Last updated: 5 Fabruary 2026
GREAT PONTON LIMITED places great importance on protecting and respecting personal data.
This Privacy Policy (the “Privacy Policy”) has been designed to help you understand how GREAT PONTON LIMITED, in its capacity as publisher of the Resumedone Platform, collects and processes your personal data, and what your rights are.
This Privacy Policy applies to:
Visitors to our Resumedone Platform accessible at https://resumedone.co (the “Platform”), and
Members using our CV creation, cover letter and online application preparation Services (the “Services”).
In this Privacy Policy, the term “Personal Data” refers to any information that enables or may legitimately be used to identify a natural person.
1. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?
GREAT PONTON LIMITED, a company governed by Irish law (“Private Company Limited by Shares”), whose registered office is located at 151 Thomas Street, The Liberties, Dublin 8, D08 PY5E, Ireland, registered with the Companies Registration Office (CRO) under number 644795 (hereinafter the “Company” or “we”), is responsible for processing your Personal Data collected via the Platform and the Services.
2. WHAT PERSONAL DATA DO WE COLLECT, FOR WHAT PURPOSES AND FOR HOW LONG?
We process your Personal Data in compliance with applicable data protection regulations, in particular Regulation (EU) 2016/679 of 27 April 2016 on the protection of personal data (“GDPR”), as well as the Irish Data Protection Act.
Data processing carried out by the Company pursues specific, explicit and legitimate purposes. For each of these processing activities, the Company undertakes to process only Personal Data that are adequate, relevant and limited to what is necessary in view of the purposes for which they are processed.
We process your Personal Data only when we have a legal basis for doing so:
| Purpose | Personal Data | Legal Basis | Source |
|---|---|---|---|
| Provision of the Platform and Services – Management of our contractual relationship with you (providing our Services, processing your payments, enabling you to personalize your Personal Space, your customized documents and your profile) | • Identity, contact details • Photograph • Information contained in your CVs and cover letters • Personal Space login credentials • Payment data | Performance of our contract with you | Data provided by the data subject or automatically collected during use of the Services |
| Management of our Platform, including to preserve its security and resolve issues, and for access, data analysis, evaluations, research, surveys and analytics purposes | • Identity, contact details • Information contained in your CVs and cover letters • Personal Space login credentials • Data about your equipment (type, operating system, settings) | Legitimate interest of the Company in managing its Platform | Data provided by the data subject or automatically collected during use of the Platform and/or Services |
| Improving our Platform so that content is presented in the most effective manner | • Identity, contact details • Photograph • Information contained in your CVs and cover letters • Personal Space login credentials • Equipment data | Legitimate interest of the Company in managing its Platform | Data provided by the data subject or automatically collected during use of the Platform and/or Services |
| Communication and outreach – Management of contact requests (contact form on the Platform, phone and email) | • Identity and contact details • Subject of your request • Any information or document you share with us | Consent | Data provided by the data subject |
| Sending marketing communications to our Members | • Identity and contact details • User journey data | Legitimate interest of the Company in developing its business | Data provided by the data subject or automatically collected during use of the Services |
| Compliance with data subject rights and regulations – Defending our interests in the event of disputes | • Identity and contact details • Any information necessary to handle the dispute | “Legitimate interest of the Company in defending its interests in the event of disputes” | Data provided by the data subject, automatically collected data and data collected from third parties |
| Management of rights requests | • Identity and contact details • Any information necessary to process your rights request | Legal obligation | Data provided by the data subject or automatically collected |
| Compliance with legal or regulatory requirements applicable to us (accounting, taxation, data protection) | • Any information necessary to comply with legal or regulatory requirements | Legal obligation | Data provided by the data subject or automatically collected |
Data required to respond to your requests are marked with an asterisk or equivalent on collection forms or indicated orally at the time of collection. If these fields are not completed, we will not be able to respond to your requests or provide certain Services.
You must provide accurate information that does not infringe third-party rights. Where you provide us with Personal Data relating to another person, you undertake to communicate the link to this Privacy Policy to the data subject. In doing so, the data subject will be informed of processing of their Personal Data by the Company.
3. HOW DO WE SHARE YOUR PERSONAL DATA?
We share the various categories of Personal Data listed above with:
our authorized personnel who need access to them in the performance of their duties;
our subcontractors and service providers who perform various services on our behalf (for example in payment processing, hosting, audience measurement, customer service management or data analysis), limited to what is necessary to perform their assignments;
where applicable, certain technical or commercial partners involved in provision, improvement or promotion of the Services, where such sharing is necessary and contractually governed;
our external advisors (lawyers, auditors, etc.) and debt collection agencies, where necessary for purposes of our legitimate interests;
public or judicial authorities, where required by law or where we reasonably believe disclosure is legitimate to respond to a claim against us, comply with legal process, conduct an investigation, or protect the property or personal safety of the Company, its partners or its Members.
