PRIVACY POLICY
Last Updated: 8th April, 2025.
Last Updated: 8th April, 2025.
GoCareer Consulting Ltd (“GoCareer”, “we”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in compliance with UK GDPR and the Data Protection Act 2018. It covers data collected via our website, Elevate Suite portal, and subscription services (GoCareer Plus).
Key points: we use your data to provide career services (CV writing, coaching, Elevate Programme, etc.) and updates. We process data on lawful bases (your consent, contract performance, or legitimate interests) and share only as needed (e.g. payment processors, analytics). We outline your rights (access, erasure, etc.) and how to exercise them.
A brief privacy notice for data collection forms is provided at the end.
Data Controller: GoCareer Consulting Ltd (Company No. 16197930), 128 City Road, London, EC1V 2NX.
We decide how and why to process your personal data. For privacy concerns or to exercise your rights, contact us at info@GoCareer.org.
Identity Data
Name, email, address, phone, LinkedIn profile, career level, qualifications.
Professional Data
CV details, employment history, skills, certifications.
Account Data
Username, password (hashed) for portal, profile settings.
Contact Data
Email, phone number, physical address provided.
Payment Data
Payment method details (we use Stripe/PayPal – actual card details are handled by them), billing address.
Usage Data
Logins, site activity, message logs, and files you upload to our Elevate Suite portal (e.g. CV drafts).
Marketing Data
Preferences, opt-ins, and consent records.
Special Category Data
Any sensitive data (e.g. health conditions, disability) only if you voluntarily share it to help with accessibility or accommodations. We process such data only with explicit consent and in compliance with Article 9 UK GDPR.
We process your data under the following lawful bases:
Contract
To provide the career services you request (CV writing, coaching, Elevate applications). For example, we need your career details to create your CV and LinkedIn profile.
Consent
For marketing communications (newsletters, promotions) and non-essential cookies. You can withdraw consent any time.
Legitimate Interests
For internal business purposes (fraud prevention, improving our services, analytics) and to send important service communications (e.g. updates on your project, appointment reminders). We balance this with your privacy.
Legal Compliance
To comply with legal obligations, such as financial record-keeping or responding to lawful requests by authorities.
Service Delivery
To perform our contract with you. This includes creating and updating your CV/LinkedIn, consulting calls, and managing your Elevate job applications. We use your career history and goals to tailor our service.
Account Management
To maintain your Elevate Suite account, send invoices, track project progress, and respond to your inquiries.
Communications
To send you operational messages (appointment confirmations, programme notifications) and marketing (if you opted in). You may receive career tips, newsletters, or offer emails by consent or as a customer under legitimate interest.
Payments
To process transactions securely via Stripe/PayPal. Your payment card details are handled by the payment provider under their privacy terms.
Research & Improvement
To analyse anonymised data to improve our services (e.g. Google Analytics on website usage). We may profile usage to enhance user experience and personalise content. This is done under legitimate interest.
Legal and Safety
To detect and prevent fraud, spam, or abuse.
Affiliates and Partners
If you use affiliate links, we may track that data. We also share necessary contact data with affiliate programme partners when you participate.
With your consent, we use your data to send tailored marketing (career advice, service promotions). We may profile basic preferences (e.g. job interests) to personalise communications. You have the right to opt out of marketing at any time via an unsubscribe link in emails or by contacting us. Even without opt-in, we may send essential service messages (e.g. project updates) as necessary for contract performance or legitimate interest (e.g. satisfaction surveys).
We share your data with trusted third parties:
Payment Processors
Stripe and PayPal (for transactions). They are based in the USA/EU and use SCCs or adequacy arrangements to comply with UK GDPR.
IT and Hosting
Our websites, portal, and data are hosted on secure servers (e.g. Fasthosts, Google Cloud, or similar), which may involve cross-border storage. These providers adhere to UK GDPR.
Email & CRM
We use email platforms (e.g. Mailchimp, HubSpot) to send newsletters and manage contacts. Data is processed under our account, with transfers covered by SCCs.
Analytics & Ads
Google Analytics (and optionally Hotjar or Facebook Pixel) for website analysis. These set cookies (see Cookies Policy) and may transfer data outside UK (protected by Google’s UK GDPR compliance).
