Privacy Notice

1. Who we are

Opportunity Platform is operated by Tom J Storey Limited, a company registered in England and Wales (company number 11117035, registered office 5 Evelyn Road, Richmond, TW9 2TF), trading as Storey Consulting and Opportunity Platform. We act as a data controller for the personal information you provide when using this platform. You can contact us at privacy@opportunityplatform.co.uk.

[REVIEW PENDING - DAN: confirm registered address and ICO registration number]

2. Data we collect

• Identity data: name, email address, phone number, date of birth, postcode.
• Profile data: employment status, qualifications, skills, work history, CV file.
• Everyday skills: the levels you give yourself in the skills check, and levels an adviser records after working with you.
• Barriers to work (optional): things that make it harder for you to get work, such as transport, childcare, health or a criminal record. You record your own only if you agree to it, and you can delete them or withdraw that agreement at any time. An adviser may also record barriers you talk about, with a short note.
• Expert sessions: if you book a session with an expert, your booking, whether you came, any feedback you give, and how we checked your age (your date of birth, or your own confirmation). If you offer sessions yourself, your expert profile and sessions. If you join the weekly sessions email, your email address and the industries and place you chose.
• Application data: roles applied for, application status, interview records, placement outcomes.
• Usage data: pages visited, actions taken, device type, IP address, browser.
• Communications: messages sent through the platform, email correspondence.
• Acceptance records: timestamps and IP addresses of document acceptance events (this notice, the COI statement, and the Terms of Use).

3. How we use your data

[REVIEW PENDING - DAN: confirm retention periods with your data processor agreements]

4. Who we share your data with

• Council partners: anonymised placement and outcome data where required under an S106 Employment and Skills Plan. Never raw CV or contact details without your explicit consent.
• Employers: your CV and application details are shared with an employer only when you actively apply to their role. The employer then tells us how your application went: the stage it reached and when, whether you had an interview, when and whether you attended, whether you were offered the job, accepted and were hired, the job and your start date, and whether you are still in the job when a planning obligation asks (for example at 26 weeks). We use that, with the borough you live in, to evidence local employment for the development's planning obligation and for our own reporting on the platform. The employer's notes, scores and scorecards about you, the messages between you and the employer, interview notes and the documents and salary details of an offer are held by us only on the employer's behalf and are not used for our own purposes.
• Our team: your everyday skills and any barriers to work can be seen by the Opportunity Platform team and its employment advisers. They are never shown to employers.
• Councils and delivery partners, as totals only: councils and our delivery partners see only totals for their area (counts of skills and barriers), and only when at least 5 people are counted, so no one can be identified.
• Experts: when you book an expert session, the expert sees your first name and the first letter of your last name, and whether you came. Nothing else about you. Experts who run sessions open to people under 18 are checked by our team first.
• Infrastructure providers: cloud hosting (EU/UK data centres), email delivery, and analytics services under data processing agreements. We do not use US-based providers for personal data without appropriate transfer safeguards.
• We do not sell, rent, or trade your personal data with third parties for marketing purposes.

[REVIEW PENDING - DAN: list specific sub-processors with DPA references]

5. Your rights

Under UK GDPR you have the right to:

• Access a copy of your personal data (Subject Access Request)
• Correct inaccurate data
• Request erasure where there is no legal obligation to retain it
• Restrict or object to processing
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email privacy@opportunityplatform.co.uk. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the ICO at ico.org.uk/make-a-complaint.

6. Cookies

We use strictly necessary cookies to maintain your authenticated session. We use analytics cookies (PostHog, self-hosted) to understand platform usage. You can opt out of analytics cookies at any time via the cookie banner or your browser settings.

[REVIEW PENDING - DAN: confirm cookie banner implementation and opt-out mechanism]

7. Changes to this notice

We will notify you by email and/or in-platform prompt when we make material changes to this notice. The version date at the top of this page reflects the most recent update. Your continued use of the platform after notification constitutes acceptance of the revised notice.

8. Contact

For all privacy enquiries: privacy@opportunityplatform.co.uk

[REVIEW PENDING - DAN: add postal address if required by ICO]