DATA PROTECTION
CareerHigher Privacy Policy
FEATURED ON
How We Use Personal Information
This notice explains how CareerHigher Ltd uses personal information about website visitors, prospects, clients, employers, recruiters, and other professional contacts involved in clients’ searches, and your rights. It is not part of the service contract.
1. Who is responsible
CareerHigher Ltd, company number 12556226, is generally the controller of the personal information described here. Our registered office is International House, 64 Nile Street, London, N1 7SR, United Kingdom. Our Chief Operating Officer oversees data-protection matters. Contact info@careerhigher.co for privacy questions, rights requests or complaints.
Our services are intended for adults aged 18 or over. We take appropriate steps to remove children’s information held unnecessarily or collected inappropriately.
2. Information we use and where it comes from
We use information relevant to the interaction or service, including:
- Identity and contact details; inquiries, discovery-call and sales notes; preferences; contracts, billing and payment records.
- CVs, professional profiles, career history, skills and achievements; target roles, compensation and location preferences; relevant right-to-work information; applications, outreach, interviews and search progress.
- Communications, coaching notes, edited or generated documents, feedback, testimonials and permission records.
- Relevant professional contacts’ names, business contact details, roles, organizations and communications.
- Technical and security information, such as IP address, browser/device details, access records and website preferences, where collected.
Information comes from you, our work, clients identifying professional contacts, authorized providers, and communications or search-progress information from employers, recruiters and other contacts. We also research public professional sources, employer and company websites, job boards, professional and business networks, and recruitment or executive-search sources.
If information is needed to assess your request, enter into a contract, deliver the service or process payment, withholding it may prevent that part of the service. We explain where a requested item is optional. Please keep material information current and provide other people’s information only where lawful and appropriate.
3. Purposes and lawful bases
Where UK or EU data protection law applies, we use the following bases. Accepting our service contract does not constitute blanket consent to processing.
Purpose
Respond to your inquiry and assess the service you request.
Basis and relevant interests
Steps at your request before a contract; legitimate interests in handling other business inquiries and keeping appropriate sales records.
Purpose
Plan and deliver your service, prepare documents, manage the search, carry out agreed applications and outreach, communicate and provide support.
Basis and relevant interests
Performance of our contract with you. For information about other people, legitimate interests in supporting a relevant professional search and facilitating appropriate professional contact.
Purpose
Research and contact relevant employers, recruiters, and professional contacts.
Basis and relevant interests
Legitimate interests in identifying appropriate opportunities, making relevant professional introductions and managing communications, balanced against the contact’s rights and reasonable expectations. Electronic-communications rules apply separately.
Purpose
Process payments and maintain contracts and accounting records.
Basis and relevant interests
Contract performance for payment administration; legal obligations for required tax/accounting records; legitimate interests in proportionate financial administration and establishing or defending claims.
Purpose
Maintain security, prevent misuse, manage suppliers, improve quality, and resolve complaints.
Basis and relevant interests
Legitimate interests in secure, reliable services and proportionate improvement, quality review, and dispute handling; legal obligations where a specific duty applies.
Purpose
Send CareerHigher marketing.
Basis and relevant interests
Consent where required; otherwise legitimate interests only where applicable marketing rules permit. You can opt out at any time.
Purpose
Publish identifiable testimonials or case studies.
Basis and relevant interests
Your separate, optional consent. We use genuinely anonymous, non-confidential results without identifying you.
We assess the necessity and impact of legitimate-interest processing; you may ask about that assessment and object as explained below. We also process information where necessary for legal obligations, lawful authority requests, or legal claims. Genuinely anonymized information may support analysis and improvement.
4. Sensitive information and personal declarations
We seek to avoid collecting health, disability, ethnicity, religion, sexual orientation, or other special-category information. Applications may ask for it, often optionally. We do not infer or invent answers. We involve you and normally leave sensitive declarations and equal-opportunities questions for you to complete directly with the recipient.
If we need to process such information, we limit it to what is necessary and identify both an ordinary lawful basis and an applicable special-category condition, such as your separate explicit consent where appropriate. Criminal-conviction or offense information requires additional legal authority and safeguards; ordinary consent or a general service instruction alone is not enough.
We leave those checks with the appropriate recipient unless a lawful basis for our involvement has been established. Please do not send unnecessary identity documents, sensitive information, or background-check records.
5. Who receives information
Access within our team is limited to authorized people with a business need and appropriate confidentiality obligations. Relevant recipients may include:
- Employees and contractors delivering or administering the service; cloud, document, email, scheduling, forms, customer-management, support, security, AI and automation providers; and payment providers.
- Employers, recruiters, executive-search firms and professional contacts, for agreed applications, outreach and related search activity. We share only what is needed for that action and the agreed authority to act.
- Professional advisers, insurers, regulators, courts or law-enforcement bodies where there is a lawful reason; and a prospective or actual business successor where necessary, with appropriate confidentiality and data-protection safeguards.
