UK GDPR

Last updated: 26 July 2026

Operator: Change Enablers Ltd, company number 07437984

Overview

This page explains how Opportyx supports rights under the UK General Data Protection Regulation and the Data Protection Act 2018. It should be read with our Privacy Policy.

Change Enablers Ltd is responsible for handling GDPR requests for Opportyx. Contact support@opportyx.com from the email address linked to your account where possible.

Individual Rights

Subject to legal conditions and exemptions, you may exercise the following rights:

Right of access: request confirmation of whether we process your personal data and receive a copy of that data.
Right to rectification: ask us to correct inaccurate or incomplete data.
Right to erasure: ask us to delete personal data where there is no lawful reason for continued processing.
Right to restrict processing: ask us to limit how data is used in certain circumstances.
Right to object: object to processing based on legitimate interests or direct marketing.
Right to portability: request certain data in a structured, commonly used, machine-readable format.
Right to withdraw consent: withdraw consent where processing is based on consent.
Right to complain: complain to the Information Commissioner's Office.

We may need to verify identity and account ownership before responding. We will normally respond within one month unless the request is complex or numerous, in which case UK GDPR allows an extension.

Data Retention

Opportyx applies the following retention approach:

Active accounts: profile data, CVs, generated documents, applications, interview data, and account data are retained while the account remains active.
Deleted accounts: user data is retained for 30 days after account deletion before permanent deletion, except where legal obligations require retention.
Financial records: payment, credit purchase, refund, tax, and accounting records may be retained for 6 years where required by UK law.
Security logs: logs should be retained for a configurable period appropriate to risk, security monitoring, incident investigation, and legal obligations. A practical starting point is 90 to 180 days unless a longer period is needed for security or compliance.

Account Deletion

You may request account deletion by contacting support@opportyx.com. We may ask you to verify your identity before actioning the request.

When deletion is initiated, the account enters a 30-day deletion period. During that period, recovery may be possible if you contact support. After 30 days, personal data is permanently deleted from active systems except where retention is required for legal, accounting, tax, fraud-prevention, dispute, or security reasons.

Backups and logs may take longer to cycle out, but they will be protected and not used for ordinary product purposes after deletion.

Data Export

Opportyx is designed with a future Data Export feature in mind. The intended export should allow users to download:

profile information;
employment history;
education history;
skills, certifications, and tools;
generated CVs, cover letters, and other documents; and
job applications and application history.

Preferred export formats are JSON for structured data and PDF for readable reports or generated documents. Until the self-service export is available, contact support to request an export.

Right to Complain to the ICO

If you are unhappy with how we handle your data or a rights request, you can contact the Information Commissioner's Office, the UK data protection regulator. Visit ico.org.uk for current contact details and guidance.

Contact

GDPR contact: support@opportyx.com

Change Enablers Ltd
16 Verdayne Gardens
Warlingham
CR6 9RN
England