Pathler Ltd
Privacy Policy
Last updated: May 2026
1. Who We Are
Pathler Ltd is a company registered in England and Wales. We operate the website at pathler.co.uk, a career guidance and job application support service.
If you have any questions about this policy or how we handle your data, please contact us at matt@pathler.co.uk.
2. What Data We Collect
Depending on how you use Pathler, we may collect the following personal information:
- Name — when you create an account or sign up to our waitlist
- Email address — to create your account, send you updates, or add you to our waitlist
- CV and career information — documents or details you upload or enter to use our career guidance features
- Job preferences and career goals — answers to questions you complete within the platform
- Account login information — if you choose to register for an account
You can use certain parts of Pathler without creating an account. If you choose not to register, we will only collect data necessary for the basic functionality you use.
3. How We Use Your Data
We use your personal data to:
- Provide our career guidance and job application support services
- Create and manage your account (if you register)
- Send you updates or information you have requested
- Improve and develop the Pathler platform
- Comply with our legal obligations
We do not use your data for automated decision-making that produces legal or similarly significant effects without your knowledge.
4. Our Legal Basis for Processing Your Data
Under UK GDPR, we process your data on the following legal bases:
- Contract — to provide the service you have signed up for
- Legitimate interests — to improve our platform and communicate with users about relevant updates
- Consent — where you have explicitly agreed, such as signing up to our waitlist or marketing emails
5. CV and Career Information — Special Notice
We treat CV data and detailed career information with particular care. This data may contain sensitive details about your employment history, qualifications, and personal circumstances.
- We store this data securely and limit access to it strictly
- We do not share your CV or career information with any third party without your explicit consent
- You can request deletion of this data at any time (see Section 9)
- We do not use your CV or career data to make automated decisions about you
7. Third Party Services
7.1 Overview
Pathler is built and operated by Pathler Ltd. We use trusted third party providers to host the website, authenticate users, store account data, and (where you follow external links) to point you to learning resources on other sites. This section explains who those providers are and what they do.
We do not sell your personal data to any third party.
7.2 Supabase (authentication and database)
We use Supabase (Supabase, Inc.) as our backend platform. Supabase provides:
- User authentication — sign-up, sign-in, password reset, and session management
- A PostgreSQL database that stores your profile, saved roles, and interview answers
- Security features such as row-level access controls on your data
When you create an account or use signed-in features, personal data you provide (such as your email address, profile details, saved roles, and interview notes) is stored in Supabase. Supabase also sets essential cookies or similar storage on your device so you can remain logged in.
Account-related emails (for example email confirmation or password reset, depending on your account settings) are sent through Supabase’s authentication service.
Supabase may process data in the United States and other countries. We rely on appropriate safeguards for international transfers as required by UK GDPR. See Supabase’s privacy documentation for how they handle data as a processor.
7.3 Website hosting
The Pathler website (at pathler.co.uk) is hosted on infrastructure operated by our hosting provider so that pages load quickly and securely. The host processes technical data needed to deliver the site, such as your IP address, browser type, request time, and pages requested. This is standard for any website and is used for security, reliability, and troubleshooting.
Hosting access logs are kept for a limited period for operational and security purposes, not for profiling you for marketing.
7.4 Fonts and site software
The site uses the Plus Jakarta Sans typeface, loaded through Next.js in a way that serves font files from our own domain when you visit (rather than requiring your browser to download fonts directly from Google on each page view).
Pathler is built with open-source software including Next.js and React. We do not share your personal data with those projects; they are libraries used to run the site on our servers.
7.6 External websites and optional profile images
Many pages on Pathler link to third party websites — for example professional bodies, course providers, regulators, and employers listed in our Resources and Terminology sections. Those sites are run by other organisations. We do not control them and are not responsible for their privacy practices. We encourage you to read their policies before signing up or submitting data to them.
If you add a profile picture URL, it must be an HTTPS link from a supported host (such as GitHub, Gravatar, Google profile photos, or your Supabase storage bucket). Your browser loads that image from the third party when your profile is displayed. We do not upload those images to our database unless we introduce dedicated storage in future.
7.7 What we do not currently use
Based on how Pathler works today:
- We do not use payment processors — the Service is free
- We do not send your CV, profile, or interview answers to third-party AI APIs to generate responses for you in the live product
- We do not run advertising networks or sell your data to advertisers
- We do not use social login (sign in with Google, Apple, etc.) — only email and password via Supabase
If we add new integrations (for example payments, cloud file storage for CVs, or analytics), we will update this policy before or when they go live.
8. How Long We Keep Your Data
We keep your personal data only for as long as necessary:
- Account data — for as long as your account is active, plus a reasonable period afterwards in case you return
- CV and career information — until you delete it or request its removal
- Waitlist email addresses — until the service launches or you unsubscribe
- Legal and financial records — as required by law (typically 6 years)
9. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate data
- Delete your data (the "right to be forgotten")
- Restrict how we process your data
- Object to our processing of your data
- Data portability — receive your data in a commonly used format
- Withdraw consent at any time where processing is based on consent
You can delete your account and the personal data we hold about you at any time from Account settings on Pathler by using "Delete my account". This permanently removes your authentication account, profile, saved roles, and interview answers from our systems.
You can also exercise any of these rights by emailing matt@pathler.co.uk. We will respond within 30 days.
10. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no internet transmission is completely secure and we cannot guarantee absolute security.
If you believe your data has been compromised, please contact us immediately at matt@pathler.co.uk.
11. Children
Pathler is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
12. Changes to This Policy
We may update this privacy policy from time to time. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.
13. Complaints
If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
We would appreciate the opportunity to address your concerns directly before you contact the ICO, so please reach out to us first at matt@pathler.co.uk.