PRIVACY POLICY
Last Updated: 8th April, 2025.
Last Updated: 8th April, 2025.
This Privacy Policy explains how GoCareer Consulting Ltd collects, uses, stores, shares, and protects your personal information when you use our website, products, and career services. It also explains your privacy rights and how you can exercise them.
Key points include:
What We Collect
We collect the personal information needed to provide our services, such as your contact details, career history, CV information, payment details, account information, and website usage data. If you choose to share sensitive information (such as health or accessibility requirements), we will only process it where permitted by law and, where required, with your explicit consent.
How We Use Your Information
We use your data to deliver our career services, manage your account, process payments, communicate with you, improve our services, comply with legal obligations, and, where appropriate, send marketing communications.
How We Protect Your Data
We use appropriate technical and organisational security measures to safeguard your personal information. While no online system can be completely secure, we continually work to protect your data and comply with applicable data protection laws.
Who We Share Your Data With
We only share your information with trusted third-party service providers where necessary to deliver our services, process payments, operate our systems, analyse website performance, or comply with legal obligations. Where data is transferred outside the UK, appropriate safeguards are used.
How Long We Keep Your Data
We retain personal information only for as long as necessary to provide our services, comply with legal and regulatory requirements, resolve disputes, and protect our legal interests. Retention periods vary depending on the type of information collected.
Your Privacy Rights
Under UK data protection law, you may have the right to access, correct, delete, restrict, object to, or transfer your personal data, and to withdraw consent where processing is based on consent.
Cookies And Analytics
Our website uses cookies and similar technologies to improve functionality, analyse website performance, and enhance your experience. For more information, please see our Cookie Policy.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data processing practices. Any significant changes will be communicated where appropriate.
This Executive Summary is provided for convenience only and does not replace the full Privacy Policy. We encourage you to read the complete Privacy Policy to understand how we collect, use, and protect your personal information and your rights under applicable data protection law.
Data Controller: GoCareer Consulting Ltd (Company No. 16197930), 128 City Road, London, EC1V 2NX.
We decide how and why to process your personal data. For privacy concerns or to exercise your rights, contact us at info@GoCareer.org.
Identity Data
Name, email, address, phone, LinkedIn profile, career level, qualifications.
Professional Data
CV details, employment history, skills, certifications.
Account Data
Username, password (hashed) for portal, profile settings.
Contact Data
Email, phone number, physical address provided.
Payment Data
Payment method details (we use Stripe/PayPal – actual card details are handled by them), billing address.
Usage Data
Logins, site activity, message logs, and files you upload to our Elevate Suite portal (e.g. CV drafts).
Marketing Data
Preferences, opt-ins, and consent records.
Special Category Data
Any sensitive data (e.g. health conditions, disability) only if you voluntarily share it to help with accessibility or accommodations. We process such data only with explicit consent and in compliance with Article 9 UK GDPR.
We process your data under the following lawful bases:
Contract
To provide the career services you request (CV writing, coaching, Elevate applications). For example, we need your career details to create your CV and LinkedIn profile.
Consent
For marketing communications (newsletters, promotions) and non-essential cookies. You can withdraw consent any time.
Legitimate Interests
For internal business purposes (fraud prevention, improving our services, analytics) and to send important service communications (e.g. updates on your project, appointment reminders). We balance this with your privacy.
Legal Compliance
To comply with legal obligations, such as financial record-keeping or responding to lawful requests by authorities.
Service Delivery
To perform our contract with you. This includes creating and updating your CV/LinkedIn, consulting calls, and managing your Elevate job applications. We use your career history and goals to tailor our service.
Account Management
To maintain your Elevate Suite account, send invoices, track project progress, and respond to your inquiries.
Communications
To send you operational messages (appointment confirmations, programme notifications) and marketing (if you opted in). You may receive career tips, newsletters, or offer emails by consent or as a customer under legitimate interest.
Payments
To process transactions securely via Stripe/PayPal. Your payment card details are handled by the payment provider under their privacy terms.
Research & Improvement
To analyse anonymised data to improve our services (e.g. Google Analytics on website usage). We may profile usage to enhance user experience and personalise content. This is done under legitimate interest.
Legal and Safety
To detect and prevent fraud, spam, or abuse.
Affiliates and Partners
If you use affiliate links, we may track that data. We also share necessary contact data with affiliate programme partners when you participate.
With your consent, we use your data to send tailored marketing (career advice, service promotions). We may profile basic preferences (e.g. job interests) to personalise communications. You have the right to opt out of marketing at any time via an unsubscribe link in emails or by contacting us. Even without opt-in, we may send essential service messages (e.g. project updates) as necessary for contract performance or legitimate interest (e.g. satisfaction surveys).
We share your data with trusted third parties:
Payment Processors
Stripe and PayPal (for transactions). They are based in the USA/EU and use SCCs or adequacy arrangements to comply with UK GDPR.
