Privacy Policy

Introduction

This Privacy Policy explains what personal information Spacewalk Group Ltd and its group entities (collectively referred to as “Spacewalk”, “we”, “us”, or “our”) collects and the ways in which we use that personal information.

This policy applies to your use of our website (https://www.gospacewalk.com), to personal information we handle about our website visitors, registered users of our services and their employers and/or employees and to personal information that we process through offline interactions with you in the course of running our business and delivering our services.  This includes our interactions with our existing or potential customers, their personnel and our suppliers.

This Privacy Policy is a notice explaining how we handle personal information. It is not a contract and there is nothing in it for you to agree to. Our contractual terms are set out separately in our Terms of Use and our Terms of Business.

Types of personal information obtained, purposes and legal basis

We collect and use personal information for several different purposes. The personal information we collect may include names, address, telephone number, e-mail address, and employment related information including job title, salary information, and work contact details. The kind of personal information we collect about you will depend on the type of dealings you have with us.  We may also collect information about your interests and preferences, other demographic information such as your location.

Generally, we collect personal information when you voluntarily provide it to us.  We may also request information from you for the purpose of our services. You can choose not to provide your personal information to us, but generally the information we request from you is required in order for us to provide you the services we offer.

The legal basis for processing your personal information typically include:

• your consent
• to perform a contract with you or a relevant party
• legitimate interests in operating our business which includes dealing with your enquiries, requests and instructions, providing services to clients, inviting you to events and conducting research and analysis for our internal purposes, or
• to comply with our legal obligations.

The following section sets out the types of personal information we collect and the purposes we will use it for:

• If you contact us, submit an online form on our website or register for our services, we will hold personal information you provide to us (over the phone, by email, via our website or other methods). This is likely to be your name, contact details, and any other information you choose to provide. We will use this information for the purpose of communicating with you about our services, responding to your queries and business development.
• If you update an online profile that includes personal information such as your name and contact details.
• If you receive our email newsletters or marketing materials, we will hold your email address for the purpose of sending you updates and news that we think you will find interesting and occasionally inviting you to events. You can unsubscribe from these at any time by using the “unsubscribe” links at the bottom of each email.
• If you work for one of our customers or a partner organisation or if you are an industry contact, we may hold your name, company, job title and contact details and in certain situations. We will have been provided with this information either by you or your employer or in some cases we may have sourced it from publicly available sources, such as LinkedIn and internet searches. We need this information in order to interact with you (or your employer) for the purposes of providing our service, to verify your identity and experience as a potential candidate for our service.
• If you are a supplier or work for a supplier, we may hold your name and contact details in order to interact with you or your employer to procure and pay for goods and services.

We may also use your personal information to send you communications and contact you about our services, programs, events, campaigns, functions or news updates that may be relevant or of interest to you. From time to time we may also send you communications and information about third party products and offers. We will generally give you the option to opt-out of receiving promotional and marketing communications at the time you subscribe to our products and/or services. If you do not wish to be contacted for these purposes you can let us know at any time by contacting us at the details below or selecting the unsubscribe facility to opt out of such communications.

When you visit or log in to our website, cookies  and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address.  We (or service providers on our behalf) may then send communications and marketing to these email or home addresses.

Special categories of information

We do not ask for and do not deliberately collect special category information, which includes health, disability, racial or ethnic origin, religious belief, trade union membership, sex life or sexual orientation. Our profile fields do not request it and we do not use it to match you to roles.

If you upload a CV, we store it as you provide it. A CV is free text and may contain information of this kind if you choose to include it. We ask you not to include information you would rather we did not hold. If you want us to remove or replace a CV you have uploaded, email us at hello@gospacewalk.com.

Young people

Some of the organisations that run marketplaces on Spacewalk work with people under 18, including colleges, skills bootcamps and training providers. If you are under 18 and have been invited to join a marketplace, please check with a parent, guardian or your course provider before you create a profile or upload a CV.

We treat information about young people with the same care as everyone else's, and we do not use it for marketing.

If you are a parent, guardian or course provider and you have a question about a young person's information, email us at hello@gospacewalk.com.

Providing us with personal information about someone else

There may be circumstances when we collect personal information from someone other than the individual concerned, for example, in relation to employees or employers of registered users of Spacewalk’s services.  If you provide us with personal information about someone else you must make sure that you are entitled to disclose that personal information to us for the purpose of you using our services.

Cookies

Please refer to our Cookie Policy (https://www.gospacewalk.com/cookie-policy) to understand how we store information relating to cookies.

Circumstances in which we may disclose personal information

We may share your personal information with the following third parties in certain circumstances:

• To our customers for providing our talent marketplace service. When you apply for a role, we may share your name and contact details with: (1) the employer to facilitate interviews and selection processes, and (2) your marketplace administrator to provide them insights into job application activity on their marketplace.
• To our customers for providing our talent search service. If an employer searches the talent pool on a marketplace and wishes to contact you about a role, they cannot view your contact details until you respond to their message. You have the option to opt-out of this search feature at any time through your account settings.

• IT service providers acting as data processors who provide services or cloud-based software to enable us to operate our business. Our ‘data processors’ only process information on our behalf. They won’t use your personal information for their own purposes and we only permit them to use it in accordance with our instructions, our contract with them and the law.
• Our professional advisors, such as lawyers, in order to provide us with professional services and certain entities from whom we procure services to help us run our business.
• To the extent that we are required to do so by law, including in connection with any legal proceedings or anticipated legal proceedings, or in order to comply with any legal obligation, or to establish, exercise or defend our legal rights.
• We also reserve the right to disclose your information to a third party as part of a merger or transfer, acquisition or sale, or in the event of a bankruptcy. If any of these events happen, we will require the relevant third parties to provide comparable levels of protection that we provide to you with respect to the information we share.
• Please be aware that your personal information may be accessed by third parties from countries whose laws provide various levels of protection for personal data which are not always equivalent to the level of protection that may be provided in your own country. Where we transfer your information internationally we will take reasonable steps to ensure that your information is treated securely and the means of transfer provides adequate safeguards.

