Updated: 6 November 2026
Your privacy is important to us. This privacy statement explains:
Please read this privacy policy carefully.
In this privacy, the following definitions are used:
Data controller means a person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data, are or are to be, processed.
Data processor is, in relation to personal data, means any person (other than an employee of the data controller) who processes the data on behalf of the data controller.
“You”, “your” or “data subject” means:
Data controller, “we”, “us” and “our” means: EP Advisory Group Limited and its data processors;
Personal data means any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier.
This definition provides for a wide range of personal identifiers to constitute personal data, including name, identification number, location data or online identifier, reflecting changing technologies and the way organisations collect information about people. The definition incorporates, where applicable, the definition provided in the UK GDPR and the Data Protection Act 2018.
Sensitive personal data
The GDPR refers to sensitive personal data as “special category data”. Please see “Special category data”.
Special category data
Means personal data consisting of information as to the racial or ethnic origin of the data subject, their political opinions, their religious beliefs or other beliefs of a similar nature, whether he is a member of a trade union (within the meaning of the Trade Union and Labour Relations (Consolidation) Act 1992), his physical or mental health or condition, his sexual life. The special category specifically includes genetic data, and biometric data where processed to uniquely identify an individual.
Criminal offence data
Personal data relating to criminal convictions and offences.
Who we are (Identity of the data controller)
For the purpose of the UK GDPR and the Data Protection Act 2018, the data controller is EP Advisory Group Limited with company registration number 11258912 and the registered address at Level 10, 40 Bank Street, London E14 5NR United Kingdom.
We may collect and process the following data and personal information about you:
Personal data you provide voluntarily
We collect the information provided by you to operate effectively and provide you the best experience with our Website, products and services. You provide some of this information voluntarily by filling in the contact forms on our web site or by corresponding with us by phone, e-mail or otherwise. This includes information you provide if you subscribe to any promotion we offer through our site, send us a query or feedback, sign up for information on events, upload a document with your enquiry, participate in discussion boards or other social media functions on our site, promotion, or survey. Provide your postcode or location to help us to find our nearest branch to your location, or when you report a problem with our Website.
Your contact details and other documents you provide to us might include your:
If you are a career consulting client:
Your first name, surname, residential address, email address, telephone number, employment and educational history, language proficiency and other work-related skills, date of birth, gender, citizenship and work authorization status, references as well as their contact information, resume, cover letters or any documents you may choose to upload to our website in order for us to provide you with the appropriate service or give career consulting advice.
If you are an organisation looking for a candidate, you might provide the following business information:
Your office location, salary range, the experience and the key skills you need, information related to your company’s operation, your corporate culture, bonus and benefits structure.
Sensitive information and special category data
With your application you occasionally might provide us some sensitive information or special category data related to your Disability status, racial or ethnic origin (please check the paragraph Definitions and interpretation). Submission of this type of information is strictly voluntary.
If you use the application helper, you can save answers to diversity, health and background questions, including criminal convictions. We store them only to fill in the forms you ask us to. They are never sent to the AI. Saving them is optional. For diversity and health questions, the default is Prefer not to say. Background questions stay blank until you answer them. You can change or delete your answers at any time in your account settings.
Criminal offence data
By the nature of our business, our services are not designed to collect criminal offence data (please check the paragraph Definitions and interpretation). The one exception is the application helper. If you use it, you can choose to save an answer about criminal convictions. We use it only to fill in the forms you ask us to, as described above.
Purposes of the processing
By registering your interest in our services or signing up to our newsletter you voluntarily provide your personal data to be used for career consulting and HR purposes, in particular for career orientation, CV & LinkedIn optimization, cover letter writing, interview training, job search strategy formulation, HR advisory services, job design, including beyond those for which you specifically paid for.
Children
We do not provide any services to children below 16 and do not knowingly collect personal information from children below 16.
Information you provide about others
In providing personal data about other individuals (such as someone to whom name you are registering an account or subscribing to our marketing promotions), you represent that you have notified them of (i) the purposes to which the information will be used (ii) the recipients of their personal data and (iii) how they can access and correct the information. You further represent that You have obtained all necessary consents from them.
Information which may be made available to us, or collected automatically with the use of cookies or analytic tools
We might get some information from your visitors by recording how they interact with our Website with the use of cookies, analytics tools or obtain data from third parties.
Technical information, including personally identifiable information:
Non-personally identifiable information:
We do not combine information collected automatically through cookies and analytic tools with other personally identifiable information you may have provided to us when you registered for our Products or submitted a form through our Website.
THIRD PARTIES: We receive some data from third parties. We receive it from Google, if you sign in with Google. We receive it from LinkedIn, through the EDGE extension or the LinkedIn data export you upload.
A cookie is a small file, typically of letters and numbers, downloaded onto a device when the user accesses certain websites. Cookies allow a website to recognise a user’s device.
