Privacy and Cookie Policy
Effective from: 09/10/2026, Version 1.1
Applies to: GoodPeople, goodwork.london and Net Zero Careers
Operated by The GoodPeople Business Ltd
Introduction
The GoodPeople Business Ltd (“GoodPeople”, “we”, “us”) is committed to protecting your personal information and respecting your privacy. This Privacy & Cookie Policy explains how we collect, use, store, share and protect your personal data when you use our platforms, including:
This includes the use of cookies, analytics tools, tracking technologies, and similar technologies. We are the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. What Personal Data We Collect
Information from other sources
- Job boards and recruitment platforms you apply through
- Referral, community and delivery partners who refer you to us with your agreement
- Employers and training providers, about the progress of applications or placements you take part in
We may receive personal data about you from:
2. Lawful Bases for Processing
- Contract - to provide services you request, including account creation, applications and programme participation
- Legitimate interests - to operate, secure and improve our platforms and services
- Consent - for non-essential cookies, marketing communications, optional referrals, and EDI data
- Legal obligation - to meet legal, regulatory and reporting requirements
We process personal data under the following lawful bases:
Where appropriate, more than one lawful basis may apply.
Special category data (EDI)
Optional EDI information is processed only with your explicit consent. You may withdraw consent at any time, and doing so will not affect your access to core services.
3. How We Use Your Personal Data
- Deliver employability, job-matching and training services
- Enable engagement with employers, providers and partners
- Personalise recommendations and content
- Communicate service updates and opportunities
- Provide support and respond to enquiries
- Send marketing communications where consent is given
- Produce anonymised insights and reporting
We use personal data to:
We do not make solely automated decisions that have legal or similarly significant effects.
4. Automated Decision-Making & AI Tools
We use automated tools to support functions such as job matching, training suggestions, search relevance, and platform integrity. These tools generate recommendations only and do not determine hiring or eligibility outcomes.
Employers and programme partners make all application and selection decisions. You may request human review of automated recommendations where applicable.
5. Sharing Your Personal Data
- Other GoodPeople group platforms
- Employers, training providers and delivery partners
- Local authorities, commissioners, charities and community partners
- Technology and service providers
We may share personal data with:
Partners may share relevant information back to us where necessary for service delivery or reporting. Depending on the circumstances, parties may act as controllers or processors, with roles governed by appropriate data-sharing or processing agreements.
- Where you have given consent
- Where required by law or for corporate transactions
We may also share data:
6. International Data Transfers
Where personal data is transferred outside the UK or EEA, appropriate safeguards are applied in line with UK GDPR requirements.
7. Data Retention
We retain personal data only for as long as necessary for the purposes described, after which it is deleted or anonymised. Typical maximum retention periods include:
- Candidate profiles: 4 years
- CVs & profile data: 4 years
- Employee accounts: 3 years
- Application history: 4 years (anonymised)
- EDI data: 12 months (then anonymised)
- Analytics logs: 24 months
- Customer service interactions: 24 months
- Marketing preferences: Until consent withdrawn
- Contracts/financial data: 6 years
- System backups: 30-90 days
You may request deletion at any time, subject to our legal obligations and lawful bases for processing.
8. Your Rights
- Access and correct your data
- Request erasure or restriction
- Object to certain processing
- Request data portability
- Withdraw consent at any time
Under UK GDPR, you have the right to:
You also have the right to complain to the Information Commissioner’s Office (ICO). We respond to requests within one month, in line with UK GDPR.
9. Cookies & Tracking Technologies
We use cookies and similar technologies to operate our sites, improve performance, analyse usage and support marketing activities where consent is given.
- Strictly necessary cookies (essential for site operation)
- Functional cookies (preferences and accessibility)
- Analytics cookies (consent required)
- Marketing cookies (consent required)
Cookies include:
You can manage your cookie preferences through our cookie banner and settings at any time. Our use of cookies complies with PECR and ICO guidance.
10. Data Security
We apply appropriate technical and organisational measures proportionate to risk to protect personal data, including secure hosting, access controls, encryption where appropriate, and data minimisation practices.
11. Contact Us
Privacy Lead
The Good People Business Ltd
The Exchange, Somerset House
Strand, London WC2R 1LA
12. Policy Updates
We may update this policy from time to time. Material changes will be communicated via our sites or email where appropriate.
© 2026 The Good People Business Ltd. All Rights Reserved.