Privacy & cookies
Your information deserves care.
This notice covers this website, the Creation Dynamix CV Builder and our Human Expert CV service. See also our terms of use and our returns and delivery policy.
1. Who is responsible
Quintin Matthews, trading as Creation Dynamix, a sole proprietorship registered in South Africa, is the responsible party for personal information processed through this website.
Information Officer: Quintin Matthews
Privacy contact: privacy@creationdynamix.co.za
Business address: 6 Duville, D'Urbanvale, Cape Town, 7536, Western Cape, South Africa
Creation Dynamix is not registered for VAT and, as a sole proprietorship, has no company registration number.
2. What we collect and why
| Information | Purpose | Proposed lawful basis |
|---|---|---|
| Name, email, project selections, message and, for CV requests, the job you are applying for | Respond to enquiries, prepare proposals and provide requested services. | Steps requested before a contract; contract performance; legitimate interests where appropriate. |
| Human Expert CV: the name and email address we issue your private link to, the service and agreed price, your reference number, and the details and documents you send through the link (your CV, the job advert, a headshot photo if you add one, and any certificates, references, identity document or other documents you choose to upload) | Write your CV for the job you are applying for, and invoice you. | Contract performance. |
| CV Builder account: your email address and password | Create and secure your account, keep your CV with it, and send you sign in and account emails. Your password is held in scrambled form and we cannot read it. | Contract performance. |
| CV content: your name, phone number, email address, suburb and city, work history, education, skills, languages, achievements and the other career details you enter | Write and produce your CV. | Contract performance. |
| Date of birth | Produce your CV and recognise it when you pay for an update. | Contract performance. |
| South African identity number, only if you give it, for a South African CV | Printed on your CV, because most South African employers expect it. It is kept in your browser, never in our database, and it is in the PDFs we make and keep for you. | Contract performance, at your choice. |
| Citizenship and, only if you choose it, an employment equity (EE) note | Printed on your CV. | Contract performance, at your choice. |
| Your referees' names, positions, companies, phone numbers and email addresses | Printed on your CV. This is other people's information: only give a referee's details if they have agreed. | Contract performance; legitimate interests. |
| Transaction and order records | Fulfil orders, reconcile payments, prevent fraud and meet accounting duties. We do not intend to store full card details. | Contract performance and legal obligations. |
| Server logs, IP address and security events | Keep the website available, investigate abuse and secure systems. | Legitimate interests and legal duties. |
| Optional analytics identifiers | Understand aggregated site use and improve performance. | Consent where required. No analytics provider is installed in this release. |
| Marketing contact details | Send requested updates or permitted customer communications. | Consent or the limited existing-customer basis permitted by law, with opt-out. |
The CV Builder asks, only if it applies to you, whether to add an employment equity (EE) note to your CV. That note can reveal race, gender or disability, which the law treats as special personal information. It is optional, we never assume it, and it is printed on your CV only when you choose it. It is never sent to the artificial intelligence service. We do not knowingly seek any other special personal information, or children’s information. Do not include unnecessary confidential or sensitive material in an initial enquiry.
3. Recipients and service providers
We use the following service providers to run this website and the CV Builder. Each receives only what its part of the service needs and processes it on our instructions.
- ZA Web Hosts, South Africa, our website hosting provider: the website, its email, the PDFs of your CV that we keep for you, and the documents you send us for a Human Expert CV, all stored outside the public website.
- PayFast, South Africa, for taking payment. Card details are entered on PayFast’s systems and are not received or stored by us.
- Supabase, with servers in Ireland, for account sign in and for storing your CV draft and your paid CV. It never receives your identity number.
- Resend, United States, for sending you email about your CV and your account. It receives your email address and those emails.
- Cloudflare, United States, for the security check on our contact form (Turnstile), which helps stop automated spam. When you start filling in the contact form, it receives your IP address and technical details of your browser and device. Cloudflare uses these to tell people from bots and to improve its bot detection, and says it does not use them to identify, profile or target you.
- Anthropic, United States, for the artificial intelligence service that helps write your CV. It receives only your career details: the job you are aiming for, your job titles, kinds of work and dates, duties, achievements, skills, education and courses, systems, figures, board roles, and your own profile if you write one. It is not sent your name, contact details, identity number, date of birth, citizenship, EE note, the names of your employers or your referees, unless you type them into those career details yourself.
- PDFBolt, Germany, for turning your finished CV into a PDF. It receives the finished CV with everything printed on it, including your name, contact details, referees and, if you gave them, your identity number and EE note. It returns the PDF to us.
- PDFShift, France, used in the same way only when PDFBolt is not available.
