behalf.
  • Email — transactional email providers deliver service emails such as receipts and account notifications.

Each provider processes data only on our instructions and under contracts that meet UK GDPR requirements. We may also disclose data where required by law, or as part of a business sale or restructuring, in which case this policy would continue to apply.

6. International transfers

Some of our providers store or process data outside the UK, including in the United States. Where that happens, transfers are protected by appropriate safeguards such as the UK International Data Transfer Agreement, UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

7. Cookies

We use essential cookies to keep you signed in and keep the service secure. With your consent, we may also use analytics cookies to understand how the site is used. You can accept or decline non-essential cookies using the cookie banner, and change your choice at any time through your browser settings.

8. How long we keep your data

  • Account and timeline data — kept while your account is active. If you delete your account, your profile and timeline are deleted from our live systems, with residual copies removed from backups within a reasonable period.
  • Payment records — kept for six years to meet UK tax and accounting obligations.
  • Technical logs — kept for a short period for security purposes, then deleted or anonymised.

9. Memorial and legacy profiles

Profiles can be placed into legacy mode after the account holder passes away, preserving the timeline as a memorial managed by a family member. UK GDPR does not apply to the personal data of deceased persons, but we handle memorial profiles with care and will consider reasonable requests from verified family members to amend or remove a memorial page.

10. Your rights

Under UK GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure — ask us to delete your data ("right to be forgotten").
  • Restriction — ask us to limit how we use your data.
  • Portability — receive your data in a machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us using the details below. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have mishandled your data.

11. Children

MyLifeCV is not intended for anyone under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.

12. Security

We protect your data with industry-standard measures including encryption in transit, hashed passwords, access controls and security rules on our databases. No online service can be completely secure, but we take the protection of your data seriously and review our safeguards regularly.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows when it last changed. If we make significant changes, we will notify you by email or with a notice on the site before they take effect.

14. Contact us

For any questions about this policy or your personal data, email us at privacy@mylifecv.co.uk.

© 2026 MyLifeCV. All rights reserved.
Privacy Terms Contact