Privacy Policy

This privacy notice tells you what to expect us to do with your personal information.

Contact details
Email: su*****@ca***************.com

What information we collect, use, and why
We collect or use the following information to provide services and goods, including delivery (digital):

Names and contact details
Addresses
Date of birth
Purchase or account history
Payment details (including card or bank information for transfers and direct debits)
Information relating to loyalty programmes
Website user information (including user journeys and cookie tracking)
Photographs or video recordings
Call recordings
Records of meetings and decisions
Identification documents
Information relating to compliments or complaints
Information relating to sponsorship

We collect or use the following information for the operation of customer accounts and guarantees:

Names and contact details
Addresses
Payment details (including card or bank information for transfers and direct debits)
Purchase history
Account information, including registration details
Information used for security purposes
Marketing preferences

We collect or use the following information for service updates or marketing purposes:

Names and contact details
Addresses
Marketing preferences
Location data
Recorded images, such as photos or videos
Call recordings
Purchase or viewing history
IP addresses
Website and app user journey information
Information relating to sponsorship
Records of consent, where appropriate

We collect or use the following information for research or archiving purposes:

Names and contact details
Addresses
Location data
Recorded images, such as photos or videos
Call recordings
Purchase or viewing history
IP addresses
Website and app user journey information
Personal information used for administration of research
Personal information used for the purpose of research
Records of consent, where appropriate

We also collect or use the following information for research or archiving purposes:

Racial or ethnic origin
Names and contact details
Addresses
Location data
Recorded images, such as photos or videos
Call recordings
Purchase or viewing history
IP addresses
Website and app user journey information
Personal information used for administration of research
Personal information used for the purpose of research
Records of consent, where appropriate

We collect or use the following information for recruitment purposes:

Contact details (eg name, address, telephone number or personal email address)
Date of birth
National Insurance number
Copies of passports or other photo ID
Employment history (eg job application, employment references or secondary employment)
Education history (eg qualifications)
Right to work information
Details of any criminal convictions (eg Disclosure Barring Service (DBS), Access NI or Disclosure Scotland checks)
Security clearance details (eg basic checks and higher security clearance)

Lawful bases
Our lawful bases for collecting or using personal information to provide services and goods are:

Consent
We obtain your consent to collect and use your personal information for specific purposes. You can withdraw your consent at any time by contacting us.

Contract
We process your personal information to fulfil our contractual obligations to you. This includes providing access to our on-demand learning platform, managing your account, and delivering the services you have requested. Without this data, we would not be able to provide the services you have signed up for.

Legal obligation
We are required to process certain personal information to comply with legal obligations. This includes retaining records for tax purposes, complying with regulatory requirements, and ensuring the security of our platform. We only process the data necessary to meet these obligations.

Legitimate interest:
Collecting your personal information helps us tailor our educational content to meet your specific learning and development needs, ensuring you receive the most relevant and effective learning experience. It also allows us to continually improve our services based on your feedback and engagement. We ensure that the information collected is minimal and directly relevant to the service improvement. You have control over the data you provide, and we use anonymised data wherever possible.
By understanding your preferences and behaviours, we can personalise the learning and community engagement experience, making it more engaging and effective. Personalised recommendations can help you achieve your career development goals more efficiently. We respect user privacy by providing clear options for you to manage your personalisation settings. We also use advanced security measures to protect user data. You have the right to object to this processing at any time.

Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are:

Consent
We obtain your explicit consent to collect and use your personal information for specific purposes related to the operation of your account and any guarantees associated with our services. For example, you may consent to receive account-related notifications and updates. You can withdraw your consent at any time by contacting us.
Contract
We process your personal information to fulfil our contractual obligations to you. This includes managing your account, providing the services you have requested, and honouring any guarantees or warranties associated with those services. Without this data, we would not be able to properly manage your account or fulfil our commitments.
Legal obligation
We are required to process certain personal information to comply with legal obligations. This includes retaining records for legal compliance, such as tax and financial regulations, and ensuring that we meet our legal responsibilities in the operation of customer accounts and guarantees.
Legitimate interest:
Collecting contact information and interaction history enables us to provide timely and relevant support, updates, and information about new courses and features. This enhances user satisfaction and helps them make the most of our platform. You can choose your preferred communication channels and opt out of non-essential communications. We only collect necessary information for effective communication.

Collecting certain personal information is crucial for maintaining the security of our platform and protecting users from fraudulent activities. This helps ensure a safe and trustworthy learning environment. We implement robust security protocols and regular audits to safeguard personal information. We inform users about the data collected for security purposes and how it is used. You have the right to object to this processing at any time.

