Career Capital Ltd
Version 1.0 · Effective 31 October 2026
1. Who are we and how to contact us
Career Capital Ltd (company number 15702804, registered office 82a James Carter Road, Mildenhall, Bury St Edmunds IP28 7DE) is the controller of the personal data described in this notice. This notice explains how we use personal data about our clients, prospective clients and people we deal with in providing our consulting services. Questions about this notice or your data can be sent to matthias@careercapital.one.
2. What we collect and where it comes from
We collect:
• Identity and contact details: your name, postal address, mobile number and personal email address, and a record that we checked your proof of address (we delete the copy after checking).
• Information about your situation: your employer, role, pay and bonus, performance, career plans, and details of any redundancy, disciplinary or investigation process you tell us about.
• Session records: our notes, materials we prepare for you, recordings where made under our terms, and messages between us.
• Billing information: invoices, payments, time records and any debt-recovery steps.
• Consent records: who you have agreed we may share your details with, and why.
Most of this comes from you. We may also receive information from someone who refers you to us, from public sources such as LinkedIn or company registers, and, if we need to recover unpaid fees and cannot reach you, from a licensed tracing agent.
3. Why we use it and our legal bases
| What we do | Legal basis |
|---|---|
| Providing consulting sessions and related work | Performing our contract with you, or taking steps at your request before entering into it |
| Invoicing, keeping accounts and meeting tax obligations | Legal obligation, and performing our contract |
| Discussing your situation without identifying you, and sharing identifying details with your agreement | Our legitimate interests in providing a useful service; your written confirmation where details identify you |
| Recovering unpaid fees, including tracing a current address | Our legitimate interests in being paid for our work |
| Keeping records to deal with complaints, disputes and legal claims | Our legitimate interests, and legal obligation |
| Checking for conflicts of interest between clients | Our legitimate interests in managing our business properly |
Sensitive information: If you tell us about your health or similar sensitive matters, we use it only to advise you, and share it only with your explicit consent for that disclosure. We may also use it where needed to establish or defend legal claims. We do not sell your data, use it for marketing to third parties, or make decisions about you by automated means.
4. Who we share it with and international transfers
We share personal data only as set out in our client terms. This includes consultants who support your matter, our accountants, professional advisers and insurers, debt-collection and tracing agents if fees are unpaid, and authorities such as HM Revenue & Customs where the law requires it.
We use these service providers, which process data on our behalf:
| Provider | Used for | Where data may be processed | Safeguard |
|---|---|---|---|
| Google (Workspace) | Email, documents, file storage | UK, EU and US | UK–US data bridge or UK transfer clauses in Google’s terms |
| Anthropic (Claude) | AI assistance with drafting and analysis | US | UK transfer clauses in Anthropic’s terms |
| IONOS | Business email | EU | UK adequacy decision for the EU |
| Meta (WhatsApp) | Arranging sessions and messages | US and elsewhere | UK–US data bridge or UK transfer clauses |
| Apple (iCloud) | Device backup | US and elsewhere | UK–US data bridge or UK transfer clauses |
| First contact | US and elsewhere | UK–US data bridge or UK transfer clauses |
5. Debt recovery, recordings and messaging
Debt recovery and tracing: If an invoice remains unpaid after a reminder, we may pass your name, contact details and the amount owed to a debt-collection agent. If we no longer have a working address for you, we may instruct a licensed tracing agent to find your current address. We share only what is needed for this.
Recordings: We may record sessions for internal note-taking, as set out in our client terms, and only with your consent where the law requires it. Recordings form part of your client file and are kept and deleted on the same basis as our other records (see section 6).
Messaging: We use our business WhatsApp number for arranging sessions and practical matters. Chats may use disappearing messages to protect your confidential employment information. Anything important is saved to your client file. Where the law requires us to keep information, for example for a legal claim or a request about your data, we keep the relevant messages.
6. How long we keep data, your rights and complaints
Retention. We keep client records, including recordings, for six years after our last work for you, and then delete them, unless we need them longer for a legal obligation or claim. Information about prospective clients who do not engage us is deleted within 12 months.
Your rights. You have the right to:
• ask for a copy of the personal data we hold about you
• ask us to correct inaccurate data
• ask us to delete your data, or to restrict how we use it
• object to our use of your data based on our legitimate interests
• receive data you gave us in a portable format
• withdraw any consent you have given, at any time
Some rights have limits, for example where we must keep records by law. To use any of these rights, email matthias@careercapital.one. We will respond within one month.
Complaints: If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk, 0303 123 1113.
Changes to this notice: We may update this notice. The current version and date are shown at the top.