Some pages on our website embed content that is served by a third party hosting provider, Netlify. This includes the animated marketplace demo on our home page and the one on our Job Ready Talent pages. When your browser loads one of these, Netlify receives your device’s IP address, because an IP address is needed to deliver it.

Payment providers. When an organisation pays for a Spacewalk subscription, the invoice is issued and processed by a payment provider. Monthly plans use Stripe and annual plans use Wise. We give them the billing contact details needed to raise and send the invoice, and payment details are provided to them directly at the point of payment. This applies to the organisations that pay for Spacewalk, not to members of a marketplace. Stripe's privacy policy is at https://stripe.com/privacy and Wise's is at https://wise.com/gb/legal/privacy-notices

Your personal information rights

The personal information we hold about you is your information, and you have certain rights over the information under applicable data protection laws. You have the right to request a copy of all personal information we hold about to you. You also have the right to require us to correct any mistakes in the personal information we hold about you, so please let us know if we need to update any of your personal information we hold. Under some applicable data protection laws you may also have the following rights:

• Where we are processing your information based on your consent you may be able to withdraw that consent, however we may still be able to process your personal information to the extent permitted by applicable data protection laws.
• Where we process your information based on a legitimate interest you may have the right to object to our processing of that information if you feel it impacts on your fundamental rights and freedoms.
• You may have the right to object where we are processing your personal information for direct marketing purposes. The easiest way to do this is to use the unsubscribe links at the bottom of all marketing emails.
• In certain situations, you may have the right to require us to erase personal information where there is no good reason for us continuing to process it, or to request restriction of processing of your personal information.
• Finally, you may have the right to request the transfer of your personal information to you or a third party in a structured, commonly used, machine- readable format in certain circumstances.

How to exercise these rights

To make a request about your personal information, email us at hello@gospacewalk.com and tell us which right you want to exercise. You do not need to use any particular form of words. We may ask you for enough information to confirm who you are and to locate your records.

We will respond as quickly as we can, and in any event within the time limit set by the law that applies to your request. Under UK and EU data protection law that is one month from the day we receive it, which we may extend by up to two further months if your request is complex or if you have made several requests. If we extend it we will tell you, and we will tell you why. Under the Australian Privacy Act it is 30 days.

We do not charge for responding to a request unless it is manifestly unfounded or excessive.

Automated decisions

We use automated matching to suggest roles that may suit you and to help employers find candidates. These are suggestions only. No automated process decides whether a human sees your application, filters you out of an employer's view or makes any determination about your right to work. Decisions about applications are made by the employer or by the organisation running the marketplace, not by us and not automatically.

If you want to know more about how the matching works, email us at hello@gospacewalk.com.

Keeping your personal information secure

We have appropriate security measures in place to prevent personal information from being accidentally lost, misused or accessed in an unauthorised way. In addition, we limit access to your personal information to those employees, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Please help keep your personal information secure by maintaining the confidentiality of any passwords and account details used on our website.  It is your sole responsibility to maintain such confidentiality and we will not be liable for any damage, loss or expense suffered due to such disclosure.

Storage of personal information

We may transfer the personal information we collect to, and store such information in, other countries which may have different data protection laws than the country you are in.

Users' personal information is hosted on Amazon Web Services in the Ireland region. Where personal information is transferred outside the United Kingdom or the European Economic Area, we rely on the safeguards described below rather than on your consent.

In each case where your personal information is transferred overseas, we take measures to safeguard your privacy rights, such as:

• Certain processors may only transfer your personal information to countries that have been deemed to provide an adequate level of protection for personal information by the relevant regulator.
• Providers storing information in the United States may be certified under the EU-US Data Privacy Framework, or under the UK Extension to that framework, which commits them to a set of data protection principles for personal information transferred from the European Economic Area or the United Kingdom.
• Where a provider is not covered by an adequacy decision and is not certified under the EU-US Data Privacy Framework, we use standard contractual clauses approved by the European Commission, the UK International Data Transfer Agreement or the UK Addendum to those clauses, so that personal information keeps a comparable level of protection after it is transferred.

How to contact us

Spacewalk Group Ltd is the contact point for anything to do with this Privacy Policy or with the personal information we hold. Spacewalk Group Ltd is registered in England and Wales under company number 12787793. Our registered office is 5th Floor, 167-169 Great Portland Street, London W1W 5PF.

You can reach us at hello@gospacewalk.com. We monitor that address, and it is the right place for questions about this policy, requests about your personal information and complaints about how we have handled it.

How to complain

If you are unhappy with how we have handled your personal information, please tell us first so that we have a chance to put it right. Email hello@gospacewalk.com with the details. We will acknowledge your complaint within 30 days of receiving it and tell you what we are doing about it.

You also have the right to complain to a data protection regulator. You can do that at any time and you do not have to come to us first.

In the United Kingdom the regulator is the Information Commissioner’s Office. Its website is https://ico.org.uk and you can complain to it at https://ico.org.uk/make-a-complaint

In Australia the regulator is the Office of the Australian Information Commissioner. Its website is https://www.oaic.gov.au and you can complain to it at https://www.oaic.gov.au/privacy/privacy-complaints

If you are in the European Economic Area you can complain to the supervisory authority for the country where you live, where you work or where you think the problem happened.

Changes to this Privacy Policy

We may change this Privacy Policy from time to time by amending this page.

Last updated 4 August 2026