Effective date: 11th April 2026

Overview

The Creative CV Hub Limited (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you interact with us, including through our website, forms, email, phone, and any services we provide (together, our “Services”).

We aim to comply with the Privacy Act 2020 (New Zealand) and the Information Privacy Principles.

 

What personal information do we collect

The personal information we collect depends on the service you choose and what you provide.  It may include:

Identity and contact details

• Full name, email address, phone number, and (if provided) address/location

 

Career and employment information

• Employment history, job titles, responsibilities, achievements
• Education, qualifications, licences/certifications
• Skills, systems/tools, role preferences, and career goals
• Referee details (names/contact details) if you provide them
• Links to online profiles (e.g., LinkedIn)

 

Documents and service information

• Files you upload or share (e.g., CVs, cover letters, job ads, position descriptions)
• Drafts, notes, and versions created during the service

 

Payments

• Payment confirmations, invoicing details, and receipts
• We do not intentionally store full card details. Payments are processed by our payment provider(s).

 

Website/technical information

• IP address, device/browser information, cookie data, and website usage data collected through website analytics (see section 11)

 

Sensitive information: We don’t usually need sensitive information (e.g., health information). If you choose to include it in your documents, we will only use it for the purpose you shared it for and will handle it carefully.

 

How we collect personal information

We collect personal information when you:

• Fill out a form on our website (WordPress) or submit information to us
• Upload documents or email them to us
• Communicate with us (email, phone, messages)
• Purchase services through Stripe
• Use our website (cookies/analytics may apply)

 

Where practical, we collect personal information directly from you. If you provide personal information about another person, such as a referee, you confirm that you are authorised to share that information with us and that the person has been made aware that their information may be used as part of the Services you request.

 

Why we collect and use personal information

We collect and use personal information to:

• Provide our Services (CVs, cover letters, application support, coaching preparation)
• Communicate with you and deliver your documents
• Process payments and issue invoices/receipts
• Maintain business records and manage operations
• Improve our Services and templates
• Meet legal obligations (e.g., record-keeping and tax requirements)

 

We will not use your personal information for unrelated purposes unless permitted or required by law, or with your consent.

 

Sharing and disclosure of personal information

We may share personal information where reasonably necessary to provide our Services, including with trusted service providers who support our operations.

Our key service providers

Depending on what you use and what you provide, your information may be handled through:

• WordPress (website platform and plugins): website forms, customer enquiries, and website analytics
• Stripe (payments): payment processing, receipts, fraud prevention
• Make / Make AI (automation/workflows): automations that route form responses, generate outputs, and move documents between systems
• Google Drive (storage/collaboration): storing client documents, drafts, and final files
• Microsoft OneDrive (storage/collaboration): storing client documents, drafts, and final files

 

We take reasonable steps to ensure providers only process information for the services they deliver to us and protect it appropriately.

Legal disclosures

We may disclose personal information where we are required or permitted by law, including:

• To comply with legal obligations or lawful requests
• To help investigate suspected unlawful activity
• To prevent or lessen a serious threat to life, health, or safety

 

AI tools

We use AI tools (including OpenAI, accessed via Make) to help deliver our Services. Some of this processing may take place outside New Zealand. We take reasonable steps to ensure your information is handled in line with New Zealand privacy standards.

 

Overseas storage and disclosure

Some of our service providers (including Google, Microsoft, Stripe, WordPress hosting/providers and Make) may store or process information outside New Zealand.

If personal information is transferred or accessed from overseas, we will take reasonable steps to ensure it is protected in a way that is comparable to New Zealand privacy standards and that the disclosure is permitted under New Zealand privacy law.

 

Storage and security

We take reasonable steps to protect personal information from unauthorised access, loss, misuse, or alteration.

Personal information may be stored electronically using secure cloud platforms (including Google Drive and OneDrive). We use access controls such as passwords, limited access on a need-to-know basis, and security settings available within those platforms.
No online system is perfect, but we take reasonable steps to keep your information secure.

 

Retention (how long we keep information)

We keep personal information only for as long as necessary for the purposes it was collected, including to deliver our Services and meet legal and business record requirements.

Client files and service information 


We generally keep client documents (including drafts and final versions), intake form responses, and related service notes for 6 months after delivery. This allows us to support reasonable follow-up requests such as re-sending files or minor updates.

After 6 months, we will delete, de-identify, or securely destroy this information unless you ask us to keep it longer, we are required to retain it for legal, tax, or accounting reasons, or the information remains in secure backup systems for a limited period as part of routine backup processes.

Invoices and payment records 


We keep invoicing and payment records for longer where required for accounting and tax purposes.

 

Access and correction

You can request access to the personal information we hold about you and request corrections if you believe it is inaccurate.

How to request access or correction

• Email: info@thecreativecvhub.co.nz
• Subject line: “Privacy Request”
• We may request identity verification before releasing information.

 

We will respond as soon as reasonably practicable and generally within 20 working days. If we need more time, we will let you know and explain why.

In limited situations, we may refuse access or correction where permitted by law (for example, where releasing information would unreasonably impact another person’s privacy). If we refuse, we will explain the reason.

 

Cookies and WordPress analytics

Our WordPress website uses cookies and similar technologies and may use WordPress analytics to help us:

• understand website traffic and usage (e.g., pages visited, time on site, referring pages)
• improve website performance and user experience
• maintain website security and functionality

 

Technical information collected through website analytics may include IP address, device/browser type, and cookie identifiers.

You can usually disable cookies through your browser settings, but parts of the website may not work as intended.

 

Privacy breaches

If we experience a privacy breach that has caused, or is likely to cause, serious harm, we will take steps to reduce the risk and will notify affected individuals and the Office of the Privacy Commissioner as required.

 

Complaints and contact details

If you have concerns about how we’ve handled your personal information, please contact us, and we’ll work to resolve it.

Privacy contact

• Role: Director / Privacy Officer
• Email: info@thecreativecvhub.co.nz

 

If you are not satisfied with our response, you can also contact the Office of the Privacy Commissioner (NZ).

 

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be published on our website with the updated effective date.