Privacy Policy

Work For Future Ltd ("Company", "we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services (collectively, the "Services"). This policy applies to all users of the Services, including Talent, Employers, and visitors. By using the Services, you consent to the practices described in this policy.

Work For Future Ltd is the data controller for the personal data processed through the Services. We are registered in England and Wales and can be contacted at the address listed at the end of this policy. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are responsible for determining the purposes and means of processing your personal data.

We collect the following categories of information: (a) Account information, including your name, email address, password, and profile photograph; (b) Professional information, including your CV, skills, work experience, education, salary expectations, and cause preferences; (c) Employer information, including company name, mission statement, team size, and job listing details; (d) Usage data, including pages visited, features used, search queries, and interaction patterns; (e) Device and technical data, including IP address, browser type, operating system, and device identifiers; (f) Communication data, including messages sent through the Platform and support inquiries; (g) Payment information, including billing address and payment method details processed by our third-party payment provider.

We use your information to: (a) provide, operate, and maintain the Services; (b) create and manage your account; (c) generate AI-powered mission match scores between Talent and Employers; (d) facilitate communication between matched parties; (e) process payments and manage subscriptions; (f) send service-related notifications and updates; (g) personalise your experience and provide tailored recommendations; (h) analyse usage patterns to improve the Services; (i) detect, prevent, and address fraud, abuse, and security issues; (j) comply with legal obligations and enforce our Terms of Service; (k) conduct research and analytics in aggregated, anonymised form.

We process your personal data on the following legal bases under the UK GDPR: (a) Contractual necessity -- processing required to perform our contract with you, such as providing the matching service; (b) Legitimate interests -- processing necessary for our legitimate business interests, such as improving the Services and preventing fraud, where these interests are not overridden by your rights; (c) Consent -- where you have given clear consent for us to process your personal data for specific purposes, such as marketing communications; (d) Legal obligation -- processing required to comply with applicable laws and regulations.

Our Mission-Match engine uses automated processing, including profiling, to generate match scores between Talent and Employers. This processing analyses your skills, experience, cause preferences, and stated values against employer requirements and mission statements. Match scores are recommendations only and do not result in automated decision-making with legal or similarly significant effects. You may request human review of any match outcome by contacting our support team. We regularly audit our algorithms for bias and fairness across protected characteristics.

We share your information with: (a) Employers, when you apply to a role or are presented as a match (Talent profile data only); (b) Service providers who assist in operating the Platform, including hosting, analytics, payment processing, and customer support providers, all bound by data processing agreements; (c) Professional advisors, including legal, accounting, and insurance advisors as necessary; (d) Law enforcement or regulatory bodies when required by law or to protect our rights; (e) In connection with a merger, acquisition, or sale of assets, where your data may be transferred to the successor entity. We do not sell your personal data to third parties.

We retain your personal data for as long as your account is active or as needed to provide the Services. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as resolving disputes or enforcing our agreements. Anonymised and aggregated data that cannot identify you may be retained indefinitely for analytics and research purposes. Employer job listing data is retained for 12 months after the listing closes.

Your personal data may be transferred to, and processed in, countries outside the United Kingdom. Where we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office, adequacy decisions, or your explicit consent. Our primary data processing occurs within the United Kingdom and European Economic Area.

Under the UK GDPR, you have the following rights: (a) Right of access -- to request a copy of the personal data we hold about you; (b) Right to rectification -- to request correction of inaccurate personal data; (c) Right to erasure -- to request deletion of your personal data in certain circumstances; (d) Right to restriction -- to request restriction of processing in certain circumstances; (e) Right to data portability -- to receive your data in a structured, machine-readable format; (f) Right to object -- to object to processing based on legitimate interests or for direct marketing; (g) Rights related to automated decision-making -- to not be subject to solely automated decisions with legal effects. To exercise these rights, contact us at privacy@workforfuture.io. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office.

We use cookies and similar tracking technologies to operate the Services, remember your preferences, and analyse usage. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy at /legal/cookies.

The Services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete such data promptly. If you believe a child has provided us with personal data, please contact us at privacy@workforfuture.io.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, regular security assessments, and staff training. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on the Platform, updating the "Last updated" date, and where appropriate, sending you an email notification. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at privacy@workforfuture.io or write to us at Work For Future Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. You may also contact the UK Information Commissioner's Office at ico.org.uk if you have concerns about how we handle your personal data.