Data Processing Addendum
This DPA forms part of the agreement between you (the data controller of any personal data you upload about third parties — e.g. references in your resume) and LOUISE MORRIS LTD (the data processor for that ancillary processing). For your own personal data we are the controller; see the Privacy Policy.
Subject and duration
Processing is limited to: scoring resumes, generating revision suggestions, generating mock interview reels, generating cover letter templates, and operating the service. Duration: the term of your subscription plus the retention windows in the Privacy Policy.
Nature and purpose
Automated text and video generation to support personal job-application preparation. No automated profiling that produces legal or similarly significant effects on data subjects.
Categories of data
Names, contact details, employment history, education, skill keywords, optional photographs, optional reference contact details, job-description text.
Sub-processors
We use the sub-processors listed in the Privacy Policy. We will give 14 days' notice via email of any addition or change. You may object in writing.
Security
TLS 1.3 in transit. AES-256 at rest. Role-based access for employees on a need-to-know basis. Encryption keys rotated quarterly. Annual third-party penetration test. Incident response: notification within 72 hours of confirmed breach.
International transfers
Where data leaves the UK/EEA (notably to US sub-processors), we rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses 2021/914, plus appropriate supplementary measures.
Data-subject requests
We will assist you in responding to data-subject requests by providing export and deletion tooling. Direct requests to support@louisemorrisco.com.
Term and termination
On termination of the subscription, we delete or return all personal data within 30 days, except as required by law (e.g. tax records).