Information sent outside South Africa. Supabase, PDFBolt and PDFShift process your information in the European Union, whose data protection law gives protection comparable to South Africa’s. Resend, Anthropic and Cloudflare are in the United States. We send them only what their part of the service needs, because that transfer is necessary to provide the service you ask us for: the emails about your account, and the writing of your CV. Cloudflare receives what it needs to run the security check when you use our contact form. We remain responsible for choosing these providers and for the terms we put in place with them.
4. Retention
A CV created in the CV Builder is kept with your account for six months from the date it was produced or last updated. The PDFs we make for you are kept on our hosting provider’s server, outside the public website, for the same six months, so that you can download them again free, and are deleted automatically when the six months end. We intend to delete the rest of your CV and your account automatically at the end of the six months, and this notice will be updated when that is in place. A draft you never pay for stays with your account until it is deleted.
For the Human Expert CV service, we delete the details and documents you send us 90 days after your CV is delivered, unless you ask us to keep them. We record the date we deliver your CV with your files, and we check every month for files that are due for deletion. The record of your private link, which holds your name, email address, the service, the agreed price, your reference number and the link dates, is deleted 90 days after the link expires.
You can have your CV and your account deleted at any time by emailing privacy@creationdynamix.co.za. We will delete them, including the PDFs we keep for you, and confirm to you within 30 days. We keep the record of your payment, as tax law requires. Copies in our hosting provider’s backups are removed when those backups are replaced.
For everything else, we keep information only as long as the purpose, the contract, any dispute and the law require. Proposed starting points, not confirmed legal periods, are: unsuccessful enquiries for 12 months, client and project records for the contractual relationship plus the applicable claims period, and financial records for the period required by tax and company law.
5. Security and incidents
Controls for this release include HTTPS enforcement, restrictive browser security headers, reduced third-party scripts, server-side form validation and no local card collection. Security is a continuing operational obligation. Access control, backups, patching, malware monitoring, incident response and provider security must also be maintained. Where required, affected people and the Information Regulator will be notified of a security compromise as soon as reasonably possible.
6. Your rights
Subject to applicable law, you may ask whether we hold your information, request access or correction, object to certain processing, withdraw consent, request deletion where retention is not required, and complain to the Information Regulator. We may need to verify your identity and may lawfully refuse or limit a request in specified circumstances.
Information Regulator (South Africa): consult the current contact and complaint process at inforegulator.org.za.
7. Cookies and local storage
| Item | Type | Purpose | Duration |
|---|---|---|---|
| cd-cookie-consent-v1 | Essential browser local storage | Records your privacy preference on this device. | Until browser storage is cleared or this notice version changes. |
| creationDynamixCvDraftV1 | Essential browser local storage, CV Builder | Keeps your CV draft on this device, including your identity number if you give it, so you can continue where you left off. | Until you use Clear this CV from this browser, or clear browser storage. |
| creationDynamixCvPublishedV1 | Essential browser local storage, CV Builder | Keeps a copy of your paid CV on this device, without your identity number. | Until you use Clear this CV from this browser, or clear browser storage. |
| creationDynamixCvLastPaymentIdV1 | Essential browser local storage, CV Builder | A random reference made when you start a payment, so the builder can recognise your payment when you return from PayFast. It holds nothing about you. | Until browser storage is cleared. |
| sb-grgdwybmzhedcfcazlyd-auth-token | Essential browser local storage, CV Builder | Keeps you signed in to your CV Builder account. | Until you sign out, or clear browser storage. |
This release does not install advertising or analytics cookies. If optional tools are introduced, they must remain disabled until the relevant choice is made, and this table must be updated. You can reopen Cookie settings in the site footer.
The Human Expert CV form saves your answers in your own browser as you type, so you do not lose them if the page closes. This saved draft stays on your device, is not sent to us until you submit, and is cleared when you submit. It does not save your identity number or date of birth. On a shared device, submit the form or clear this site's data in your browser when you finish.
When you start filling in our contact form, Cloudflare's security check runs in your browser to tell people from bots. Cloudflare says Turnstile processes only the data strictly necessary for this check, and does not access, store or send what you type into the form. It is not loaded on any other page or before you use the form.
8. Direct marketing
An enquiry does not automatically subscribe you to marketing. Any future electronic marketing process must record the applicable basis, identify the sender and provide a working, free opt-out. Withdrawing marketing consent will not stop necessary project or transaction messages.
9. Updates
Effective date: 11 October 2026. Material changes will be identified by updating this date and, where appropriate, notifying affected people or requesting a new choice.