Legal

Terms of Service

Last updated: October 2026

These Terms of Service govern your use of the Opportunity Platform platform, operated by Tom J Storey Limited, a company registered in England and Wales (company number 11117035, registered office 5 Evelyn Road, Richmond, TW9 2TF), trading as Storey Consulting and Opportunity Platform. By registering for an account or using this platform, you agree to be bound by these terms. If you do not agree, please do not use the platform.

Service Description

Opportunity Platform connects local residents with job opportunities, training programmes and apprenticeships arising from the Pearl Yard development in Southwark. The platform facilitates job matching, application submission, interview scheduling and community event registration.

Eligibility

To use this platform you must be at least 16 years of age and a UK resident. By creating an account, you confirm that you meet these requirements. We may request proof of eligibility at any time.

Account Responsibilities

When you create an account, you agree to:

Provide accurate and truthful information during registration
Keep your login credentials secure and not share them with others
Keep your profile information up to date
Notify us immediately of any unauthorised use of your account
Not use the platform for any unlawful or fraudulent purpose

Job Posting Rules

Employers who post opportunities on the platform must:

Provide accurate descriptions of the role, requirements and compensation
Comply with all applicable employment legislation, including the Equality Act 2010
Not post discriminatory, misleading or fraudulent listings
Respond to applications in a timely and professional manner

We reserve the right to remove any listing that does not meet these standards.

Application Process

When you apply for a position through the platform, your application details (including your name, contact information, CV and any additional information you provide) will be shared with the relevant employer. By submitting an application, you consent to this sharing. We act as a facilitator and are not a party to any employment relationship between you and an employer.

No Guarantee of Employment

While we work to connect residents with genuine opportunities, we do not guarantee that you will receive an interview, an offer of employment, or a training placement. All hiring decisions are made by employers and training providers at their sole discretion.

Intellectual Property

All content on this platform, including text, graphics, logos, design and software, is the property of Tom J Storey Limited or its licensors and is protected by copyright and intellectual property laws. You may not reproduce, distribute or create derivative works from any content on this platform without our prior written consent. Content you submit (such as your CV) remains your property, but you grant us a licence to use it for the purposes described in our Privacy Policy.

Limitation of Liability

The platform is provided on an “as is” and “as available” basis. To the fullest extent permitted by law:

We make no warranties regarding the accuracy, completeness or reliability of any content or listings on the platform.
We are not liable for any indirect, incidental, special or consequential damages arising from your use of the platform.
We are not responsible for the actions, conduct or content of employers or other users of the platform.

Nothing in these terms excludes or limits liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded by law.

Termination

You may close your account at any time by contacting us. We reserve the right to suspend or terminate your account if you breach these terms, provide false information, or use the platform in a manner that is harmful to other users or the operation of the service. Upon termination, your data will be handled in accordance with our Privacy Policy.

Employer terms, free trial and data processing agreement

These terms are between your organisation and Tom J Storey Limited, a company registered in England and Wales (company number 11117035, registered office 5 Evelyn Road, Richmond, TW9 2TF), trading as Storey Consulting and Opportunity Platform ("we", "us"). They apply to every employer account, on a free trial or not, and the person who accepts them confirms they are authorised to do so on behalf of their organisation. Part A covers the service and the free trial. Part B is the data processing agreement for applicant data your organisation handles through Hiring Desk. The rest of these Terms of Service also apply; where they conflict with this section on employer matters, this section wins. An employer accepts them when it signs up. Version 2026-10-03.