Providers acting as our processors must use the information under appropriate contractual instructions and safeguards. Some recipients, including employers, recruiters and payment providers, act as independent controllers for their own purposes; their privacy notices apply to that processing. We do not sell personal information for money.
AI and human oversight
We may use AI-assisted tools, automation and analytics to support research, drafting, document refinement and service administration. We use appropriate business AI accounts or workspaces and assess access and data use for the intended work. Relevant information may be processed by those providers as described above.
The service remains human-led. We do not use solely automated decision-making that produces legal or similarly significant effects for you. People remain responsible for service decisions and reviewing material outputs; your required personal decisions and declarations remain yours. You can raise a concern or request human review through info@careerhigher.co.
7. International processing
Our team, providers and service recipients may process information outside the UK, the EEA or your home country. Where UK law restricts a transfer, we use an applicable adequacy regulation or another lawful route, such as approved safeguards including the UK International Data Transfer Agreement or UK Addendum to EU standard contractual clauses. Where required, we carry out the applicable data protection test, also referred to as a transfer-risk assessment, and adopt necessary supplementary measures.
Where EU GDPR applies, we use the relevant EU adequacy decision, EU standard contractual clauses or another permitted mechanism, together with any required transfer assessment and safeguards. Limited exceptions are used only when their legal conditions are met. Ask info@careerhigher.co for information about the mechanism relevant to your data or a copy of applicable safeguards, subject to necessary redactions.
8. How long we keep information
We keep identifiable information only while justified by its purpose, the relationship, reasonable operational needs and applicable legal requirements. Retention is reviewed by category:
- Prospects and inquiries: while the inquiry or relevant follow-up remains active, assessed against its outcome, the last meaningful interaction and any marketing preference. We remove stale detail when no longer justified.
- Active client information: while needed to deliver and manage the engagement, maintain accurate working documents and address service issues.
- Closed-client working information: reviewed at closeout; drafts, duplicate research, sensitive details, and temporary AI working history are removed when no longer needed for handover or a specific operational, incident, legal, or regulatory reason. Working history is not our permanent client archive.
- Contracts, financial and legal records: for applicable accounting, tax, regulatory and legal-claim periods, assessed from the transaction, contract end or dispute, as appropriate.
- Consent, testimonial and preference records: while material is used and for as long as needed to evidence the permission or withdrawal and resolve related claims. We may retain a minimal suppression record to respect an objection to marketing.
- Technical and security records: for the period needed to operate, troubleshoot, and protect the relevant system, taking account of incident investigation and legal requirements; unnecessary routine logs are removed.
Information no longer needed is deleted or genuinely anonymised. A specific legal or regulatory hold overrides normal deletion only for the information it requires.
9. Marketing and website technologies
We send marketing only where permitted by applicable electronic-marketing rules. Where consent is required, we obtain it separately. Where an existing-customer exception is available, we use it only if its conditions are met, including the required opportunity to opt out when details are collected and in each message. You may use the unsubscribe method or email info@careerhigher.co; objecting to marketing does not stop essential service messages. Professional search outreach is assessed separately under the rules that apply to its recipient and content.
Our website may use cookies or similar technologies needed to provide a service you request or for another legally permitted purpose. Where consent is required for non-essential analytics or advertising technologies, we ask before activating them. Where these technologies are used, the website’s cookie information and consent controls explain their purposes, providers, and duration and enable you to change or withdraw choices. Browser settings may also help you manage cookies.
10. Security and your rights
We use appropriate technical and organizational measures proportionate to the information and processing. No system provides an absolute security guarantee.
Depending on the law that applies and its conditions, you may request access, correction, deletion, restriction or portability of your information. You may object to processing based on legitimate interests on grounds relating to your situation; we must then stop unless a lawful overriding ground or relevant legal-claims basis applies. You may object to direct marketing at any time, including related profiling, and we will stop that use. You may withdraw consent as easily as you gave it, without affecting the lawfulness of earlier processing. These rights are subject to applicable conditions and exemptions.
Contact info@careerhigher.co. This does not restrict any statutory right that applicable law allows to be exercised by another method. No particular subject line or form is required. We may request proportionate information to verify identity or clarify the request. We respond within applicable legal deadlines; under UK/EU rules this is normally one month, subject to lawful extensions or pauses, which we explain where required. We do not discriminate against you for exercising rights available under applicable law.
You may also complain to us using those contact details. We acknowledge a data-protection complaint within 30 days, investigate appropriately and tell you the outcome without undue delay. You can complain to the UK Information Commissioner at ico.org.uk/make-a-complaint, or to the competent authority where you live, work or believe an infringement occurred, where applicable. You need not await our process to exercise a legal right to complain.
11. Updates
We identify revisions by version number and make the current notice available with our services and on our website. We notify you of material changes where required and explain new purposes before use, obtaining any necessary further consent.