We might use cookies to recognise you when you visit our site or use our Services, remember your preferences, and give you a personalised experience:
Authentication cookies. If you’re signed into our Services, these cookies will help us show you the right information and personalise your experience.
Session cookies. These cookies store the ID of a user’s session. The cookie is set when a user signs in and is used to retain the session without entering the personal data.
Security cookies. We use cookies for our security features, and to help us detect malicious activity.
Preferences, features and services. These cookies help us to customise your preferences, such as which language you prefer and what your communication preferences are, for your future visits.
Performance, Analytics and Research. Cookies help us to analyse our web site performance. We use cookies to improve our products, features, and services, including to create logs and record when you access our site.
Third-party cookies. We might use them for website analytics and advertising purposes, i.e. cookies which are set and can be accessed by servers respectively domains of our third-party providers.
What can you do if you don’t want cookies to be set or want them to be removed
Most browsers accept cookies automatically. However, some people prefer not to allow them. You may change the cookie settings of your web browser in order to stop your device receiving and storing cookies, to allow receiving and storing cookies from selected websites you trust, or to be notified before receiving cookies. You may also delete cookies stored in your browser at any time.
Information stored in such cookies will be removed from your device. However, that these settings may have negative effects on the web sites usability.
Browser manufacturers usually provide help pages relating to cookie management in their products. Please see below for more information:
For more others, please consult the documentation that your browser manufacturer provides.
You may opt-out of third party cookies from Google Analytics on its website.
You can opt-out of interest-based targeting provided by participating ad servers through the Digital Advertising Alliance (http://youradchoices.com/). In addition, on your iPhone, iPad or Android, you can change your device settings to control whether you see online interest-based ads.
Our Website might include certain Social Media features and widgets, such as the “Facebook Share”, “Facebook Pixel” “Instagram Follow”, “Twitter Follow”, “Google +1 Follow”, “YouTube”, “Telegram”, “LinkedIn” features, buttons or other interactive mini-programs (“Social Media Features”). These Social Media Features may collect information such as your IP address or which page you are visiting on our Website, and may set a cookie to enable them to function properly. Social Media Features are either hosted by a third party or hosted directly on our Website. Please be aware that if you choose to interact or share any Personal Information via such widgets, you are in fact providing it to these third parties and not to us. Your interactions with these third parties are managed by these Social Media policies and not ours. For example, you will not be able to use the “Facebook Like” button if you are not logged in to your Facebook account. Once you use the button this will be associated with your Facebook history, but we will not process this information.
We take Client confidentiality and security very seriously. We are committed to protecting the Personal Data you share with us. We use a combination of industry-standard security technologies, procedures, and organisational measures to help protect your Personal Data from unauthorised access, use or disclosure.
The data processing consisting in hosting provider services (storage and maintenance of databases containing your personal data, protected by password) is performed on our behalf and under confidentiality agreements by Digital Ocean, our authorised data processor. The data may be transferred to, and stored at, a destination outside the European Economic Area (EEA). Digital Ocean adheres to GDPR requirements, ensuring the protection of your data rights.
The written agreement with Digital Ocean guarantees that the requirements of the GDPR will be met and the rights of data subjects are protected. Digital Ocean will act only on our documented instructions, have direct responsibilities under the GDPR, and may be subject to fines or other sanctions if they don’t comply.
Once our contract with Digital Ocean concludes, they will return data to us or transmit to another processor appointed by us and erase any copy in their possession. However, Digital Ocean may retain data to comply with legal responsibilities to address possible administrative or jurisdictional responsibilities.
Trusted partners (data processors) who work on our behalf under confidentiality agreements and might store, maintain or process your data:
They process your data only on our instructions, under written agreements that meet the requirements of the GDPR:
Some of these companies may store data outside the UK and the European Economic Area. Where they do, we rely on the safeguards the GDPR requires, such as the UK International Data Transfer Addendum and the EU standard contractual clauses.
EDGE uses AI models from Anthropic (Claude) to help with your job search. These features send data to Anthropic:
Only the text needed for each task is sent. Voice answers are turned into text in your browser. We use Anthropic under its commercial terms, which do not allow it to train its models on this data.
The AI never sends LinkedIn messages. For Job Offer Guarantee clients, it can fill in job application forms on employer websites. It can upload your CV and tick the terms boxes the employer requires. It never submits an application. You or your advisor do that.
Handling and storing your data: the documents you share with your advisor, such as your CV, are stored securely in Tally Forms, Notion, Google Drive and OneDrive.
Creating an EDGE account: when you create an EDGE account, you agree to this Privacy Policy and our Terms & Conditions. If you sign up with Google, you agree by tapping Agree and continue. We record when you agreed.