We may also share your Personal Data with third parties in connection with a potential or actual sale or restructuring of our company or certain of our assets, in which case your data may form part of the transferred assets.
4. HOW DO WE TRANSFER YOUR PERSONAL DATA?
We may transfer your Personal Data to third-party service providers located outside the European Economic Area, in particular in countries that do not benefit from an adequacy decision by the European Commission (Article 45 GDPR). In such cases, we ensure that such transfers are carried out in accordance with applicable regulations and secured by appropriate mechanisms, such as:
the European Commission’s Standard Contractual Clauses (Articles 46 et seq. GDPR),
as applicable.
You may request a copy of these mechanisms (excluding confidential clauses) by contacting us using the details provided in the section “How to contact us?” below.
5. HOW LONG ARE YOUR DATA RETAINED?
We retain your Personal Data only for as long as necessary for the purposes described and in compliance with the law.
The following retention periods apply:
Data associated with your Personal Space (your “Account”):
When you create a Personal Space online, your Personal Data are retained as long as you use our Services via your Space. Your data and your Space will be deleted:
if you close your Personal Space,
if your Space is inactive, meaning you have not used any of our Services for two consecutive years and have ceased interacting with us during that second year (in particular, you have not opened our emails, logged into your Space, etc.).
Data relating to your subscription to our Services:
When you subscribe to our Services, your Personal Data (billing address, subscription type, payment terms, etc.) are retained for 5 years from the end of the contractual relationship.
Marketing data:
We send marketing communications until you unsubscribe or for 3 years after your last interaction with our emails.
In addition, we may retain your Personal Data for a longer period, limited to what is strictly necessary for the purposes for which they are processed, in order to assert our rights or comply with legal obligations. When your data are no longer needed, we ensure they are deleted or anonymized.
6. HOW DO WE PROTECT YOUR PERSONAL DATA?
We implement appropriate technical and organizational measures to prevent unauthorized or unlawful processing of your Personal Data and to avoid accidental loss, destruction or damage. This includes internal security procedures relating to storage and destruction of your Personal Data, as well as management of access to such data.
7. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?
You have several rights concerning your Personal Data. The table below presents the different rights available to you, conditions for exercising them, and exceptions to each right.
| Right | Conditions and exceptions |
|---|---|
| “You may withdraw your consent at any time” | This right may only be exercised where processing is based on your consent. Withdrawal of consent has no retroactive effect on prior processing. |
| You may request confirmation as to whether we process your Personal Data, access them and obtain a copy | Access may be refused or limited where the request is manifestly unfounded or excessive, or infringes third-party rights (e.g., trade secrets, third-party confidentiality, copyrights). We may request proof of identity where we have reasonable doubt as to the requester’s identity. |
| You may request correction of inaccurate or incomplete data | This right may be exercised regardless of the legal basis of processing. |
| You may request erasure of your data or restriction of processing | Cases where erasure may be exercised: • Data are no longer necessary for the purposes collected. • You withdraw consent where processing was based solely on that legal basis. • You object to processing based on our legitimate interest. • Your data have been unlawfully processed. • Your data must be erased to comply with a legal obligation. The right to erasure does not apply in particular where processing is necessary: • to comply with a legal obligation; • to establish, exercise or defend legal claims; • for freedom of expression and information. |
| You may request portability of your data in a structured, commonly used and machine-readable format or their transfer to another controller | This right applies only to data processed by automated means and based on your consent or performance of a contract with you. It applies only to data you provided directly (excluding derived or inferred data). Direct transfer to another controller is possible only where technically feasible. |
| You may object to any processing based on our “legitimate interest” | This right does not apply where we can demonstrate compelling legitimate grounds for continuing processing (e.g., necessity for security or fraud prevention). Where processing is based on legal or contractual obligation, objection is not possible. For marketing purposes, objection applies without justification and must be acted upon immediately. |
| You may define instructions regarding the fate of your data after your death | You may appoint a person responsible for implementing these instructions or request deletion of your data after your death. In the absence of specific instructions, heirs may exercise certain rights (access, rectification, deletion) to the extent necessary for estate administration. |
To exercise your rights, please contact us using details provided in the section “How to contact us?”. You may also lodge a complaint with your local personal data protection authority. In Ireland, this is the Data Protection Commission (DPC). If you reside in another country, you may also contact your national data protection authority.
8. COOKIES
A “cookie” is a small file stored by your browser when visiting a website.
Cookies are placed on our Platform. To learn more about conditions under which these cookies are placed and used, please consult our Cookie Policy.
9. HOW TO CONTACT US?
Please submit all requests, questions or comments relating to this Privacy Policy or processing of your Personal Data:
via the “Contact Us” section available on the Platform, and/or
using the Company contact details provided in the Platform’s G.T.U. and G.T.C.S.
10. UPDATE
We reserve the right to modify or update this Privacy Policy at any time in line with changes in legal provisions or our processing practices. We will inform you in the event of any material change.