Privacy Policy.

Georgie Blackburn Careers

Last updated: 13 July 2026

Georgie Blackburn, trading as Georgie Blackburn Careers ("we", "us" and "our"), is committed to protecting your privacy and handling your personal information fairly, lawfully and transparently.

This policy explains how we collect, use, store and share personal information when you:

  • visit www.georgieblackburn.co.uk;
  • contact us, complete a form or book a discovery call;
  • sign up to receive marketing emails;
  • create a Squarespace customer account;
  • buy or access the Graduate Career Launch Programme or another online service;
  • use hybrid or one-to-one career coaching services; or
  • otherwise communicate or do business with us. This policy is intended to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), as amended, and the Data (Use and Access) Act 2025. Where the EU GDPR applies to our activities, we will also comply with its relevant requirements.

Website: www.georgieblackburn.co.uk

We are the data controller for the personal information described in this policy. This means we decide why and how that information is used.

Contents

  • Part A: Your personal information
    1. Information we collect and how we use it
    1. Who has access to your information
    1. International transfers
    1. How long we keep your information
    1. How we protect your information
    1. Your data protection rights
    1. Data protection complaints
    1. Changes to this policy
  • Part B: Website cookies and similar technologies
  • Part C: Contact information

1. Information we collect and how we use it

1.1 Website and technical information

When you visit our website, we and our service providers may collect information such as your IP address, approximate geographical location, browser type and version, device and operating system, referral source, pages viewed, navigation paths, and the timing and frequency of your visits.

We use this information to operate, secure, understand and improve the website and our services. Squarespace collects certain information to provide and protect the website. Where Google Analytics or other non-essential analytics tools are used, they are activated only in accordance with your cookie choices.

Lawful basis: our legitimate interests in running, securing and improving our website and business. Where PECR requires consent for cookies or similar technologies, we rely on your consent.

1.2 Enquiries, contact forms and bookings

When you contact us, complete a website form, request information, book a discovery call or otherwise make an enquiry, we may collect your name, email address, telephone number, the content of your message, booking details, and any other information you choose to provide.

We use this information to respond to you, provide requested information, arrange appointments, assess whether our services may be suitable, prepare proposals or agreements, and administer our relationship with you.

Lawful basis: taking steps at your request before entering into a contract, performing a contract, and our legitimate interests in responding to enquiries and managing our business.

Submitting an enquiry does not automatically add you to our general marketing list. We will send marketing emails only where you have consented or where the limited 'soft opt-in' for existing customers lawfully applies.

1.3 Email marketing sign-ups

If you sign up to receive news, updates, resources, launch information or marketing about the Graduate Career Launch Programme or our other services, we may collect your name, email address, marketing preferences, the date and source of your sign-up, and records of consent. Squarespace Email Campaigns may also record delivery, opening, clicking and unsubscribe information, depending on the settings used.

We use this information to send relevant marketing emails, manage your preferences, maintain appropriate consent and suppression records, and understand the effectiveness of our communications.

Lawful basis: consent where you actively sign up. In limited circumstances, PECR may allow us to send marketing about similar services to an existing customer under the 'soft opt-in', provided we collected the details directly during a sale or negotiation, offered a clear opt-out at that time, and include an opt-out in every message. In that situation, our UK GDPR lawful basis is legitimate interests.

You can unsubscribe at any time by using the link at the bottom of a marketing email or by contacting us. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

1.4 Customer accounts and the Graduate Career Launch Programme

If you create a customer account, buy or access the Graduate Career Launch Programme, or use another paid digital service, we may collect and process information including:

  • your name and email address;
  • billing address and telephone number, where requested or provided;
  • account and login-related information managed through Squarespace;
  • details of your purchases, orders and programme access;
  • course participation information, such as access or progress information where the platform makes this available;
  • messages, support requests and customer-service records; and
  • information needed to deliver any hybrid coaching element, such as appointment details, goals, worksheets or documents you choose to share. We use this information to create and administer your account, process and fulfil your purchase, provide access to course materials, deliver online and hybrid coaching, communicate about your order or account, provide customer support, maintain security, and manage our contractual relationship.

Lawful basis: taking steps at your request before entering into a contract, performing our contract with you, complying with legal obligations, and our legitimate interests in administering, securing and improving our services.

We may send essential service messages about your purchase or account, for example account creation, password or security updates, payment confirmation, programme access, or changes affecting the service. These are not marketing messages and may be necessary for us to provide the service.

1.5 Payment and transaction information

When you purchase a service through our website, we may collect transaction information such as your name, contact details, billing address, the service purchased, price, payment status, date, refund information and related correspondence.

Payments for website purchases may be processed through Squarespace Payments, a payment solution provided by Squarespace. Squarespace Payments uses Stripe for payment processing and Sift for fraud monitoring and detection. Where offered, payments may also be made directly through Stripe or PayPal.