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

Consent
We obtain your explicit consent to send you service updates and marketing communications. For example, you may opt-in to receive our newsletter or promotional emails by subscribing through our platform. You can withdraw your consent at any time by following the unsubscribe link in our communications or by contacting us directly.
Legitimate interest:
We may use your personal information for service updates and marketing activities based on our legitimate interests. These interests include informing you about updates to our services, new features, and relevant offers that may enhance your learning experience. We carefully balance our interests with your privacy rights and ensure that any impact on your privacy is minimised. You have the right to object to this processing at any time.

Our lawful bases for collecting or using personal information for research or archiving purposes are:

Consent
We obtain your explicit consent to use your personal information for specific research or archiving purposes. This might include participating in surveys, studies, or allowing us to archive certain data for historical analysis. You can withdraw your consent at any time by contacting us.

Legitimate interest:
We process your personal information based on our legitimate interests in conducting research and archiving data. This helps us improve our services, develop new offerings, and contribute to valuable insights and knowledge. We ensure that our legitimate interests do not override your privacy rights and interests, and we minimise any potential impact on your privacy. You have the right to object to this processing at any time.

Our lawful bases for collecting or using personal information for recruitment purposes are:

Consent
We obtain your explicit consent to collect and use your personal information for specific recruitment purposes. This includes processing your application, assessing your qualifications, and contacting you regarding job opportunities. You can withdraw your consent at any time by contacting us.

Contract
We process your personal information to take steps at your request prior to entering into a contract. This includes evaluating your suitability for employment, conducting interviews, and negotiating terms of employment if you are selected for a position.

Legitimate interest:
We process your personal information based on our legitimate interests in recruiting qualified candidates for our organisation or on behalf of your clients.. This includes managing recruitment processes efficiently, ensuring the best fit for roles, and maintaining effective workforce planning. We ensure that our legitimate interests do not override your privacy rights and interests, and we minimise any potential impact on your privacy. You have the right to object to this processing at any time.

Where we get personal information from
At Career Masterclass, we obtain personal information from the following sources:

Directly from You:

When you create an account or register for our services.
When you provide information through forms, surveys, or interactions with our platform.
When you communicate with us via email, chat, or other channels.

Automated Technologies:

We may collect personal information automatically through cookies and similar technologies when you visit our website or use our services. This includes information about your device, browsing actions, and patterns.

Third Parties:

We may receive personal information from third-party sources such as:
Service providers who assist us in providing services or processing transactions.
Publicly available sources to verify or supplement the information we hold.
Social media platforms if you choose to connect with us through these channels.

From Circle (for STRETCH Network):

If you join our STRETCH Network community hosted on Circle, we collect information you provide when joining the community, such as your name and email address.

From Google Workspace:

Information provided or generated when using Google Workspace tools for communication and document processing, such as email addresses and document content.

How long we keep information
We are committed to ensuring that your personal data is only retained for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our retention schedule is as follows:

Account Information:

Retention Period: For the duration of your account’s existence plus an additional 12 months after account deactivation.
Purpose: To provide ongoing services and support, and to allow for account reactivation within a reasonable period.

Course, Learning and Community Activity Data:

Retention Period: For the duration of your account’s existence plus an additional 12 months after account deactivation.
Purpose: To track progress, provide course completion certificates, and support learning analytics.
Communication Data (emails, support messages, etc.):

Retention Period: For the duration of your account’s existence plus an additional 12 months after account deactivation.
Purpose: To maintain a record of communications for customer support and service improvement.

Payment Information:

Retention Period: For the duration of your account’s existence plus an additional 12 months after account deactivation, unless a longer retention period is required by law (e.g., for financial and auditing purposes).
Purpose: To process payments and comply with legal obligations.

Usage Data (analytics, logs, etc.):

Retention Period: Retained in anonymized form for 24 months.
Purpose: To analyse platform usage, improve services, and develop new features.

Legal and Regulatory Compliance:

Retention Period: As required by applicable law.
Purpose: To comply with legal and regulatory obligations, including data retention laws and regulations.

Data Deletion
Upon reaching the end of the retention period, your personal data will be securely deleted or anonymised so that it can no longer be attributed to you. If you request the deletion of your data before the end of the retention period, we will make every effort to comply with your request, subject to any legal obligations to retain certain data.

Your Rights
You have the right to request access to the personal data we hold about you, to request correction of any inaccuracies, and to request deletion of your personal data. If you wish to exercise any of these rights, please contact us at su*****@ca***************.com

Who we share information with
Data processors
Digital Ocean

To ensure the reliability, performance, and security of our on-demand learning platform, we utilise Digital Ocean as our cloud infrastructure provider. Here’s how Digital Ocean plays a role in the handling of your personal data:

Hosting Services:

Role: Digital Ocean provides the servers and infrastructure that host our platform. This means that your personal data is stored and processed on Digital Ocean’s servers.
Location: Our servers are located in Europe, ensuring compliance with relevant data protection regulations.

