Career Allies Privacy Policy

Effective 6 May 2026

Stay Nimble Ltd (Company No. 11129024)

This privacy policy explains how Stay Nimble Ltd ("Stay Nimble", "we", "us", "our") collects, uses, and protects personal data when you take part in the Career Allies programme. Career Allies is a CPD-certified programme delivered by Stay Nimble. This policy covers data we process specifically in connection with Career Allies and sits alongside our main Stay Nimble privacy policy. Where the two differ, this policy applies for Career Allies activity.

We are the data controller for the personal data described in this policy. You can contact us at 20-22 Wenlock Road, London N1 7GU, or by email at info@staynimble.co.uk.

1. The data we collect

1.1 When you enrol

When you enrol on Career Allies, we collect:

• Your name and email address.
• Your employer or organisation, where you have been enrolled by a partner organisation.
• Your job role or function, where you provide it.
• Any access requirements you tell us about so we can support you on the programme.

1.2 As you take part in the programme

As you progress through the certification and after certification, we collect:

• Records of your attendance at Learning Circles and other live sessions.
• Module completion records and any reflective work or assessments you submit as part of the certification.
• Your progress towards certification and your certification status (in progress, certified, lapsed).
• Records of badges issued to you in respect of your achievements.
• Correspondence between you and us about the programme.
• Conversations and Wins recorded.

1.3 Email engagement

We use GetResponse to send you emails that support your learning during the certification and, if you are certified, to keep you informed about new resources, events, and developments relevant to certified Career Allies. GetResponse records standard email engagement information such as whether emails are delivered, opened, and which links you click. We use this information to make our communications more useful and to identify Career Allies who may benefit from additional support.

2. Why we use your data and the legal basis for using it

Under UK data protection law, we must have a lawful basis for using your personal data. The bases we rely on for Career Allies are set out below.

2.1 Performance of a contract

We process your data to deliver the Career Allies certification you have enrolled on. This includes recording your progress, providing access to learning materials, issuing badges and certificates, and corresponding with you about your participation.

2.2 Legitimate interests

We rely on our legitimate interests as a social enterprise providing career development infrastructure to:

• Send you emails that help you stay on track during the certification.
• Send you ongoing communications as a certified Career Ally about new tools, resources, and opportunities relevant to your continued professional development.
• Improve the programme based on engagement data and feedback.
• Keep records of certifications we have issued so that we can verify them in future.

We have considered the impact of this processing on you and we believe it is proportionate. You can opt out of marketing and ongoing communications at any time using the unsubscribe link in our emails or by contacting us.

2.3 Consent

Where we ask for your consent (for example to use a quote or testimonial from you, or to feature you in a case study), we will only use your data in that specific way if you give consent, and you can withdraw it at any time.

2.4 Legal obligation

We may process your data where we are required to do so by law, for example to respond to lawful requests from public authorities or to comply with our regulatory obligations.

3. The services we use to run Career Allies

Career Allies is delivered through a small set of specialist services. We use these services as our processors. They handle data on our instructions and under contract. The current list is set out below. We maintain an up-to-date version on our website at careerallies.staynimble.co.uk/subprocessors.

3.1 The portal and learning experience

• Vercel: hosts the Career Allies portal and microsite. Vercel processes data in transit and standard server logs.
• Supabase: provides the database and authentication for the portal. Supabase stores your name, email, enrolment, progress, and certification data.
• Amazon Web Services (Simple Email Service): used by Supabase to deliver the magic-link emails that sign you in to the portal. SES processes the email address only, not your name.
• Tally: delivers the course content and, when migration completes, collects programme feedback.
• Typeform: currently collects feedback responses. Typeform will be retired once the migration to Tally is complete.
• Vimeo: hosts the learning videos. Videos are unlisted, which means you do not need to sign in to Vimeo to watch them. Vimeo therefore receives standard technical information about your device and connection but not your name or email.

