LEGAL
How we meet European data protection requirements and protect the personal data we hold.
Spacewalk Group Ltd is registered in England and Wales. We handle personal data for our own business purposes, and we also handle personal data on behalf of the organisations that run talent marketplaces and job boards on our platform.
This page is a short overview of the data protection framework we work within. Rather than assert a compliance status, it sets out what the law requires and points to the documents that describe what we actually do.
Our Privacy Policy explains what personal information we hold, why we hold it, who we share it with and what rights you have. Our Security page describes the measures that protect it.
The General Data Protection Regulation came into force on 25 May 2018 and replaced the Data Protection Directive 95/46/EC. It applies to organisations that process personal data about people in the European Union, wherever the organisation itself is based.
In the United Kingdom the equivalent regime is the UK GDPR together with the Data Protection Act 2018, most recently amended by the Data (Use and Access) Act 2025. Because Spacewalk Group Ltd is established in the United Kingdom, UK law applies to us directly, and EU law applies to our handling of personal data about people in the EU.
EU and UK data protection law restricts transfers of personal data to countries outside the European Economic Area or the United Kingdom, unless a recognised safeguard is in place. The European Economic Area is the EU countries together with Iceland, Liechtenstein and Norway.
The recognised safeguards include an adequacy decision covering the destination country, the standard contractual clauses adopted by the European Commission in 2021, the UK International Data Transfer Agreement or the UK Addendum to those clauses, and, for certified recipients in the United States, the EU-US Data Privacy Framework and its UK Extension. The earlier 2010 model clauses were repealed and have not been valid for transfers since 27 December 2022.
The European Commission renewed its adequacy decision for the United Kingdom on 19 December 2025, running to 27 December 2031, so personal data can flow from the European Economic Area to the United Kingdom without an additional safeguard.
Which safeguard applies to a given transfer depends on where the recipient is. Our Privacy Policy describes this in the section on storage of personal information.
For questions about how we handle personal data, or to make a request about your own personal information, email hello@gospacewalk.com. Our Privacy Policy explains your rights, how to exercise them and how to complain, and names the supervisory authorities you can complain to.
Last updated 4 August 2026
