IAM Explained

Privacy notice

Last updated 26 October 2026.

Who I am

IAM Explained is run by Paul Gibson. Contact: [email protected].

What I collect

When you join the list, I store your email address, the date you joined, which form you used, the product or service you asked about when applicable, and your country (derived from your connection by Cloudflare).

Why, and the legal basis

To tell you when the course opens, when single-item checkout opens, or when CV review availability is announced, and to send occasional related updates. The legal basis is your consent, given when you submit the form.

Where it's stored

On Cloudflare's infrastructure, which also serves this website. Cloudflare may process visitor data such as IP addresses to deliver and protect the site. I don't run advertising or analytics trackers on this site.

How long

Until you ask me to remove you, or until I stop running the course, whichever comes first.

Your rights

You can ask to see, correct or delete your data, or withdraw your consent, at any time by emailing [email protected]. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

CV review privacy notice

This section applies if you use the separate CV review service. Paul Gibson, trading as IAM Explained, is responsible for the information you send to provide the review. Contact: [email protected].

I collect your name and contact details, CV, LinkedIn extract, intake answers, review notes and report only as needed to provide the service, answer questions and keep service records. Do not send a passport, identity document or full home address. The information is not shared with recruiters, hiring teams or other third parties for introductions, and no AI tool is used to produce the review.

Files and notes are stored with the service's email and file-storage providers. CVs, LinkedIn extracts, intake answers, notes and the report are retained for 30 days after delivery, then deleted. Service correspondence is kept while it is needed; transaction records are retained only as long as required for administration and legal obligations.

The basis for using this information is that it is necessary to provide the requested service, together with legal obligations where applicable. You can ask to see, correct or delete your information, or raise a concern, by emailing [email protected]. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Back to the site