3.2 Live sessions and communications

• Calendly: schedules Learning Circles and other live sessions. Calendly receives your name and email when you book a session.
• Google Workspace (Google Meet): hosts the Learning Circles themselves. Google receives the information you provide when joining a meeting (typically your name) and standard meeting metadata.
• GetResponse: sends learning support emails and ongoing communications to certified Career Allies.

3.3 Certification

• Navigatr: issues your CPD-certified badge. When you become eligible for a badge, we send Navigatr issuing instructions including your name and email. To claim and view your badge you create your own account with Navigatr; from that point your relationship with Navigatr is governed directly by Navigatr's terms and privacy policy.

3.4 Other services you may encounter

Two services form part of the wider Career Allies experience but are not Stay Nimble processors of your data:

• Slack (the Career Allies community): Slack membership is voluntary and separate from your certification. If you choose to join, you create your own Slack account directly with Slack; we do not push your data to Slack on your behalf. Anything you post in the community is governed by Slack's own terms of service and privacy policy. We moderate the community and may remove content or members where the community guidelines have been breached.
• Ask.Nim (embedded AI assistant): Ask.Nim is embedded into the portal and the learning experience as an iframe. The embedded version of Ask.Nim does not receive any data identifying you: it has no access to your name, email, account, or session. Anything you choose to share with Ask.Nim during a conversation is processed under the Ask.Nim privacy policy.

3.5 Other situations

We may share your data where we are required to do so by law, where it is necessary to protect our rights or the safety of others, or in connection with a sale or restructuring of our business (in which case the recipient would be required to honour this policy).

4. Sharing with the organisation that enrolled you

If you were enrolled on Career Allies by your employer or a partner organisation, we share information with them about your enrolment, attendance, progress, and certification status. This is so they can manage their cohort, demonstrate the value of their investment, and support you in completing the programme. If you have concerns about what is shared with your enrolling organisation, please contact us.

5. International transfers

Some of our service providers store or process data outside the UK. Where this happens, we make sure the transfer is protected by appropriate safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision by the UK government.

6. How long we keep your data

We keep your data for as long as we need it for the purposes set out in this policy. In practice this means:

• Enrolment and progress data: kept while you are an active participant and for up to two years after you leave the programme, so we can support re-engagement and respond to queries.
• Certification records: kept indefinitely as a record of certifications issued, so that the certification can be verified in future. We will keep your name, the certification awarded, the date awarded, and the issuing programme.
• Email engagement data: kept for up to two years from your last interaction.
• Correspondence: kept for up to three years from our last contact, unless we need to keep it longer for legal reasons.

7. Your rights

Under UK data protection law you have the following rights in relation to your personal data:

• The right to be informed about how we use your data, which is the purpose of this policy.
• The right to access a copy of the data we hold about you.
• The right to ask us to correct data that is inaccurate or incomplete.
• The right to ask us to delete your data, subject to some legal limits (for example, we will retain a record of your certification).
• The right to ask us to restrict how we use your data.
• The right to object to processing based on our legitimate interests.
• The right to data portability for data we process under contract or consent.
• The right to withdraw consent at any time, where we rely on consent.
• The right not to be subject to decisions based solely on automated processing that significantly affect you. We do not make such decisions in the Career Allies programme.

To exercise any of these rights, please contact us at info@staynimble.co.uk. We will respond within one month.

If you are not satisfied with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would, however, appreciate the chance to deal with your concerns first.

8. Security

We take appropriate technical and organisational measures to protect your data, including access controls, encryption in transit, regular review of our security practices, and contracts with our service providers. No system is completely secure, but we work to identify and address risks promptly.

9. Cookies and tracking

This policy covers the personal data we hold about Career Allies. The Stay Nimble website and Career Allies microsite use cookies and similar technologies as described in our main cookie policy.

10. Changes to this policy

We may update this policy from time to time. If we make material changes we will notify enrolled and certified Career Allies by email. The version date at the top of this policy tells you when it was last updated.

11. Contact us

If you have any questions about this policy or how we handle your data, please contact us:

• By email: info@staynimble.co.uk
• By post: Stay Nimble Ltd, 20-22 Wenlock Road, London N1 7GU

Last updated 6 May 2026.