Community for First Steps

Privacy Policy

Last updated: [DATE]

1. WHO IS RESPONSIBLE FOR YOUR DATA

Community for First Steps Ltd (company number [COMPANY NUMBER], registered office [REGISTERED OFFICE ADDRESS]) is the data controller for personal data processed on this platform. Contact: [CONTACT EMAIL].

2. WHAT WE COLLECT

Applicants: name, email address, town and postcode, date of birth, the contents of your profile, CVs and documents you upload, your applications, bookmarks, messages, and notifications.

Businesses: company and contact details, the address you register, listing content and photos, applicant decisions and messages.

Everyone: account and security data (such as login events and verification codes), support and contact messages, and technical data covered in our Cookie Policy.

3. WHY WE USE IT (AND OUR LAWFUL BASES)

  • To run the platform: create accounts, show nearby placements using your postcode, send applications, deliver status updates, messages and notifications (performance of a contract).
  • To verify businesses before they can post (legitimate interests in a safe, trustworthy platform).
  • To send service emails such as sign-in codes, status updates and offer notifications (performance of a contract). We do not send marketing emails without consent.
  • To keep the platform safe: reviewing reports, preventing abuse (legitimate interests and legal obligations).
  • To produce anonymous, aggregated statistics about how the platform is used — these never identify individuals (legitimate interests).

4. YOUNG PEOPLE'S DATA

The platform is designed for 16-24 year olds, which means we knowingly process the personal data of people under 18. We take that seriously: we collect only what the service needs, businesses only see applicant details when the applicant applies to them, and direct contact between a business and an applicant only opens after a formal offer through the platform. If you are a parent or guardian with a question or concern, contact us at [CONTACT EMAIL].

5. WHO SEES YOUR DATA

  • Businesses you apply to see your application, profile details and CV.
  • We never sell personal data, and we do not share it with advertisers.
  • Service providers process data for us to run the platform: hosting and database infrastructure, email delivery, and the development platform the site is built on. They act under contract and only on our instructions. [LIST CURRENT PROVIDERS, e.g. hosting/database and email provider.]
  • We may disclose data where the law requires, or to protect users in a safeguarding emergency.

6. WHERE IT LIVES AND HOW LONG

Data is stored on secure cloud infrastructure [CONFIRM REGION, e.g. 'in the UK/EEA']. We keep personal data while your account is active and for a reasonable period afterwards, then delete or anonymise it. You can ask us to delete your account and data at any time.

7. YOUR RIGHTS

You have the right to access your data, correct it, delete it, restrict or object to processing, and receive a copy in a portable format. To use any right, email [CONTACT EMAIL]. We respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

8. SECURITY

We use appropriate technical and organisational measures, including access controls that restrict who can see what: applicant data is not publicly visible, and admin functions require separate authentication. No system is perfectly secure; if a breach affects your rights we will notify you and the ICO as the law requires.

9. CHANGES

We will post any changes here and flag material ones on the platform.