Part A. The service and the free trial

The free trial. A free trial of Hiring Desk lasts 30 days from the day your account is created. During the trial you may have up to 3 live jobs at a time (drafts do not count), up to 2 users on your account (you included), and a lower hourly cap on messages sent from Hiring Desk than a contracted account has. A careers page on your own domain and linked job feeds are not included.
No charge and no obligation. The trial is free. We will not ask for payment details during it and you are under no obligation to buy anything at the end of it.
When the trial ends. Your account becomes read only: your live jobs are paused and taken off public listings, and no new jobs can be added. Applicants already in your pipeline stay visible and workable, so you can still move them on, hold interviews you have offered and send them messages. At our discretion we may extend a trial once, by 14 days.
Closure. If no contract is in place 60 days after the trial ends, we close the account. We also close an account when its contract ends, and whenever you ask us to by writing to privacy@opportunityplatform.co.uk. A closed account and its careers page are no longer shown. Closing the account ends the data processing agreement in Part B, and the data we process for you is then returned on request and deleted as set out under "At the end" in Part B.
Paid use. Using the service after a trial, or beyond the trial limits, needs a signed order form with us. The order form sets the plan, the fees and the term, and these terms apply to it.
Accepting these terms. Every employer account must accept these terms. An account opened before they were introduced must accept them by 1 December 2026. After that date, until they are accepted, your team cannot add team notes, scores or scorecards, send Hiring Desk emails or reply in an application’s message thread; applicants can still be moved on, including being made an offer, interviews already offered still go ahead, and applicants can still write to you.
Acceptable use. You will advertise only genuine vacancies that you, or a client you are authorised to recruit for, intend to fill. You will recruit lawfully and without discrimination, including under the Equality Act 2010 and the rules on the right to work. You will not scrape, copy in bulk or harvest data from the platform by automated means, and will not try to get round the trial limits or access controls. You will use applicant data only to recruit for the job the person applied to, never for marketing or any unrelated purpose, and will not share it outside your organisation except with your own processors.
Suspension. We may suspend or close an account that breaks these terms, puts applicants at risk or is used for fraud, and will tell you why unless the law or the risk to others prevents it.
Your account. You are responsible for the people you give access to your account, and for keeping their sign-in details secure. Tell us at once if you think your account has been used without your permission.

Part B. Data processing agreement (UK GDPR Article 28)