Your rights: you can ask us to access, correct or delete your data, or to stop processing it, at any time. Write to us at [email protected].
If you install the EDGE browser extension, it keeps your People list up to date from your own LinkedIn account. Its LinkedIn features are for Job Offer Guarantee clients only. It works only while you are signed in to EDGE and have LinkedIn open in your browser.
It records:
You can also upload your own LinkedIn data export instead. We read only your messages, connections, invitations and profile name from it. We ignore every other file. We skip sponsored messages and anything older than 180 days.
We use this data only to run your People list and suggest your next steps. You and the EP advisors who work with you can see it. We never sell it. As part of the Job Offer Guarantee, your advisor may message people on LinkedIn for you, with your agreement. We never use your list for our own marketing.
About the people you talk to: your LinkedIn contacts did not sign up to EDGE. We keep only what your People list needs, on the basis of our legitimate interest in helping you with your job search. Anyone can ask us to delete what we hold about them by writing to [email protected]. If you ask us to delete what we hold about you, we will remove you from every People list we hold. You may be added again if a member messages you later.
Control: you can pause or remove the extension at any time. You can ask us to delete your People list and messages at any time.
We will hold your personal data during the business relationship between you and us, whether you are a user of our website, a client or candidate. If you are an applicant, we will hold your personal data during the application process. We may retain submitted Applicants information even after the applied position is no longer available. This is done so we could re-consider Applicants for other positions and opportunities. If you are our client or a successful applicant, we might hold your information for as long as is necessary to comply with our statutory and contractual obligations and in accordance with our legitimate interests as data controller (Please see paragraph “Lawful basis and the purposes of the processing (Use made of your personal information)”). We will use reasonable endeavours to ensure your data is maintained and up-to-date. As a data subject you have rights related to maintenance, storage and processing of your personal data. Please see paragraph “Your rights”.
Unless otherwise specified, where you have indicated to us that you are happy for us to send you the information about goods and services we offer and we feel may interest you or similar to those that you have already purchased or enquired about do so, we assume you are happy for us to keep your collected personal data. We may retain your Personal Information (contact details) for as long as your User Account is active or as otherwise provided to provide you with Information our Services. As the data subject you have rights related to processing of your personal data and the option of withdrawing your consent to receive promotions at any time. Please see paragraph “Your rights”.
EDGE platform: saved jobs you never use are removed after about 3 weeks. Jobs you applied to, starred, added a note to or passed on are kept while your account is open.
We keep your People list and LinkedIn messages while your account is open. You can download all your data or delete your account at any time in your account settings. Deleting your account deletes your People list and messages.
EDGE free CV check: if you check your CV without an account, we keep your CV text, your report and an image of the first page of your CV for 48 hours. Then we delete them, unless you save them to an EDGE account. We never keep the file you upload.
Emailed CV report: if you ask us to email you your report, we keep your CV text, your report and the first-page image for 14 days, so the link in the email works. Then we delete them. The image is always deleted within 17 days. We keep the email address you gave us for 30 days, then delete it. We send you that one email only. It does not sign you up to marketing.
We process all personal data lawfully, fairly and in a transparent manner. We use the data we collect for the following basic purposes, described in more detail below:
We do not rent, sell, or share personal information about you with other people or non-affiliated companies without your consent except to provide products or services you’ve requested, where we have your permission, or under the following circumstances:
You can find detailed information related to data location in the section “Storage of information”, including the paragraph “Trusted partners (data processors)”.
Law Enforcement, Legal Request and Duties:
We may disclose or otherwise offer access to your Personal Information pursuant to a legal request, such as a subpoena, legal process, search warrant or court order, in compliance with applicable laws. If we have a good faith belief that the law requires us to do so, with or without notice to you. Your details may also be disclosed to the police and law enforcement agencies for the purpose of fraud detection, crime prevention and national security.
You have the following rights under the UK GDPR and the Data Protection Act 2018.
The right to be informed. In this privacy statement we supply you detailed information related to your personal data storage, maintenance and processing.
The right to access information about you.
The right to rectify your personal data if it is inaccurate, incomplete or out-of-date.
The right to erase (delete or remove) your personal data.
The right to restrict (block) processing. When processing is restricted, we will store your personal data, but not further process it.
The right to data portability which allows individuals to obtain and reuse personal data for their own purpose across different services. It allows them to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability.
Rights related to automated-decision making including profiling. We are not making any decisions which might produce a legal effect on you based on automated processing.
The right to withdraw your consent (object) to direct marketing. You can exercise your rights by contacting us at [email protected].
The right to lodge a complaint with a supervisory authority. You have the right to lodge a complaint with a supervisory authority (Information Commissioner’s Office in the United Kingdom) if you have a concern about our information rights practices.
Drop your email and I'll send your 5% code 🎉
By subscribing you agree to our Privacy Policy