Privacy and Cookie Policy

Effective From: 28/01/2026

Applies to: GoodPeople, goodwork.london and Net Zero Careers

Operated by The Good People Business Ltd

Introduction

The Good People Business Ltd (“GoodPeople”, “we”, “us”) is committed to protecting your personal information and respecting your privacy. This Privacy & Cookie Policy explains how we collect, use, store, share and protect your personal data when you use our platforms, including:

This includes the use of cookies, analytics tools, tracking technologies, and similar technologies. We are the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What Personal Data We Collect

Information you provide
We may collect personal data when you create an account, upload a CV, apply for a role or programme, contact us, complete forms, take part in surveys, or choose to provide optional equality, diversity and inclusion (EDI) information.

This may include:

Contact details and account information
CVs, education, qualifications and employment history
Employer or organisational details
Communication preferences and consent choices
Optional EDI data (processed only with explicit consent)

Information collected automatically
When you use our sites, we may collect technical and usage data such as IP address, browser and device information, page views, session activity, and cookies or analytics identifiers.

2. Lawful Bases for Processing

We process personal data under the following lawful bases:

Contract - to provide services you request, including account creation, applications and programme participation
Legitimate interests - to operate, secure and improve our platforms and services
Consent - for non-essential cookies, marketing communications, optional referrals, and EDI data
Legal obligation - to meet legal, regulatory and reporting requirements

Where appropriate, more than one lawful basis may apply.

Special category data (EDI)

Optional EDI information is processed only with your explicit consent. You may withdraw consent at any time, and doing so will not affect your access to core services.

3. How We Use Your Personal Data

We use personal data to:

Deliver employability, job-matching and training services
Enable engagement with employers, providers and partners
Personalise recommendations and content
Communicate service updates and opportunities
Provide support and respond to enquiries
Send marketing communications where consent is given
Produce anonymised insights and reporting

We do not make solely automated decisions that have legal or similarly significant effects.

4. Automated Decision-Making & AI Tools

We use automated tools to support functions such as job matching, training suggestions, search relevance, and platform integrity. These tools generate recommendations only and do not determine hiring or eligibility outcomes.

Employers and programme partners make all application and selection decisions. You may request human review of automated recommendations where applicable.

5. Sharing Your Personal Data

We may share personal data with:

Other GoodPeople group platforms
Employers, training providers and delivery partners
Local authorities, commissioners, charities and community partners
Technology and service providers

Partners may share relevant information back to us where necessary for service delivery or reporting. Depending on the circumstances, parties may act as controllers or processors, with roles governed by appropriate data-sharing or processing agreements.

We may also share data:

Where you have given consent
Where required by law or for corporate transactions

6. International Data Transfers

Where personal data is transferred outside the UK or EEA, appropriate safeguards are applied in line with UK GDPR requirements.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described, after which it is deleted or anonymised. Typical maximum retention periods include:

Candidate profiles: 4 years
CVs & profile data: 4 years
Employee accounts: 3 years
Application history: 4 years (anonymised)
EDI data: 12 months (then anonymised)
Analytics logs: 24 months
Customer service interactions: 24 months
Marketing preferences: Until consent withdrawn
Contracts/financial data: 6 years
System backups: 30-90 days

You may request deletion at any time, subject to our legal obligations and lawful bases for processing.

8. Your Rights

Under UK GDPR, you have the right to:

Access and correct your data
Request erasure or restriction
Object to certain processing
Request data portability
Withdraw consent at any time

You also have the right to complain to the Information Commissioner’s Office (ICO). We respond to requests within one month, in line with UK GDPR.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to operate our sites, improve performance, analyse usage and support marketing activities where consent is given.

Cookies include:

Strictly necessary cookies (essential for site operation)
Functional cookies (preferences and accessibility)
Analytics cookies (consent required)
Marketing cookies (consent required)

You can manage your cookie preferences through our cookie banner and settings at any time. Our use of cookies complies with PECR and ICO guidance.

10. Data Security

We apply appropriate technical and organisational measures proportionate to risk to protect personal data, including secure hosting, access controls, encryption where appropriate, and data minimisation practices.

11. Contact Us

Privacy Lead

The Good People Business Ltd

The Exchange, Somerset House

Strand, London WC2R 1LA

hello@goodpeople.co.uk

12. Policy Updates

We may update this policy from time to time. Material changes will be communicated via our sites or email where appropriate.