Legal
Privacy notice
Last updated September 2026
GetMyCv (“we”) writes CVs and builds portfolio websites. To do that we need some personal information about you. This notice explains exactly what we collect, why, how long we keep it and what you can ask us to do with it. It is written to meet Sri Lanka’s Personal Data Protection Act No. 9 of 2022.
Who is responsible
GetMyCv is the controller of the data described here. You can reach us at hello@getmycv.lk or on WhatsApp.
What we collect
- Order details — the package and add-ons you choose and the total price.
- Contact details — your name, email address, phone or WhatsApp number and your city or country.
- Career information — your target role, industry, years of experience and any notes you write.
- Files you upload — your current CV, certificates or a photograph, if you choose to send them.
- Consent record — the fact that you ticked the consent box and the time you did it.
We use a cookieless, privacy-friendly analytics tool that counts page views without tracking you across sites. It sets no cookies and does not build a profile of you.
Why we collect it
- To write your CV, cover letter, LinkedIn profile or portfolio website.
- To contact you about your order, drafts and revisions.
- To confirm your payment against your order reference.
- To keep basic business records, as the law requires.
Our legal basis is your consent, given when you place an order, together with the performance of the contract between us. You can withdraw consent at any time; we will then stop processing and delete what we no longer need to keep.
How long we keep it
- Uploaded files are deleted 90 days after your order is delivered.
- The finished documents we produce for you are kept for 12 months so we can resend them if you lose them, then deleted.
- Order and payment records are kept for as long as accounting rules require, then deleted.
Who else sees it
We do not sell your data and we never publish your CV, your name or your portfolio without asking you first. We use a small number of service providers to run the business: a form and email service that delivers your order to our inbox, our email provider, Stripe if you pay by card, and WhatsApp if you choose to message us there. They process data on our instructions only. Card details are entered on Stripe’s own page and never reach us.
Your rights
- Ask for a copy of the data we hold about you.
- Ask us to correct anything that is wrong.
- Ask us to delete your data, including uploaded files, at any time.
- Withdraw your consent, which stops any further processing.
- Complain to Sri Lanka’s Data Protection Authority if you think we got it wrong.
Email hello@getmycv.lk with your order reference and we will act within 30 days.
Security
Your order is sent over an encrypted connection and delivered to an inbox only we can read. This website stores nothing about you itself: it has no database of its own and no way to read back an order once it has been sent. Files you send us by WhatsApp are stored on our own devices and deleted on the schedule above.
Changes
If we change this notice we will update the date at the top. Material changes that affect orders already placed will be emailed to you.