Data Security:

Measures: Digital Ocean implements robust security measures to protect data stored on their servers. These measures include encryption, regular security audits, and compliance with industry standards.
Access Control: Digital Ocean does not access or use your personal data except as needed to provide their hosting services and ensure the security and performance of their infrastructure.

Compliance:

Regulations: Digital Ocean adheres to relevant data protection regulations, such as GDPR and CCPA, to ensure the security and privacy of your personal data.
Data Processing Agreement: We have a Data Processing Agreement (DPA) in place with Digital Ocean, which outlines their responsibilities and obligations regarding the handling of personal data.

Data Transfer:

International Transfers: If personal data is transferred outside of the European Economic Area (EEA), Digital Ocean ensures that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.

Your Rights and Data Protection
We remain responsible for your personal data and ensure that any third-party service providers, including Digital Ocean, comply with our data protection standards and obligations. We regularly review our agreements and practices to ensure ongoing compliance and security.

Others we share personal information with

Professional or legal advisors
Financial or fraud investigation authorities
Relevant regulatory authorities
External auditors or inspectors
Warranty and guarantee providers
Professional consultants
Organisations we’re legally obliged to share personal information with
Publicly on our website, social media or other marketing and information media (where appropriate)
Other relevant third parties:

Google Workspace

To facilitate communication, document processing, and storage within our organisation, we utilise Google Workspace. Here’s how Google Workspace plays a role in the handling of your personal data:

Communication Services:

Role: Google Workspace provides email (Gmail), calendar (Google Calendar), and chat (Google Chat) services that we use for internal and external communication.
Data Involved: This includes email addresses, email content, calendar events, and chat messages.

Document Processing and Storage:

Role: Google Workspace includes tools such as Google Drive, Google Docs, Google Sheets, and Google Slides for creating, editing, and storing documents.
Data Involved: Documents may contain personal data related to our services, such as user information, learning materials, and administrative records.

Data Security:

Measures: Google Workspace employs advanced security measures including data encryption in transit and at rest, multi-factor authentication, and regular security audits to protect the data stored on their platform.
Access Control: Access to data within Google Workspace is restricted to authorised personnel only, and Google does not access or use your personal data for any purpose other than providing the services.

Compliance:

Regulations: Google Workspace complies with relevant data protection regulations such as GDPR, CCPA, and other applicable laws, ensuring the security and privacy of personal data.
Data Processing Agreement: We have a Data Processing Agreement (DPA) in place with Google, which outlines their responsibilities and obligations regarding the handling of personal data.

Data Transfer:

International Transfers: If personal data is transferred outside of the European Economic Area (EEA), Google ensures that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.

Your Rights and Data Protection

We remain responsible for your personal data and ensure that any third-party service providers, including Google Workspace, comply with our data protection standards and obligations. We regularly review our agreements and practices to ensure ongoing compliance and security.

Circle

We use Circle to host our online community, the STRETCH Network. This section outlines how Circle handles personal data and the privacy measures in place:

Community Hosting:

Role: Circle provides the platform where our private community, the STRETCH Network, is hosted. This integration allows users of our on-demand learning platform to join and participate in the community.
User Consent: Users consent to join the STRETCH Network by clicking “Join Community” or “Accept Invite” which redirects to community.careermasterclass.com in our communications via our official marketing channels which include email, social media, virtual events, live events and conferences.

Data Collected by Circle:

Types of Data: When users join the community, Circle collects personal data such as name, email address, and profile information. Additionally, Circle may collect data on user interactions within the community, including posts, comments, and messages.
Purpose: This data is used to facilitate community interactions, manage user accounts, and improve the user experience within the community.

Data Security:

Measures: Circle implements robust security measures to protect user data, including encryption, access controls, and regular security audits.
Access Control: Circle restricts access to personal data to authorised personnel only and does not use personal data for any purposes other than providing and improving the community platform.

Circle Privacy Policy:

For a full description of Circle’s Privacy Notice on how they would handle any personal data visit: https://login.circle.so/privacy

Your Rights and Data Protection

We remain responsible for your personal data and ensure that any third-party service providers, including Circle, comply with our data protection standards and obligations. We regularly review our agreements and practices to ensure ongoing compliance and security.

Sharing information outside the UK
Where necessary, our data processors and/or third party service providers may share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place. Please contact us for more information.

Your data protection rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal data.
Your right to rectification – You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal data in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal data in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.
Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent.
You don’t usually need to pay a fee to exercise your rights. If you make a request, we have one calendar month to respond to you.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint