Privacy Policy

Last updated: 30 April 2026

1. Who we are

BUKZ Accounting Ltd ("BUKZ", "we", "us") is the data controller for personal data processed through the BUKZ platform. We are registered in England and Wales. Contact: privacy@bukzaccounting.co.uk.

2. Data we collect

  • Account data: name, email address, role, and authentication credentials.
  • Profile data: professional headline, CV, qualifications, location, and skills you provide.
  • Usage data: pages visited, features used, course progress, and job applications.
  • Payment data: billing information processed securely by Stripe. We do not store card numbers.
  • Communications: messages and support enquiries you send us.

3. How we use your data

  • Providing and improving the Service (lawful basis: contract performance).
  • Sending transactional emails such as application confirmations (lawful basis: contract performance).
  • Analytics to understand usage patterns (lawful basis: legitimate interests).
  • Marketing communications with your consent (lawful basis: consent).
  • Compliance with legal obligations (lawful basis: legal obligation).

4. Cookies and tracking

We use essential cookies for authentication and analytics cookies (PostHog) with your consent. You can manage cookie preferences via the cookie banner. See our Cookie Policy for full details.

5. Data sharing

We share data with: Supabase (database and auth), Stripe (payments), AWS S3 (file storage), Resend (email delivery), Algolia (search), PostHog (analytics), and Sentry (error monitoring). All processors are bound by data processing agreements. We do not sell your personal data.

When you apply for a job, your CV and application data are shared with the relevant employer.

6. Data retention

We retain account data for as long as your account is active and for 7 years after closure for legal compliance. Application data is retained for 2 years. You may request deletion at any time.

7. Your rights (UK GDPR)

  • Right to access your personal data.
  • Right to rectification of inaccurate data.
  • Right to erasure ("right to be forgotten").
  • Right to restriction of processing.
  • Right to data portability.
  • Right to object to processing based on legitimate interests.
  • Right to withdraw consent at any time.

To exercise any right, email privacy@bukzaccounting.co.uk. You may also lodge a complaint with the ICO at ico.org.uk.

8. International transfers

Some of our service providers process data outside the UK/EEA. We ensure adequate safeguards are in place, including UK adequacy decisions and Standard Contractual Clauses.

9. Changes to this policy

We will notify you of material changes by email or in-app notice. Continued use of the Service after changes constitutes acceptance.