Communications
Twilio (USA) for optional SMS alerts; Slack/Teams for internal support chats; these parties handle data securely under agreements.
Professional Advisers
Accountants, lawyers – to manage taxes and legal obligations (data stays within UK or UK GDPR-compliant jurisdictions).
Legal Requests
If law enforcement or courts require it, we may disclose data (only the minimum necessary).
Your data may be transferred to countries outside the UK (e.g., U.S.-based providers). We rely on UK government adequacy decisions (e.g. UK–US Data Bridge) or EU Standard Contractual Clauses to ensure data protection. In all cases, we ensure safeguards are in place and that only necessary data is transferred.
We implement appropriate technical and organisational measures to protect your data: SSL encryption for data in transit, firewalls, access controls, and regular security reviews. Only authorised GoCareer staff can access your data, and they receive data protection training. While we strive for security, no system is 100% secure; if a breach occurs, we will notify affected users and the ICO within 72 hours if required by law.
GoCareer retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.
Retention periods are determined with reference to:
9.1 SERVICE RECORDS
GoCareer retains service-related records, including but not limited to CVs, career documents, programme participation data, deliverables, and transaction records, for the duration of the Client relationship and for a period of six (6) years thereafter.
This retention period is applied on the basis that:
This retention period ensures that GoCareer is able to:
9.2 SUPPORT AND COMMUNICATION RECORDS
GoCareer retains support records, including emails, platform messages, consultation notes, call summaries, and other communication logs, for a period of six (6) years following the resolution of the relevant matter or completion of services.
This retention period is applied to:
Clients acknowledge and agree that communication records may be retained and relied upon by GoCareer as evidence of service delivery, Client engagement, and the fulfilment of contractual obligations.
9.3 MARKETING DATA
GoCareer retains personal data processed for marketing purposes, including email subscription data and communication preferences, until:
Upon withdrawal of consent, such data will either be securely deleted or retained in a suppression list to ensure no further marketing communications are sent.
9.4 COOKIES AND ANALYTICS DATA
GoCareer retains cookie and analytics data for a period of up to twenty-four (24) months.
This period is selected to:
9.5 EXTENDED RETENTION
GoCareer may retain personal data beyond the periods set out above where such retention is necessary:
Where possible, such data is aggregated or anonymised.
9.6 DELETION AND ANONYMISATION
Upon expiry of the applicable retention period, personal data will be:
Deletion and anonymisation processes are carried out in accordance with GoCareer’s internal data protection and information security policies.
You have rights under UK GDPR:
Access
Request a copy of your personal data.
Rectification
Ask us to correct inaccurate data.
Erasure
“Right to be forgotten” under Article 17, unless we have a legal reason to keep it.
Restriction
Temporarily block data processing.
Portability
Receive your data in a common format and transfer it to another provider.
Objection
Object to processing based on legitimate interests or marketing.
Withdraw Consent
At any time, by emailing us.
To exercise any right, email info@GoCareer.org with “Data Subject Access Request” or relevant term. We will respond within one month (likely quicker). You may also contact the UK Information Commissioner’s Office (ICO) if unsatisfied (see their website for guidance).
Our services are for adults seeking career support. We do not knowingly collect data from children under 13. If you are a parent or guardian and believe your child has provided us with data, please contact us so we can delete it.
We use some AI tools (for example, LinkedIn profile suggestions or CV formatting tools) to assist our advisors, but we do not make any significant decisions about you based solely on automated processes. All final decisions about your application materials or job search strategy involve human review.
We may update this Policy to reflect changes in law or our practices. The “Last Updated” date will change accordingly. Significant changes will be notified via our website or email.
GoCareer Consulting Ltd has not appointed a formal Data Protection Officer, as it is not required to do so under applicable law. Responsibility for data protection compliance rests with the Company’s Director.
Questions or complaints about this Policy can be sent to info@GoCareer.org.
Our Data Privacy contact is Andrew Mwaki, Director. If still unresolved, you have the right to lodge a complaint with the ICO.
Privacy Notice for Forms (Example)
When collecting your data via forms (e.g. contact or subscription), we include a short notice like: “By submitting this form, you consent to our storing and processing your personal data as described in our Privacy Policy.”
ICO Guidance
For more information on your rights and privacy, see the ICO’s guides (e.g. on right to erasure and cookies).
