Privacy notice for the LinkedIn audit

This page explains what happens to your information when you use the LinkedIn Positioning Audit at audit.fluentmedicalenglish.com.

It sits alongside my main privacy notice, which covers the rest of my work. Where the two differ, this page is the one that applies to the audit.

Who I am

I'm Rachel Williams, trading as Fluent Medical English. I decide how the information described here is used, which makes me the controller under UK data protection law. You can contact me about it at rachel@fluentmedicalenglish.com.

What the audit collects

• The LinkedIn address you give me.
• The public parts of that profile: your name, headline, About section, experience, Featured section, profile photo and banner.
• Your answers on the form: who you want to be found by, how often you post, and how old your Featured item is.
• Anything you paste in if LinkedIn doesn't return the whole profile.
• Your email address, if you choose to see your fixes.
• Whether you ticked the box to get my occasional emails.
• Your internet (IP) address. It's used to limit each person to one audit a day. In the audit's own records it's stored as a scrambled code, never in a form anyone can read. My hosting provider's server logs also record it for a short time, for security.

Why I use it, and on what basis

• To fetch and score your profile. You ask for this and tick a box to say you're happy for it to happen, so the legal basis is your consent. You can withdraw it at any time by emailing me, and I'll delete your report.
• To keep a record of who has used the audit, with your email address and LinkedIn address. The legal basis is my legitimate interest in knowing who has asked for an audit. I won't send you marketing emails because of this.
• To send you, now and then, something I've written about LinkedIn for healthcare professionals, but only if you tick the box asking for it. The legal basis is your consent. Every email has an unsubscribe link.
• To stop the tool being overused. I count audits by internet address and by profile. The legal basis is my legitimate interest in keeping the service running and its costs under control.

Who else handles it

These services do part of the work for me, under contract.

• Apify fetches the public profile from LinkedIn.
• Google, through its Gemini service, reads the profile text and helps score it. I use the paid version, and Google's terms for it say it doesn't use what I send to improve its products.
• Render hosts the audit and stores the reports, on servers in Frankfurt, Germany.
• systeme.io holds your email address and LinkedIn address, and sends my emails.
• The page loads its font from Google Fonts, so your browser connects to Google when the page opens.

Some of these services process data outside the UK, including in the United States. Where they do, the transfer is covered by the safeguards UK law requires, such as approved contract clauses.

I don't sell your information or share it with anyone else.

How long I keep it

• Your profile details, photo, banner and report are deleted 30 days after the audit.
• The scrambled record used for the daily and weekly limits is deleted after 31 days.
• Your email address and LinkedIn address, if you gave your email, stay in my records until you ask me to delete them. If you asked for my emails, you can unsubscribe at any time.

How the score is worked out

The score comes from a computer program and an AI model, following rules I wrote. It's advice about your LinkedIn profile and nothing more. It doesn't lead to any decision about you. If you think a score is wrong, tell me and I'll look at it myself.

Your rights

You can ask for a copy of what I hold about you, ask me to correct it or delete it, object to how I use it, or withdraw your consent. Email rachel@fluentmedicalenglish.com and I'll reply within one month.

If you're unhappy with how I've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. I'd appreciate the chance to put it right first.

Cookies

The audit doesn't set cookies and doesn't use tracking or advertising tools.