Privacy Policy

Opportunity Platform is operated by Storey Consulting. We are the data controller for every borough tenant on this service. This policy explains how we collect, use, store and share your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

Storey Consulting is the data controller for this platform. If you have questions about how your data is handled, contact us at dan@storeyconsulting.co.uk.

What Data We Collect

We collect three bands of data. The first two are collected from you directly; the third is derived by the platform while you use it.

Standard personal data

• Name, email address, phone number, postcode
• CV, employment history, qualifications, skills
• Cover letters and screening answers you submit when applying

Special-category data (only with your explicit consent)

• Ethnicity, disability, date of birth (equality monitoring form)
• Priority-group status (receipt of benefits, long-term unemployment, ex-forces, care leaver)
• Signature image when an S106 declaration is legally required

You can skip any of these fields. If you do provide them, we treat them as Article 9 special-category data with additional access controls.

Data we derive from your activity

• Match scores between your profile and live opportunities
• Application history and interview outcomes
• Minimal session analytics (step reached in the apply flow, device family)

Why We Collect Your Data

• To match you with suitable jobs, training, and apprenticeships
• To pass your application to the employer you have applied to
• To schedule interviews and send interview reminders
• To report aggregate local-employment outcomes to the council for S106 monitoring
• To improve the service and respond to your support requests

Legal Basis for Processing

• Article 6(1)(b), contract. When you submit an application, we process your data to take steps at your request prior to a possible employment contract.
• Article 6(1)(f), legitimate interest. We match candidates to opportunities, run the platform, triage support, and produce aggregate reports on the legitimate interest of delivering local-employment outcomes under planning obligations.
• Article 9(2)(a), explicit consent. Special-category fields (ethnicity, disability, priority-group status, signature image) are collected only when you opt in on the relevant form.
• Article 6(1)(c), legal obligation. Application records are retained for 7 years to satisfy S106 audit requirements; this overrides any erasure request for the audit window, as explained below.

Automated Matching and Human Review

We match you to jobs based on your skills, your location, and (where you have consented) your priority-group status. This scoring is algorithmic, but the decision that matters to you is not fully automated: a human caseworker or the employer reviews every match before it becomes an interview invitation or a rejection.

You can ask a human to review any match, object to automated matching altogether, or ask us to explain why a particular job was or was not suggested to you. Email support@opportunityplatform.co.uk and we will respond within 30 days.

AI-Assisted Support

When you email support, we use a self-hosted AI model running on our own servers in Germany to suggest a draft reply. Your email is never sent to OpenAI, Anthropic, or any other third-party AI service, and no support content is used to train any model. A human reviews every reply before it is sent.

Who We Share Your Data With

We share your data only with the parties below, and only for the purpose listed. We do not sell your data. We do not share your data with any processor that reserves training rights over it.

• Employers you apply to. When you apply for a role, the hiring employer sees your name, contact details, CV, cover letter, and screening answers. They do not see your profile for any role you have not applied to.
• Your local council. Southwark Council and any other borough on whose behalf we operate receive only aggregated and anonymised statistics for S106 reporting. Your individual identity is not disclosed in these reports.
• Hetzner (Germany). Our hosting provider. All platform data is stored on Hetzner servers in Falkenstein, Germany.
• Resend (United States). Delivers our transactional emails (application confirmations, interview invitations, password resets). Data transfer is covered by a UK International Data Transfer Agreement.
• Cal.com (United States). Interview scheduling. Only your name, email, and booked time are shared. Data transfer is covered by a UK International Data Transfer Agreement.
• Google Calendar. Used to write interview events onto interviewer calendars. The event title and participant emails are shared; no CV or application content is sent to Google.
• Jitsi Meet. Self-hosted video calls for interviews. Jitsi sees only ephemeral call signalling, not your profile.
• Cloudflare. DNS, caching, and web application firewall. Cloudflare sees request metadata (IP, URL, user-agent) but not the body of your profile or application.

How Long We Keep Your Data

Our full retention policy is published internally and summarised here. Concrete windows:

• Active accounts: retained while you remain active on the platform.
• Inactive 24 months: personal details are anonymised; only aggregate counts remain.
• Unclaimed public enquiries: deleted after 90 days if you never signed in and never applied.
• Applications: retained for 7 years to meet S106 audit and UK public-sector retention standards. This is a legal obligation we cannot waive.
• Login sessions: 180 days rolling.
• Analytics events: 90 days.
• Audit log and billing records: 7 years.

Your Rights

Under the UK GDPR you have the following rights. To exercise any of them, email support@opportunityplatform.co.uk from your registered address. We respond within 30 days.

• Right of access. Request a copy of the personal data we hold about you.
• Right to rectification. Ask us to correct anything inaccurate or incomplete.
• Right to erasure. Ask us to delete your personal data. Application records held for the 7-year S106 audit window are retained under Article 6(1)(c), so those specific rows survive the request; we confirm exactly which rows are retained and why in our written reply.
• Right to data portability. Receive your data in a structured, commonly used format.
• Right to object. Object to automated matching, or to any processing based on legitimate interest, and we will either stop or give you a reasoned basis for continuing.
• Right to withdraw consent. Withdraw any consent you have given (for example, on special-category fields) at any time, without affecting earlier lawful processing.

Cookies

We use only cookies that are essential for the platform to work.

• Session cookie. Keeps you signed in.
• Site access cookie. Remembers your passcode entry so you do not re-enter it on each visit.

We do not use third-party advertising or analytics cookies.

Contact Us

For data access requests, questions about this policy, or to exercise any of your rights, contact us at support@opportunityplatform.co.uk.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.