Payment card details are collected and processed by the relevant payment provider rather than stored directly by us. We receive only the information needed to confirm and administer the transaction, provide the purchased service, handle refunds, respond to payment queries, prevent fraud, and keep appropriate accounting records.

Lawful basis: performing our contract with you, taking steps at your request before entering into a contract, complying with legal obligations, and our legitimate interests in administering payments, preventing fraud and maintaining accurate business records.

1.6 Coaching and programme-support information

When you take part in one-to-one or hybrid coaching, we may process information you provide about your career history, education, skills, goals, job search, applications, personal circumstances and reflections. This may include coaching notes, CVs, application documents, worksheets, action plans and correspondence.

We use this information to provide and personalise the coaching service, maintain continuity between sessions, monitor agreed actions, and administer the programme.

Lawful basis: performing our contract with you and our legitimate interests in providing an effective professional service. Please avoid sending sensitive personal information through general website forms unless it is necessary. If you voluntarily disclose special category information during coaching, we will only use it where necessary and where an appropriate additional legal condition applies, which may include your explicit consent.

1.7 Legal, insurance and professional-advice purposes

We may use personal information where reasonably necessary to establish, exercise or defend legal claims, obtain or maintain insurance, manage risk, obtain professional advice, or protect our legal rights and the rights of others.

Lawful basis: our legitimate interests in protecting and properly administering the business, and compliance with legal obligations where applicable.

1.8 Legal obligations and vital interests

We may process personal information where necessary to comply with a legal or regulatory obligation, or in exceptional circumstances to protect your vital interests or those of another person.

1.9 Paper and manual records

Some information may be stored in paper or other manual records where this is reasonably necessary. Such records are subject to the same retention, security and confidentiality principles described in this policy.

1.10 Automated decision-making

We do not use your personal information to make decisions based solely on automated processing that produce legal or similarly significant effects on you.

2. Who has access to your information

We do not sell or rent your personal information. We share it only where necessary for the purposes described in this policy, with providers that support the operation of our website and services, or where the law requires it.

Who has access to your information
Provider / recipient Purpose Information involved
Squarespace Website hosting, website forms, customer accounts, online course and commerce functionality, account/order emails, and Squarespace Email Campaigns. Website, form, account, course, marketing and transaction information.
Squarespace Payments Integrated website payment solution. Contact, billing and transaction information.
Stripe Payment processing, including through Squarespace Payments where applicable. Payment and transaction information.
Sift Fraud monitoring and detection for Squarespace Payments. Transaction, device and fraud-prevention information.
PayPal Payment processing where this option is offered. Payment and transaction information.
Google Analytics Website analytics, subject to cookie consent settings. Website usage and technical information.
Google Search Console and Google Ads Website performance, search visibility and advertising where used. Website usage, technical and campaign information.
Bing Webmaster Tools Website search performance and visibility. Website usage and technical information.
Outlook / Microsoft email services Email communications and enquiry administration. Contact, enquiry and correspondence information.
Calendly Discovery-call and appointment scheduling where used. Name, contact and booking information.
Vimeo Hosting and displaying video content. Device, usage and cookie information, depending on settings.
Authorised staff or associates Providing and administering services where access is necessary and subject to confidentiality. Only the information necessary for their role.
Insurers and professional advisers Insurance, legal, accounting, compliance and professional advice. Relevant information needed for the advice or claim.
Public authorities, regulators or courts Complying with legal duties or lawful requests. Information legally required or relevant to the request.

Squarespace processes certain information on our behalf to provide website, account, commerce, course and email services. Squarespace may also use some site-usage information for its own purposes, as explained in its privacy policy.

Provider privacy information

3. International transfers

Some service providers may process personal information outside the United Kingdom, including in the United States. Where personal information is transferred internationally, we take reasonable steps to ensure that a lawful transfer mechanism and appropriate safeguards are in place. These may include UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, the UK International Data Transfer Agreement, or the UK Addendum to approved standard contractual clauses.

Further information about the safeguards used by a provider is available in that provider's privacy policy or data processing terms. You may also contact us for more information about relevant safeguards.

4. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, tax, insurance and professional obligations. Our usual retention approach is:

  • Enquiry and contact information: Normally up to two years after the last meaningful contact, unless you become a client or a longer period is reasonably needed.
  • Email marketing information: Until you unsubscribe, withdraw consent, object, or we decide the information is no longer needed. We may keep a minimal suppression record so that we can respect your opt-out.
  • Customer-account and programme information: For the duration of the account or programme and normally for up to 12 months after the account closes or the programme ends, unless a longer period is needed for support, a dispute or legal obligations.
  • Coaching notes and related service records: Normally for 12 months after the coaching or programme relationship ends, unless we agree otherwise or need to retain information for legal, insurance or professional reasons.
  • Payment, invoice, contract and accounting records: For the period required by tax, accounting and legal obligations, typically up to six years.
  • Website analytics and cookie information: In accordance with the relevant cookie settings and the retention periods applied by the provider.
  • Legal claims and complaints: For as long as reasonably necessary to investigate, resolve or defend the matter and meet any applicable limitation period. We may anonymise information so that it no longer identifies you. Anonymised information may be retained and used for statistical, service-improvement or business-planning purposes.

