Privacy Notice for Users

Routes is an innovative app that allows you to build and maintain a digital CV to help with your career and future prospects. You can use the features to document your skills, achievements and qualifications all in one central place. Find out more at routes-app.com/for-learners.

In order to set up your account and provide you with access to Routes we must process your personal data (information about you). The following privacy information outlines what data we process about you, why we need it and how it will be used. You will also find some useful information on the rights you have regarding your personal data.

CV Technologies Ltd is a UK based company that developed the Routes software to provide educational settings and groups with a method to help their students and members improve their future prospects. For the purposes of this document, we will refer to your parent organisation or club as the ‘parent organisation’.

Contact details for Routes are available via the app, but we urge you to speak to your parent organisation in the first instance if you have any questions or concerns about the app.

Your parent organisation will remain responsible for the personal data that is held on your Routes profile; they are the data controller and will determine how your data is used on the app.

Registration Data

In order to set up your account, we need your name and your email address. This is provided to us by your parent organisation. A welcome email will be issued to you along with a temporary password for you to update. Whilst the software stores your new password, it cannot be viewed by the Routes team.

Content

Content about you is uploaded to the Routes software by your parent organisation or directly by you when you log on and use the software. The type of data uploaded will differ depending on you and your parent organisation’s setup, but it is typically limited to:

• Academic achievements and qualifications
• Training records
• Professional goals and progress
• Personal development
• References
• Correspondence (support tickets raised or requests made to tutors)

Along with inputting data directly into the software fields, your data can be uploaded in a variety of formats from images and videos to PDF and workbook documents.

Please note that your parent organisation will monitor your content to ensure that it is appropriate. It is important to speak to a leader if you have any concerns or discover anything that worries you online. You can also report concerns directly to Routes via the app.

Usage & Device Data

Each time you use Routes, we will automatically collect personal data about your device and usage. We collect this data using cookies and other similar technologies; we have provided further information in our Cookies section at the end of this notice.

Artificial Intelligence (AI)

Some of the features within Routes use AI to enhance the software and make your user experience better. Your parent organisation may give you the option to join the ‘Routes Talent Pool’ which uses AI to match your digital CV with employers approved by your parent organisation. The talent pool is completely optional and opting out will not affect your profile or digital CV. Please speak to your parent organisation if you would like to withdraw your consent or change your preferences.

When using AI, we will always ensure that it is used securely and will not use your personal data to train open systems (this means that your data will not be discoverable online).

Special Category Data

Routes does not collect or process any special category data about you unless you or your parent organisation upload content that includes such information. Special category data is information about you that is much more sensitive in nature. Examples include special characteristics such as your gender and religion and information relating to your health and wellbeing.

Your parent organisation as ‘Data Controller’ will inform you and follow the appropriate protocols if they wish to process this type of data via the Routes software.

Data protection law obliges organisations to meet a lawful basis to process your personal data. In this case, the use of Routes is optional and so you will be asked by your parent organisation for consent to allow Routes to create your profile and digital CV. Your parent organisation may seek input from your parent or guardian for consent in certain circumstances.

As the use of Routes is optional, you can withdraw your consent or change your preferences at any time by contacting your parent organisation.

We will only share your personal data if it is strictly necessary and we have assurances that it will be kept confidential. Routes currently share data with Microsoft Azure who help us to manage the app and ensure that the data we hold about you is kept securely.

Your parent organisation will have access to Routes to help you use the app and build your digital CV effectively; your parent organisation will also monitor any instances of inappropriate behaviour which is important and helps to keep you and others safe online.

In terms of Routes, our staff will only access data if you or your parent organisation report a technical issue to us and only if it is necessary.

We will only share your data with any other third parties if it is required to meet a legal obligation.

Your information is stored securely on UK based data centres; we do not transfer data internationally.

If you consent to the Routes Talent Pool, employers approved by your parent organisation will be able to view your digital CV to assess if you may be suitable for a role. If you are selected for a role and choose to apply, the employer will become responsible for any data that you share with them as part of your application.

Employers are carefully selected by your parent organisation to ensure any use of your digital CV is appropriate and only used for the purposes of enhancing your career.

Your personal data is stored securely on the Microsoft Azure platform which is fully encrypted at rest (when stored) and in transit (when transferred). Further controls are in place to monitor and quickly identify gaps in security. Back up provisions are also in place.

Controls have been implemented to ensure that our staff only access data if it is necessary for support and maintenance; authority is limited to a select few staff members that partake in routine security training and sign confidentiality agreements. Features on the system allow your parent organisation to limit data access to their own staff dependent upon what they need to access.

As users you will be unable to access your account without a secure password. We recommend that this is updated on a regular basis.

We only process your data for as long as it is necessary to fulfil the purposes for which it is processed. Your data will be processed whilst your user account remains active. Data will be securely deleted after a period of 2 years in the following scenarios:

• Your parent organisation cancels the Routes subscription
• Your user account is inactive for a period of 2 years
• You withdraw your consent to use the software

We will only keep your personal data beyond this point if we are required to do so for legal purposes. This is not anticipated to be longer than a period of 6 years.

Data protection law provides you with a number of rights. For the use of Routes, the following will likely apply:

• The right to be informed about how and why we use your personal data (information outlined in this privacy notice).
• The right to access the personal data that we hold about you; this information can be found and extracted from the Routes app. You can also ask your parent organisation to obtain the information for you.
• The right to rectification — to ask that we update your personal data if you feel it is incorrect or incomplete; you can make changes to your data on the app or ask your parent organisation to help.
• The right to erasure — to ask that we stop processing or delete your data if you no longer wish for us to hold your Routes profile and digital CV.

Please contact your parent organisation if you would like to action any of these rights or if you are unhappy with how your data is used or concerned with anything that you see when using the app. Your parent organisation will usually respond to you within one month unless the request is more urgent. Routes will support the parent organisation with requests where possible.

You can also contact the Information Commissioner’s Office (ICO) who are responsible for data protection in the UK if you have any concerns that your parent organisation is unable to resolve: ico.org.uk/make-a-complaint

Our privacy information will be updated from time to time. We will inform you via email if there are any significant changes to the way in which we process your personal data. This privacy notice was last updated in May 2026.

By using Routes, you confirm the following:

• I have read and understood how CV Technologies Ltd (Routes App) will process my personal data.
• I understand that I can withdraw my consent or change my preferences at any time by contacting my parent organisation.
• I understand that AI is used to automatically match my digital CV with potential employers if I opt into the talent pool and that I can opt out at any time by contacting my parent organisation.
• I understand that I can contact my parent organisation if I have any questions or concerns about the use of my personal data.

We use cookies to distinguish you from other users of Routes and to remember your preferences. This helps us to provide you with a good experience when you use Routes and also allows us to improve the software.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your device if you agree. Cookies contain information that is transferred to your device on which you use Routes.

We use the following cookies:

• Strictly necessary cookies — Required for the operation of Routes. They include, for example, cookies that enable you to log in.
• Analytical or performance cookies — These allow us to recognise and count the number of users of Routes and how users move around the software. This helps us to improve the way Routes works.
• Functionality cookies — These are used to recognise you when you return to Routes. This enables us to personalise our content for you, greet you by name and remember your preferences.
• Targeting cookies — These cookies record your visit to Routes and the areas you visited.

We do not share the information collected by any cookies with any third parties. If you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of the software.