Roles. For applicant data your organisation handles through Hiring Desk (moving applicants through stages, scoring, scorecards, interview scheduling, offers, team notes and messages between your team and applicants for your jobs), your organisation is the controller and we are your processor for those hiring activities. For the resident’s own platform profile, their account, the applications they make on the platform, their job matching, the hiring outcomes described in the next clause and the evidence we keep for planning obligations under Section 106 agreements, we remain the controller in our own right, and nothing in this agreement makes us your processor for those.
Hiring outcomes you share with us as a controller. So that we can monitor and evidence the local employment commitments in planning obligations, and run our own reporting on the platform, your organisation, as controller, discloses to us, as an independent controller, the outcome of each application made through the platform: the stage each application reached and when; whether an interview was held, when, and whether the person attended; whether an offer was made, whether the person accepted it and whether they were hired; the job and the start date; whether the person is still in the job when a planning obligation asks, for example at 26 weeks. We combine these with what we already hold about the person, such as the borough they live in, to record whether a hire is local. We use them only for those purposes, as our own privacy notice tells residents. Team notes, scores, scorecards, messages between your team and applicants, interview notes, the names and contact details of your interviewers, meeting links, offer documents and salary details, and your hiring panels are never part of this disclosure: we hold them only as your processor.
Your responsibilities as controller. As controller of the applicant data it handles through Hiring Desk, your organisation: (i) has a lawful basis for that processing and for disclosing hiring outcomes to us under the clause above, and gives applicants its own privacy information about its notes, scores, scorecards, messages and hiring decisions; (ii) makes sure the instructions it gives us, through these terms and its use of Hiring Desk, comply with data protection law; (iii) is responsible for the accuracy and lawfulness of what its team records in Hiring Desk; and (iv) has the right to give us instructions under this agreement, and to receive the help, information and audits this agreement provides for.
Recruiting for a client. Where you recruit for a client, you confirm either that you are the controller of the applicant data you handle through Hiring Desk for that client, or that your client is the controller and has authorised you to appoint us as a sub-processor on these terms. In the second case you will pass these obligations on to your client in writing, give us your client’s instructions only through these terms and your use of Hiring Desk, and tell us at once if that authorisation ends.
Subject matter and duration. The subject matter is the hiring activities above. This agreement lasts for as long as your account is open, and then until we have deleted the personal data as set out below.
Nature and purpose. Storing, organising, displaying, sending and deleting applicant data so that your organisation can review applications, communicate with applicants, schedule and hold interviews and record hiring decisions for your jobs.
Types of personal data. Applicants’ names and contact details, CVs and cover letters, answers to screening questions, work history, skills and qualifications; interview times, arrangements, meeting links and attendance; stage history; offers, offer documents and salary details; notes, scores, scorecards and messages; and the names and contact details of your team members and interviewers, including your hiring panels. Equality monitoring answers are never shown to employers.
Categories of data subjects. People who apply to your jobs through the platform, and the members of your team who use Hiring Desk.
Your instructions. We will process this personal data only on your documented instructions, which are these terms and the way you use Hiring Desk, unless the law requires otherwise. If it does, we will tell you before processing unless the law forbids it. We will tell you at once if we think an instruction breaks data protection law.
Confidentiality. Everyone we authorise to process this personal data is bound by a duty of confidentiality, by contract or by law, and has access only as far as their role needs.
Our staff. Our staff look at the data we process for you only on your instructions under this agreement: to give support you ask for, to provide the recruitment support we offer you on the developments you recruit for (helping you find, shortlist and support local applicants for your jobs), to keep the service secure and deal with abuse, and to meet a legal obligation. Our support and administration staff can see every part of Hiring Desk for those purposes. Our delivery team, who give that recruitment support, can see applications, team notes, scores and scorecards, and can read and reply in the message thread on an application, but do not send Hiring Desk emails. We never use team notes, scores, scorecards or messages for our own purposes, including our planning obligation reporting, evidence and job matching. Applicants’ contact details are masked by default for our staff and every reveal is logged.
Security. We take the technical and organisational measures Article 32 requires, including encryption in transit, encrypted file storage, database backups kept for no more than 35 days in storage only our administrators can reach, private file storage with short lived access links, access limited by role and to your own organisation, applicants’ contact details masked by default for our staff with every reveal logged, and an incident response process. Our security and data protection controls are documented and reviewed, and a summary is on our Trust and Security page.
Sub-processors. You give us general written authorisation to use sub-processors. The current list is kept at /trust#sub-processors. We will tell you about any intended addition or replacement at least 30 days before it takes effect, by email to your account contact and by updating that list, and you may object on reasonable data protection grounds within that time. If we cannot address your objection, you may end your use of the service without charge for the affected part. We impose on each sub-processor, by written contract, the same data protection obligations as this agreement sets out, in particular sufficient guarantees of appropriate technical and organisational measures, and we remain fully responsible to you for its work.
Services you connect yourself. If your organisation connects its own account with another service, such as its own Cal.com account for interview booking, or uses a meeting link from its own provider, such as Google Meet, Zoom or Microsoft Teams, that service is your organisation’s own processor, under your own contract with it, and not our sub-processor. We pass applicant data to it only on your instruction, given by your connecting or using it.
Data subject rights. Taking into account the nature of the processing, we will help you by appropriate technical and organisational measures to answer requests from applicants to exercise their rights. If an applicant contacts us about data we process for you, we will pass the request to you without undue delay and will not answer it ourselves unless you ask us to or the request also concerns data we control.
Your other obligations. We will help you, taking into account the nature of the processing and the information available to us, to meet your obligations under Articles 32 to 36: security, notifying personal data breaches to the regulator and to individuals, data protection impact assessments and prior consultation with the regulator.
Personal data breaches. We will tell you without undue delay after becoming aware of a personal data breach affecting data we process for you, with the information you need to meet your own obligations, and will keep you updated as we learn more.
At the end. This agreement ends when your account is closed: automatically 60 days after a trial ends with no contract; by us when a contract ends; or when you ask us to close your account at privacy@opportunityplatform.co.uk, which you may do at any time. Until 60 days after closure you may ask us at privacy@opportunityplatform.co.uk to return the data we process for you, and we will send it to you in a common electronic format within one month. We then delete or return it as you choose and, in any case, delete team notes, scores, scorecards, messages between your team and applicants, interview notes, the names and contact details of your interviewers, meeting links, offer documents and salary details, and your hiring panels within 90 days of closure, unless the law requires us to keep them. Copies left in our database backups are deleted as those backups expire, no later than 35 days after we delete the data. This clause does not cover what we hold as controller in our own right: the resident’s own profile and applications, and the hiring outcomes and planning obligation evidence described above.
Audit and information. We will make available to you the information needed to show that we meet Article 28, and will allow for and contribute to audits, including inspections, by you or an auditor you appoint, on reasonable notice, during business hours, no more than once a year unless a breach or the regulator requires it, and subject to confidentiality.
International transfers. We will not transfer this personal data outside the UK unless the transfer is covered by UK adequacy regulations or another appropriate safeguard under UK GDPR Chapter V, such as the UK International Data Transfer Agreement or Addendum.
Liability. Each party’s liability under this agreement is subject to the limitations of liability in these Terms of Service and in any order form between us.
Contact. Questions about this agreement, requests to return data, sub-processor objections and audit requests go to privacy@opportunityplatform.co.uk.