5. How we protect your information

We use reasonable technical and organisational measures designed to protect personal information from loss, misuse, unauthorised access, alteration or disclosure. These measures include using reputable service providers, access controls, password-protected systems, secure connections, appropriate device security, confidentiality arrangements and limiting access to those who need it.

No internet transmission or storage system can be guaranteed to be completely secure. Please take care when sending sensitive information electronically and contact us if you have concerns about the method of communication.

6. Your data protection rights

Depending on the circumstances and the lawful basis used, you may have the right to:

  • be informed about how your personal information is used;
  • ask for access to the personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • ask us to erase your information in certain circumstances;
  • ask us to restrict the use of your information in certain circumstances;
  • object to processing based on legitimate interests;
  • object at any time to the use of your information for direct marketing;
  • ask to receive or transfer certain information in a portable format;
  • withdraw consent at any time where we rely on consent; and
  • complain about how we have used your information. These rights are not absolute and may be subject to legal conditions or exemptions. We will explain if a right does not apply in a particular case.

You will not usually have to pay a fee to exercise your rights. A reasonable fee may be charged, or a request refused, only where the law permits, for example if a request is manifestly unfounded or excessive. We may ask for reasonable information to confirm your identity before acting on a request.

To exercise a right, contact us using the details in Part C. We will respond within the applicable legal timeframe.

7. Data protection complaints

If you are concerned about how we have used your personal information, please contact us first so that we can try to resolve the matter. You can make a data protection complaint by emailing hello@georgieblackburn.co.uk and clearly marking the message 'Data protection complaint', or by using the other contact details in Part C.

We will acknowledge a data protection complaint within 30 days of receiving it, take appropriate steps to investigate without undue delay, keep you informed where appropriate, and tell you the outcome.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator. The ICO recommends raising the matter with the organisation first.

ICO website: ico.org.uk/make-a-complaint

8. Changes to this policy

We may update this policy from time to time to reflect changes to our services, technology, providers or legal obligations. The latest version will be published on our website with the date of the most recent update. Where a change is significant, we will take reasonable steps to bring it to the attention of affected individuals.

Part B: Website cookies and similar technologies

1. About cookies

Cookies are small text files placed on your device when you visit a website. Similar technologies may also be used to store or access information on your device. Cookies can be temporary ('session' cookies) or remain until they expire or are deleted ('persistent' cookies).

Cookies may be strictly necessary for the website to work, or may support preferences, account security, analytics, embedded content or marketing.

2. Cookies used by this website

Our website is hosted by Squarespace and uses cookies and similar technologies that may include:

  • Strictly necessary cookies: Required to operate the website, provide security, remember essential settings, process checkout, and support customer accounts or logged-in access. These do not generally require consent.
  • Functional cookies: Support optional features and preferences, such as embedded services or enhanced website functionality.
  • Analytics and performance cookies: Help us understand website traffic, use and performance, including through Squarespace Analytics or Google Analytics. Where required, these are used only after consent.
  • Marketing cookies: May be used to measure campaigns, personalise advertising or understand interactions with marketing. Where required, these are used only after consent. Squarespace may collect information about your browser, network, device, the pages you viewed before visiting our site, the pages you view on our site, and your IP address in order to run, protect and improve its platform and services.

3. Third-party services and embedded content

The website may use third-party services that set or read cookies or similar technologies, including:

  • Squarespace, for website hosting, security, forms, customer accounts, online course access, checkout and analytics;
  • Google Analytics, Google Search Console and Google Ads, where used;
  • Calendly, for scheduling;
  • Vimeo, for embedded video content; and
  • payment providers during checkout. Third-party services process information in accordance with their own privacy and cookie policies. The links in Part A provide further information.

4. Your cookie choices

When you first visit the website, you may be shown a cookie banner or preferences panel. Except where a cookie is strictly necessary, we will seek consent where required before placing or accessing cookies on your device.

You can accept, reject or manage non-essential cookies through the website's cookie controls where available. You can also delete or block cookies using your browser settings. Blocking some cookies may affect the operation or availability of website features, including customer accounts, checkout, embedded videos or scheduling.

Your browser or device help pages provide current instructions for managing cookies. You may also review:

Part C: Contact information

General contact and data-rights requests

For questions about this policy, to exercise a data protection right, to change your marketing preferences, or to raise a data protection complaint, contact:

Business: Georgie Blackburn, trading as Georgie Blackburn Careers

Email: hello@georgieblackburn.co.uk

Telephone: 07814 232414 | International: +44 (0)7814 232414

Address: 4 Cedar Drive, Dursley, Gloucestershire, GL11 4EB, United Kingdom

Contact form: www.georgieblackburn.co.uk/contact

Information Commissioner's Office

You can find information about your rights and how to make a complaint on the ICO website.

www.ico.org.uk | Make a complaint