GirlCode Candidate Privacy Notice and Consent Agreement

​

Effective Date: 03/09/2025

By creating a candidate profile account and submitting personal information on the GirlCode platform (“GirlCode,” “we,” “our,” or “us”), you (“Candidate,” “you,” or “your”) expressly agree to the terms set out in this Privacy Notice and Consent Agreement.

​

1. Personal Information We Collect

We may collect, process, and store the following categories of personal information that you voluntarily provide when registering or using the GirlCode platform:

• Full name

• Age and date of birth

• Job title and career history

• Contact information (phone number, email address, postal address)

• Social media links

• Curriculum Vitae (CV) and supporting documentation

• Profile images, photographs, or other submitted media

• Demographic information relevant to professional opportunities

• Any other information you choose to provide to us in connection with your candidate profile.

We may also collect certain technical data, including IP address, device identifiers, and browser activity, for security, analytics, and service improvement purposes.

​

2. Purpose of Data Collection

Your personal information will be used for the following purposes:

• To create and maintain your candidate profile on the GirlCode platform.

• To enable our official company partners (employers and recruiters) to review your profile and contact you directly regarding relevant career opportunities.

• To provide our services to you, including job-matching, events, and networking opportunities.

• To comply with legal and regulatory obligations.

• To improve and secure our website, systems, and services.

​

3. Data Sharing (Controller-to-Controller)

a. Status of the Parties

Each Party acknowledges that, for the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018:

• GirlCode acts as an independent Data Controller in respect of the personal data it collects directly from candidates (including, without limitation, name, location, job title, job history, email address, phone number, CV, career preferences, social media links, and profile pictures); and

• The Client (an official GirlCode partner or paying company) acts as an independent Data Controller in respect of the personal data it receives from GirlCode and subsequently processes for its own recruitment and employment purposes.

b. No Joint Controllership

Nothing in this Agreement is intended to, or shall be deemed to, establish the Parties as joint controllers. Each Party shall remain solely responsible for compliance with its own obligations under the UK GDPR.

c. Data Sharing Obligations

Each Party shall:

• ensure it has a valid lawful basis under the UK GDPR for processing the personal data;

• provide clear and transparent information to data subjects about how their personal data will be used;

• implement appropriate technical and organisational measures to protect the personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage;

• assist the other Party, where reasonably possible, in responding to data subject rights requests or regulatory enquiries relating to the shared personal data; and

• promptly notify the other Party of any personal data breach which may affect the shared personal data.

d. Data Retention

Each Party shall determine its own data retention periods for the personal data it processes, provided such periods comply with applicable data protection law.

e. International Transfers

Where either Party transfers personal data outside of the UK, it shall ensure that such transfer complies with Chapter V of the UK GDPR.

​

4. Legal Basis for Processing

We rely on the following legal bases under the UK GDPR and EU GDPR to process your personal information:

• Consent: By agreeing to this Privacy Notice, you provide explicit consent for the collection, storage, and sharing of your personal information as outlined.

• Legitimate Interests: For the provision of recruitment and networking services.

• Legal Obligation: Where processing is required by law.

• ​

5. Data Retention

We will store your personal information for as long as your candidate account remains active. If you delete your account, we will securely erase your data within [X months] unless retention is required by law.

​

6. Security

We use appropriate technical and organizational measures to protect your personal information against loss, misuse, or unauthorized access.

​

7. Your Rights

Under applicable data protection laws, you have the right to:

• Access a copy of the personal information we hold about you.

• Request correction or updating of your data.

• Request deletion (“the right to be forgotten”).

• Restrict or object to certain processing.

• Request portability of your data.

• Withdraw consent at any time (without affecting prior lawful processing).

• Lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local data protection authority.

To exercise these rights, please contact us at: Accounts@girlcode.dev

​

8. Limitation of Liability

To the maximum extent permitted by law, GirlCode shall not be liable for:

• Any use or misuse of your personal information by third-party company partners once data has been shared in accordance with this agreement.

• Any indirect, consequential, or incidental damages arising from the processing or disclosure of your personal information.

• ​

9. Consent

By checking the box or clicking “I Agree” when registering on the GirlCode platform, you:

• Confirm that you have read, understood, and accepted this Privacy Notice and Consent Agreement.

• Provide explicit consent for GirlCode to collect, store, process, and share your personal information with its official company partners as outlined herein.

• ​

10. Contact Information

For questions or concerns about this Privacy Notice, please contact:

GirlCode Ltd
Email: Accounts@girlcode.dev