Our approach
Personal information must be processed lawfully, fairly and transparently; collected for clear purposes; limited to what is necessary; accurate; retained only as long as needed; and protected with appropriate security.
Responsibility
Grant Parry is the Data Protection Lead. The board retains collective governance responsibility. Enquiries can be sent to privacy@thehwbco.com.
Security measures
Measures are intended to include role-based access, strong authentication, secure organisation-controlled storage, restricted sharing, data minimisation, secure deletion, incident recording and proportionate risk assessment. The CV Builder’s technical and organisational controls will be documented separately for school and council use.
Children and young people
Services involving people under 18 require age-appropriate information, proportionate safeguarding, clear school or guardian arrangements where relevant, privacy-conscious defaults and a documented risk assessment before wider rollout.
Data breaches
Suspected personal-data breaches must be reported promptly to the Data Protection Lead, assessed, recorded and reported to the relevant people or regulator where legally required.
Requests and deletion
Use the data request page to request access, correction or deletion. CV Builder participants may also have a secure deletion route within the service.