Legal — Pekanga Advisor

Privacy Notice

Last updated: August 2026  ·  Version 1.0  ·  AI Processing Addendum included
This notice applies specifically to Pekanga Advisor (advisor.pekanga.co.uk), used by independent careers advisors to manage their own clients. It sits alongside, and does not replace, Pekanga's main Privacy Notice, which is written for the school platform. Where the two differ, this notice governs Advisor.
01

Who is the controller of your clients' data

When you use Pekanga Advisor with your own clients, you are the data controller for your clients' personal data. You decide what to collect, how to use it, and how long to keep it. Pekanga Ltd acts as your data processor: we process your clients' data only to provide the Advisor platform to you, and only on your instructions.

This is different from the school platform, where the school is the controller. In Advisor, that role is yours.

02

What Advisor processes on your behalf

Depending on how you use the platform, Advisor may process:

You control what you enter. Pekanga does not ask your clients for this information directly; it is your relationship with your client that determines what is collected.

03

AI and automated processing

Advisor uses Claude, Anthropic's AI model, to generate structured content from what you enter: session summaries, action plans, career report content, and CV drafts or improvements. This is a functional process, generating a document to help you and your client, not a profile or automated decision about your client as a person.

Anthropic does not use API content to train its models, and does not retain personal data beyond the lifecycle of the individual API request. The same sub-processor and processing basis already used for career report generation on the school platform applies here.

A CV naturally contains more personal detail than a subject-choice input: work history, education, sometimes referee names or addresses. If you or your client would rather personal details like referee contact information were left out of an AI-drafted CV, you can simply omit them when entering details, they are not required fields.

Live session recording uses Speechmatics for real-time transcription. This is unchanged by the CV feature and remains covered by the existing consent flow shown before any recording starts.

04

Consent

Before recording a live session, both you and your client must confirm consent through the in-app consent flow. This is unchanged by anything in this notice.

For the CV builder specifically, there is no separate recording involved. Entering or uploading CV content is treated as part of your normal client-record-keeping under your existing advisor-client relationship, in the same way appointment notes already are. We recommend telling your client that you use an AI tool to help draft or improve CVs, in whatever way you'd naturally explain your working methods to a client.

05

Sub-processors

The following sub-processors are used to deliver Advisor. All process only what is necessary to provide the relevant feature.

We will give notice before adding or replacing a sub-processor, consistent with the approach in Pekanga's main Data Processing Agreement.

06

Data retention

Client records, notes, transcripts, and CV drafts are retained for as long as your Advisor account is active, or until you delete them. If you cancel your subscription, we retain your data for a reasonable period to allow you to export it, then delete it. You can request deletion of specific client records at any time.

07

Your responsibilities as controller

Because you are the controller for your clients' data, you are responsible for:

08

Your rights and ours to you

As the Advisor account holder, you can ask us at any time to export or delete the data associated with your account. Email hello@pekanga.co.uk and we will action this within a reasonable timeframe.

09

Contact

Questions about this notice, or about how Advisor processes data: hello@pekanga.co.uk.

This notice is a good-faith attempt to set out how Pekanga Advisor handles data, written to sit alongside Pekanga's existing school-facing Privacy Notice and DPA. It should be reviewed by a qualified data protection solicitor before relying on it for a commercial contract or larger customer. This document does not constitute legal advice. Version 1.0, August 2026.