1. Introduction

Welcome to careersnavigator.co.uk (the Website).

This Privacy Policy explains how Careers Navigator (a subsidiary of NetWORK NotWORK CIC, Company Number 15419367) (we, us, our) collects, uses, stores, and shares personal data when you use our Website or take part in our services.

We are committed to protecting personal data and respecting your privacy. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who this policy applies to

This policy applies to:

• • Website visitors
  • Parents and guardians
  • Children and young people who use our services
  • Schools, training providers, local authorities, organisations, and partners
  • People who contact us, make enquiries, or buy services

3. Who is responsible for your data (the controller)

We are the data controller for personal data collected through the Website and for most direct relationships with parents/guardians and organisations.

Contact details

Email: info@careersnavigator.co.uk
Phone: 07775 914711
Address (registered): NotWORK Business Hub, 4b Evolution, Wynyard Avenue, Wynyard, TS22 5TB
Working with schools and providers

Where a school, training provider, or other organisation buys services for Learners, that organisation may be the data controller for Learner data, and we may act as a data processor when we process data on their instructions (for example, to provide reporting). In some cases, we may be a separate controller for parts of our service (for example, safeguarding and service administration). We will clarify roles in the relevant contract and order form.

4. The information we collect

A) Information you provide to us

When you contact us, make an enquiry, or book services, we may collect:

Name
Email address
Phone number
Organisation name and role (where relevant)
Child/young person’s age or programme interest (where relevant)
Messages and enquiry details

B) Programme participation data (learning data)

If you take part in our services (including via our learning platform), we may collect:

Account details (for example, username, email address, and role)
Progress and activity data (for example, XP points and badges earned)
Participation and engagement information
Feedback, reflections, and evidence submitted during activities

C) Payment and transaction data

If you pay for services:

For parents/guardians, payments may be processed via Stripe.
For organisations, payments and invoicing may be managed via Sage.
We do not store full card details. Payment providers will process payment data in line with their own privacy policies.

D) Automatically collected data

When you use the Website, we may collect:

IP address
Browser and device information
Pages visited and time spent
Referral source (where available)
E) Cookies and analytics

We use cookies and similar technologies to:

help the Website work properly,
understand how people use the Website, and
improve performance.
We use Google Analytics.

We do not currently use advertising or retargeting pixels.

5. Children’s data

Our services are designed for children and young people aged 8–24.

Under-13s and parental consent (intended approach)

We intend to require parent/guardian consent where it is needed, including for children under 13.

Where a child is under 13, we intend to use a parent/guardian-managed account (or a similar approach) so that a parent/guardian can oversee access.

What we do to protect children

We:

only collect data we need to deliver the service,
design learning to be safe, supportive, and inclusive, and
take safeguarding seriously.

6. Special category data

We do not intend to collect special category data (for example, health data, disability information, ethnicity, religious beliefs, or biometric data) through the Website or our standard Programme processes.

If special category data is ever shared with us (for example, in free-text messages), we will handle it with extra care and limit access.

7. How we use personal data

We use personal data to:

respond to enquiries and requests,
provide information about our programmes and services,
deliver learning experiences and track progress,
provide reporting to schools/providers where agreed,
manage bookings, orders, invoices, and payments,
improve our Website and services,
send service messages (for example, onboarding and important updates),
send marketing communications where you have opted in, and
support safeguarding and safe delivery.

8. Legal bases for processing (UK GDPR)

We rely on the following legal bases:

Consent (for example, where you opt in to marketing)
Contract (where we need data to deliver paid services)
Legitimate interests (for example, improving services, preventing misuse, and service administration)
Legal obligation (for example, where required by law)

Where we process children’s data, we take additional care to ensure processing is fair and transparent.

9. Sharing your information

We may share personal data with:

Service providers who help us run the Website and services (for example, IONOS hosting, Google Analytics, Go High Level, Stripe, and Sage)
Schools, training providers, or organisations you are linked to (for example, for reporting and progress updates)
Professional advisers (for example, legal or accounting) where needed
Regulators, law enforcement, or safeguarding authorities where required
We do not sell personal data.

10. International transfers

Some of our service providers may store or process data outside the UK.

Where personal data is transferred outside the UK, we will take steps required by UK GDPR to protect it (for example, using appropriate safeguards such as the UK International Data Transfer Agreement or other approved mechanisms).

11. Data retention

We keep personal data only as long as needed for the purposes set out in this policy, including:

delivering services,
tracking learner progress and outcomes, and
meeting legal, tax, and safeguarding requirements.

12. Data security

We use appropriate technical and organisational measures to protect personal data, including:

access controls,
secure systems, and
regular review of data handling.
No system is completely secure, but we take reasonable steps to protect your information.

13. Your rights

Under UK data protection law, you have rights including:

• • access to your data
  • correction
  • deletion
  • restriction
  • objection
  • data portability (in some cases).

You can also withdraw consent at any time where we rely on consent.

To exercise your rights, contact: info@careersnavigator.co.uk

14. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

15. Third-party links

The Website may include links to third-party websites. We are not responsible for their privacy practices.

16. Complaints

If you have concerns, please contact us first so we can try to resolve them.

You also have the right to complain to the UK Information Commissioner’s Office (ICO): https://www.ico.org.uk

17. Changes to this policy

We may update this Privacy Policy from time to time. We will post changes on this page and update the effective date.

End of Privacy Policy