PandaResume Privacy Addendum

Effective Date: July 5, 2026

This Addendum supplements the PandaResume Privacy Policy and applies to users located in the European Economic Area (EEA), United Kingdom, Switzerland, and California, United States.

1. Data Controller

For purposes of GDPR and CCPA, PandaResume acts as the "Data Controller" for personal data collected through our services.

Contact: support@pandaresume.com

2. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

  • Contractual necessity - to provide resume building services
  • Consent - where you explicitly agree (e.g., cookies, marketing)
  • Legitimate interests - to improve product functionality, security, and user experience
  • Legal obligation - compliance with applicable laws

3. Your GDPR Rights (EEA/UK Users)

If you are located in the EEA or UK, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion ("right to be forgotten")
  • Restrict or object to processing
  • Data portability (receive a copy of your data in a structured format)
  • Withdraw consent at any time (where applicable)

To exercise your rights, contact us at support@pandaresume.com.

4. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect and how we use it
  • Request deletion of your personal information
  • Correct inaccurate personal information
  • Opt out of the sale or sharing of personal information (we do NOT sell personal data)
  • Limit use of sensitive personal information (if applicable)

We do not sell personal information as defined under the CCPA.

5. Data Sharing

We may share personal data only with:

  • Cloud hosting providers
  • Analytics providers
  • Payment processors
  • Other service providers necessary to operate the platform

All third parties are required to process data securely and only for specified purposes.

6. International Data Transfers

Your data may be processed outside your country of residence, including in the United States.

Where required, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms.

7. Data Retention

We retain personal data only for as long as necessary to:

  • Provide services
  • Comply with legal obligations
  • Resolve disputes
  • Enforce agreements

8. Security Measures

We implement appropriate technical and organizational safeguards, including:

  • Encryption in transit (HTTPS)
  • Encryption at rest
  • Access controls and authentication
  • Monitoring and security audits

9. Cookies and Tracking

We use cookies for:

  • Essential platform functionality
  • Analytics and performance tracking
  • User experience improvements

Users in applicable regions may manage cookie preferences through browser settings or consent tools.

10. Do Not Track

Our platform does not currently respond to "Do Not Track" (DNT) signals, but we provide cookie management options where required by law.

11. Updates to This Addendum

We may update this Addendum periodically. Updates will be posted on this page with an updated effective date.

12. Contact

If you have any questions regarding privacy or data protection: support@pandaresume.com