Privacy
How we handle your data. Plain English.
Who we are
NextStep UK is the data controller for the personal data you provide when you create an account or use this service.
What data we hold
- Account: email address, and optionally a display name, home postcode and year group.
- Activity: saved apprenticeship opportunities, application tracker entries, career quiz results and vacancy alerts you have set up.
- Technical: basic server logs (IP address, timestamps) required to run the service securely.
Why we hold it
- To let you save and track opportunities across devices.
- To personalise vacancy search results and match scores.
- To keep the service secure and prevent abuse.
Who we share it with
We never sell your data. We do not share it with employers, schools or advisers without your explicit consent.
We use trusted infrastructure providers (Lovable Cloud, which is built on Supabase) to run the service.
Your rights
- Access — download everything we hold about you from your account page.
- Rectification — edit your profile at any time.
- Erasure — delete your account permanently from your account page.
- Complaint — contact the ICO at ico.org.uk.
Under 13s
NextStep UK is designed for 16–21 year olds. Accounts are not for children under 13. If you become aware that a child under 13 has created an account, please contact us and we will delete it.
Contact
Data protection queries: privacy@nextstepuk.example