Last updated: 14 September 2026
We hold information about your career, your qualifications and your right to work. Some of it is sensitive, and you are trusting us with it at a point where you may not have many other options. This notice sets out exactly what we hold, why, who else sees it, how long we keep it, and how to make us stop or delete it.
We have tried to write it so it can be read once and understood. If any of it is unclear, tell us and we will fix the wording. That is a reasonable thing to ask for and we would rather know.
Bridgeway Connect Ltd is the data controller. Registered in England and Wales, company number 16869434, at Suite A, 82 James Carter Road, Mildenhall, IP28 7DE. Registered with the Information Commissioner's Office, registration number ZC098492.
For anything about your data, email admin@bridgewayconnect.co.uk or use our feedback page. Both reach a person.
When you create a profile: your first, middle and last name, email address, phone number, the country and the city or town you live in, whether you have the right to work in the UK or Ireland and any clarification you give us, whether you have the right to work elsewhere, your profession, your qualifications, your current job title, your years of experience, the locations you would prefer to work in, and any preference about hours or shift patterns.
Your CV or other documents, when you upload them. A CV can contain a lot — previous employers, dates, registration numbers, sometimes health or personal circumstances. We read what is there.
When you use WhatsApp: your phone number, the messages you send, our replies, and the times of both.
When you buy an optional extra: your email, your Candidate ID, what you bought and any promo code. We never see or hold your card details — payment is handled entirely by Stripe.
How you found us: the source and any campaign information attached to your signup link. This involves no cookies and does not track you around the internet.
What we generate: your Candidate ID, the structured profile built from your CV, assessment results, internal scores used for matching, records of roles matched to you, and an audit record of what our system did and when.
This is as important as what we do collect, and we would rather state it than leave you to assume.
We never ask about criminal records. Not convictions, not cautions, not DBS status or certificate numbers. In this sector a DBS check is normal — but it belongs to the employer who is recruiting you, it happens through their process, and we have no reason to see it. If one of our assessments mentions DBS, it is telling you that an employer will check it, not asking you to tell us.
We never ask about your health. Not conditions, not disabilities, not occupational health, not sickness records, and not the reason for any gap in your employment. If a gap matters to an application we will suggest what you might say about it. We will not ask you why.
We never ask about your race or ethnic origin, religion or beliefs, political opinions, trade union membership, sex life or sexual orientation, or anything genetic or biometric.
We do ask about your nationality and right to work, because whether you are eligible for a role is the single most useful thing we can check for you. We ask for the status, not the reasons behind it.
Not collecting something means nothing if a system deduces it instead. So we do not infer your ethnicity from your name, your country or your qualification. We do not infer anything about your health from a gap in your CV — a gap is a gap. If you tell us you cannot work certain days, that is recorded as your availability and nothing else; we do not ask why and we do not store a reason.
A CV is free text and people explain things in them. Please don't feel you need to — your CV only needs your skills, your experience and your dates.
If something sensitive is in there anyway: we do not copy it into your profile, we do not use it in any assessment or score, it plays no part in which roles you are shown, and it is deleted when the document is deleted.
The full policy is published as What we do not collect. It is dated, version-controlled, and reviewed at least once a year.
Almost all of it comes from you. The rest we generate from what you have given us, or from job adverts that are already public. We do not buy data about you, and we do not collect it from social media or from anyone else.
| What we do | Why | Lawful basis |
|---|---|---|
| Create and maintain your profile, run assessments, match you to roles | It is the service you asked us for | Performance of a contract with you |
| Send you job alerts | You asked to be told about relevant roles | Consent — withdraw any time |
| Show you to employers, if you turn that on | Only if you choose it | Consent, held separately |
| Deliver an optional extra you paid for | To provide what you bought | Performance of a contract |
| Keep records of payments | We are required to | Legal obligation |
| Keep an audit record, investigate problems, protect the service from misuse | So we can check what our system did and put it right | Our legitimate interests in running a service that can be held to account |
| Review conversations to improve the service | To make it work better | Our legitimate interests, balanced against your privacy |
Three separate consents. Communication, employer visibility and keeping your record are different things and we treat them as different things. Stopping one does not stop the others, and we will never bundle them together.
Giovanni is software. He reads adverts, reads your CV and produces an assessment automatically. Internal scores are used to decide which roles are worth putting in front of you.
No automated decision is taken about you that has a legal or similarly significant effect without a person involved. Every sponsorship role is reviewed by a person before it is emailed to you. An assessment is information for you to act on — it does not decide anything about you, is not shared with any employer, and does not stop you applying for anything.
You can ask for a person to look at any assessment, tell us you disagree with it, and ask us to reconsider. We would rather you did that than quietly assume the machine was right.
We use a small number of service providers to run the platform. They act on our instructions and are not allowed to use your information for their own purposes: website hosting · form hosting · workflow automation · database · email · messaging · payments · an AI model provider that reads documents and drafts text at bounded points in the process.
We do not sell your information. We do not share it for anyone else's advertising.
Employers. We do not currently pass your identifying details to any employer. If that ever changes, we will tell you before it does and ask you again.
Some providers are based outside the UK or store information outside it. Where that happens we rely on the transfer protections available under UK data protection law — the UK International Data Transfer Agreement or the UK Addendum to the standard contractual clauses — together with an assessment of the risk. If you want to know where a specific piece of your information is held, ask and we will tell you.
We do not keep anything indefinitely, and we can explain every period below.
| What | How long | Why |
|---|---|---|
| Your profile, CV and assessments | While active, and 12 months after you last use the service | So you can come back without starting again. Then deleted or anonymised. |
| WhatsApp conversations | 12 months from your last contact | Long enough to look into a problem that surfaces later and to review real conversations for improvement. |
| Audit records — what the system did and when, without the message content | Up to 3 years | Lets us answer "what happened, and why" long after the event. Holds far less about you. |
| Anything connected to a payment or a complaint | 6 years | The period during which a claim could be brought. |
You do not have to wait for any of that. Ask us to delete your information and we will, unless we are legally required to keep a specific record — and if that applies we will tell you which record and why.
This website does not set any cookies, and does not track you.
No analytics cookies, no advertising pixels, no social media trackers, no embedded content that watches you. Fonts are served from our own site rather than anyone else's. There is no cookie banner because there is nothing to consent to.
We know that is unusual. It is deliberate.
You can ask us to give you a copy of everything we hold about you · correct anything wrong · delete it · stop using it in a particular way, or pause while something is sorted out · send it to you or someone else in a portable format · stop contacting you, at any time, for any reason or none.
Withdrawing consent is deliberately easier than giving it. You never have to explain yourself, and we will not ask you to reconsider.
Use the feedback page or email admin@bridgewayconnect.co.uk. We will respond within one month. There is no charge.
If you think we have handled your information badly, please tell us first — we would rather fix it. You also have the right to complain to the Information Commissioner's Office at any time, without telling us first. ico.org.uk · 0303 123 1113.
If we change how we use your information we will update this page and change the date at the top. Where a change is significant we will tell you directly rather than relying on you to notice.
Bridgeway Connect