The current list of sub-processors is on our Trust and Security page. If your organisation connects its own recruitment system, the data sharing terms below also apply to that connection.

Data sharing terms for connecting your recruitment system

Separate controllers. For applications we send into your recruitment system, and for what you keep about applicants and the people you hire there, your organisation is an independent controller under UK data protection law, not our processor and not a joint controller. We remain the controller of what we hold on the platform.
One purpose. You will use applicants’ information we send you only to consider them for the job they applied to and to recruit for it, and for no other purpose, including marketing, unless the applicant has separately agreed with you.
What we send. Only the applicant’s name, email address, phone number and cover letter, and only for applicants who applied on the platform to one of your jobs that you have matched to a job in your recruitment system. We never send equality monitoring answers.
What we read back. Your open jobs and, when hires are switched on, whether someone was hired for a matched job, the job and the start date. We use hires only to evidence local employment for the development’s planning obligations, and we confirm the person before recording a hire against them.
Your notice to applicants. Your own privacy notice covers applicants once their application is in your system, including any messages your system sends them directly, and tells the people you hire that their hire may be reported to us for planning obligation evidence.
Erasure, objection, restriction and correction. When an applicant asks us to erase their data, objects to their application being in your system, asks us to restrict the use of their data, or asks us to correct it and we do, we will tell you. You will act on that notice within one month. For erasure or objection, erase the applicant’s data from your system unless you have your own lawful reason to keep it, and tell us if you keep it. For restriction, keep the data but do not otherwise use it (for example, do not progress, contact or share the application) unless the applicant agrees or UK GDPR Article 18(2) allows it, and tell us if you cannot. For correction, update the applicant’s record in your system. You will tell us promptly about any request you receive that concerns data we sent you or that you send us.
Your recruitment system supplier. Your supplier is your processor under a contract that meets UK GDPR Article 28. If it stores or accesses data outside the UK, you confirm that the transfer is covered by UK adequacy regulations (for example for the EU and EEA, or a US supplier certified to the UK Extension to the EU-US Data Privacy Framework) or by the UK International Data Transfer Agreement or Addendum.
Security and breaches. You will keep the access key you give us confidential to us, give it the least access the connection needs, and revoke it when you disconnect. Each of us will tell the other without undue delay, and within 72 hours at the latest, of any personal data breach affecting data shared through the connection.
Retention. You will keep applicants’ data in your system only as long as your own retention policy allows for recruitment records. When you disconnect, we delete the key and stop sending and reading at once; data already in your system stays under your control and these terms.
Review. We may update these terms. If we do, we will ask you to accept the new version before we send any more applications into your system or read any more hires from it.

Governing Law

These terms are governed by and construed in accordance with the laws of England and Wales. Any disputes arising from these terms or your use of the platform shall be subject to the exclusive jurisdiction of the courts of England and Wales.

Changes to These Terms

We may update these terms from time to time. We will notify registered users of any material changes by email. Your continued use of the platform after changes are published constitutes acceptance of the revised terms.

Contact Us

If you have any questions about these terms, please contact us at support@opportunityplatform.co.uk.