Legal
Privacy Notice
Last updated: May 2026 [REVIEW PENDING - DAN]
1. Who we are
Opportunity Platform is operated by Storey Consulting Ltd, registered in England and Wales. We act as a data controller for the personal information you provide when using this platform. You can contact us at privacy@opportunityplatform.co.uk.
[REVIEW PENDING - DAN: confirm registered address and ICO registration number]
2. Data we collect
- Identity data: name, email address, phone number, date of birth, postcode.
- Profile data: employment status, qualifications, skills, work history, CV file.
- Application data: roles applied for, application status, interview records, placement outcomes.
- Usage data: pages visited, actions taken, device type, IP address, browser.
- Communications: messages sent through the platform, email correspondence.
- Acceptance records: timestamps and IP addresses of document acceptance events (this notice, the COI statement, and the Terms of Use).
3. How we use your data
| Purpose | Lawful basis | Retention |
|---|---|---|
| Creating and managing your account | Contract | 3 years after last active session |
| Matching you with local job opportunities | Consent / contract | Duration of account |
| Reporting S106 employment outcomes to councils | Legal obligation | 7 years (statutory) |
| Sending platform notifications and reminders | Legitimate interests | Until unsubscribe or account deletion |
| Audit trail of PII access by admin staff | Legal obligation / legitimate interests | 3 years |
| Improving platform performance and detecting fraud | Legitimate interests | 90 days for raw logs |
[REVIEW PENDING - DAN: confirm retention periods with your data processor agreements]
4. Who we share your data with
- Council partners: anonymised placement and outcome data where required under an S106 Employment and Skills Plan. Never raw CV or contact details without your explicit consent.
- Employers: your CV and application details are shared with an employer only when you actively apply to their role.
- Infrastructure providers: cloud hosting (EU/UK data centres), email delivery, and analytics services under data processing agreements. We do not use US-based providers for personal data without appropriate transfer safeguards.
- We do not sell, rent, or trade your personal data with third parties for marketing purposes.
[REVIEW PENDING - DAN: list specific sub-processors with DPA references]
5. Your rights
Under UK GDPR you have the right to:
- Access a copy of your personal data (Subject Access Request)
- Correct inaccurate data
- Request erasure where there is no legal obligation to retain it
- Restrict or object to processing
- Data portability (receive your data in a machine-readable format)
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, email privacy@opportunityplatform.co.uk. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the ICO at ico.org.uk/make-a-complaint.
6. Cookies
We use strictly necessary cookies to maintain your authenticated session. We use analytics cookies (PostHog, self-hosted) to understand platform usage. You can opt out of analytics cookies at any time via the cookie banner or your browser settings.
[REVIEW PENDING - DAN: confirm cookie banner implementation and opt-out mechanism]
7. Changes to this notice
We will notify you by email and/or in-platform prompt when we make material changes to this notice. The version date at the top of this page reflects the most recent update. Your continued use of the platform after notification constitutes acceptance of the revised notice.
8. Contact
For all privacy enquiries: privacy@opportunityplatform.co.uk
[REVIEW PENDING - DAN: add postal address if required by ICO]