Privacy notice
Version 1.0 · Last updated 10 October 2026
Text in square brackets will be completed before paid programmes open.
This notice explains how SprintPivot Ltd ("SprintPivot", "we", "us") collects, uses, shares and protects personal data when you use sprintpivot.com. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
SprintPivot Ltd (company number [to be added], registered office [to be added]) is the data controller for the personal data described here. ICO registration number: [to be added]. Contact us about data protection at privacy@sprintpivot.co.uk.
2. The data we collect
| Category | Examples | Whose |
|---|---|---|
| Account | Name, email address, password (stored only as a secure hash), role | Everyone |
| Background and assessment | Current job title, years of experience, sector, reason for changing career, target role, skill self-ratings | Career changers |
| Learning and projects | Module progress, project submissions, links to your work, notes, self-checks | Career changers |
| Mentoring | Discovery call bookings, session records, review scores and feedback, competency validations | Career changers and mentors |
| Programme and payments | Your programme, access dates, orders, payment status and the choice you made at checkout about starting during the cancellation period. Card details are handled by Stripe; we never see or store them. | Career changers |
| Employer pilots | Company name, contact details, pilot scope, shortlists, interview invitations and hires recorded | Employers |
| Mentor payments | Milestones completed, acceptance and payment dates, invoice details | Mentors |
| Communications | Emails and enquiries you send us | Everyone |
| Technical and activity | IP address, browser and device type, sign-in times, the pages and dashboard sections you open while signed in, the emails we send you and whether they were delivered, security and error logs | Everyone |
We also count page views and clicks on our pricing page (for example, how many people view Sprint). These counts contain no names, email addresses or IP addresses. If you sign in with LinkedIn, we receive your name, email address and LinkedIn identifier only.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Running your account, pathway, projects, mentoring and Career Proof | Contract |
| Taking payments, managing your access period and sending reminders about it | Contract |
| Recording your checkout choice about the cancellation period, and keeping financial records | Legal obligation |
| Showing your anonymised Career Proof to employers in a talent pilot | Consent (you switch this on and can switch it off at any time) |
| Assigning a mentor to you and paying mentors for completed milestones | Contract and legitimate interests |
| Security, fraud prevention, audit logs, and understanding how the platform is used so we can support you and improve it | Legitimate interests |
| Improving the service using anonymous counts | Legitimate interests |
| Marketing emails (only if you opt in) | Consent |
4. Who can see your data
- Mentors see the work and records needed for the sessions and reviews assigned to them.
- Employers see your Career Proof only if you are on Accelerate, you have switched on employer visibility, and the employer has an active talent pilot. They see your candidate code (for example SP-A1B2C3D4), target role, approved projects, mentor scores and evidence labels, but never your name, contact details, photograph or demographic information. If an employer invites you to interview, the invitation comes to you by email and you decide whether to respond.
- Service providers who process data for us under contract: DoveServer (hosting), Stripe (payments), Brevo (email) and LinkedIn (sign-in only).
- Authorities, where the law requires it.
We do not sell personal data. Where a provider processes data outside the UK, we rely on UK adequacy regulations or approved safeguards such as the International Data Transfer Agreement.
5. How long we keep it
| Data | How long |
|---|---|
| Account, learning, projects and Career Proof | While your account is open, including after your paid access ends (so your work is never lost), and up to 3 years after you close it, for disputes |
| Payment, order and consent records | At least 6 years, as tax and consumer law require |
| Employer pilot records | For the pilot and up to 3 years after it ends; employers must delete candidate data as their pilot agreement requires |
| Security, audit and activity logs, and email delivery records | 2 years |
| Deleted accounts | Removed within 30 days of your request, except records we must keep by law |
| Anonymous counts | No time limit (they contain no personal data) |
6. Your rights
You can ask to access, correct or delete your data, to restrict or object to how we use it, and to receive a copy of it in a portable format. Where we rely on consent, you can withdraw it at any time; for employer visibility, use the switch in Career Proof. Email privacy@sprintpivot.co.uk; we reply within one month. If you are unhappy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.
7. Security
Passwords are hashed, connections are encrypted, access to data is limited to people who need it, and payment card data never touches our servers.
8. Cookies
We use only the cookies needed to keep you signed in. See our cookie policy.
9. Age
SprintPivot is for adults aged 18 and over.
10. Changes
If we change this notice in a way that matters, we will tell you by email or on your dashboard.