IT and Hosting
Our websites, portal, and data are hosted on secure servers (e.g. Fasthosts, Google Cloud, or similar), which may involve cross-border storage. These providers adhere to UK GDPR.
Email & CRM
We use email platforms (e.g. Mailchimp, HubSpot) to send newsletters and manage contacts. Data is processed under our account, with transfers covered by SCCs.
Analytics & Ads
Google Analytics (and optionally Hotjar or Facebook Pixel) for website analysis. These set cookies (see Cookies Policy) and may transfer data outside UK (protected by Google’s UK GDPR compliance).
Communications
Twilio (USA) for optional SMS alerts; Slack/Teams for internal support chats; these parties handle data securely under agreements.
Professional Advisers
Accountants, lawyers – to manage taxes and legal obligations (data stays within UK or UK GDPR-compliant jurisdictions).
Legal Requests
If law enforcement or courts require it, we may disclose data (only the minimum necessary).
Your data may be transferred to countries outside the UK (e.g., U.S.-based providers). We rely on UK government adequacy decisions (e.g. UK–US Data Bridge) or EU Standard Contractual Clauses to ensure data protection. In all cases, we ensure safeguards are in place and that only necessary data is transferred.
We implement appropriate technical and organisational measures to protect your data: SSL encryption for data in transit, firewalls, access controls, and regular security reviews. Only authorised GoCareer staff can access your data, and they receive data protection training. While we strive for security, no system is 100% secure; if a breach occurs, we will notify affected users and the ICO within 72 hours if required by law.
GoCareer retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.
Retention periods are determined with reference to:
9.1 SERVICE RECORDS
GoCareer retains service-related records, including but not limited to CVs, career documents, programme participation data, deliverables, and transaction records, for the duration of the Client relationship and for a period of six (6) years thereafter.
This retention period is applied on the basis that:
This retention period ensures that GoCareer is able to:
9.2 SUPPORT AND COMMUNICATION RECORDS
GoCareer retains support records, including emails, platform messages, consultation notes, call summaries, and other communication logs, for a period of six (6) years following the resolution of the relevant matter or completion of services.
This retention period is applied to:
Clients acknowledge and agree that communication records may be retained and relied upon by GoCareer as evidence of service delivery, Client engagement, and the fulfilment of contractual obligations.
9.3 MARKETING DATA
GoCareer retains personal data processed for marketing purposes, including email subscription data and communication preferences, until:
Upon withdrawal of consent, such data will either be securely deleted or retained in a suppression list to ensure no further marketing communications are sent.
9.4 COOKIES AND ANALYTICS DATA
GoCareer retains cookie and analytics data for a period of up to twenty-four (24) months.
This period is selected to:
9.5 EXTENDED RETENTION
GoCareer may retain personal data beyond the periods set out above where such retention is necessary:
Where possible, such data is aggregated or anonymised.
9.6 DELETION AND ANONYMISATION
Upon expiry of the applicable retention period, personal data will be:
Deletion and anonymisation processes are carried out in accordance with GoCareer’s internal data protection and information security policies.
You have rights under UK GDPR:
Access
Request a copy of your personal data.
Rectification
Ask us to correct inaccurate data.
Erasure
“Right to be forgotten” under Article 17, unless we have a legal reason to keep it.
Restriction
Temporarily block data processing.
Portability
Receive your data in a common format and transfer it to another provider.
Objection
Object to processing based on legitimate interests or marketing.
Withdraw Consent
At any time, by emailing us.
To exercise any right, email info@GoCareer.org with “Data Subject Access Request” or relevant term. We will respond within one month (likely quicker). You may also contact the UK Information Commissioner’s Office (ICO) if unsatisfied (see their website for guidance).
Our services are for adults seeking career support. We do not knowingly collect data from children under 13. If you are a parent or guardian and believe your child has provided us with data, please contact us so we can delete it.
We use some AI tools (for example, LinkedIn profile suggestions or CV formatting tools) to assist our advisors, but we do not make any significant decisions about you based solely on automated processes. All final decisions about your application materials or job search strategy involve human review.
We may update this Policy to reflect changes in law or our practices. The “Last Updated” date will change accordingly. Significant changes will be notified via our website or email.
GoCareer Consulting Ltd has not appointed a formal Data Protection Officer, as it is not required to do so under applicable law. Responsibility for data protection compliance rests with the Company’s Director.
Questions or complaints about this Policy can be sent to info@GoCareer.org.
Our Data Privacy contact is Andrew Mwaki, Director. If still unresolved, you have the right to lodge a complaint with the ICO.
Privacy Notice for Forms (Example)
When collecting your data via forms (e.g. contact or subscription), we include a short notice like: “By submitting this form, you consent to our storing and processing your personal data as described in our Privacy Policy.”
ICO Guidance
For more information on your rights and privacy, see the ICO’s guides (e.g. on right to erasure and cookies).
