Who we are
WorkPathway UK is a service operated by Play North West CIC, a Community Interest Company based in the North West of England. It helps people find work, apprenticeships and training — for people aged 16 and over, including career changers and returners of any age. Play North West CIC is the data controller for the information you give us. To exercise your rights or ask anything about your data, contact us at hello@playnorthwestcic.com (company no. 15796794).
What we collect
- Details you give us: name, age, location, education, employment status, interests, skills, goals.
- Things you create: CVs, applications, coach conversations, interview answers, skills-gap analyses.
- Account data: your email and a securely hashed password (handled by Supabase Auth).
- Basic technical data needed to keep the service secure (e.g. your IP for rate limiting).
Why we use it (lawful basis)
- Consent — you agree when you create an account; you can withdraw it any time by deleting your account.
- Legitimate interests — to run, secure and improve the service.
We do
not sell your data, and we do
not use it for advertising.
AI features
When you use the AI Coach, CV Builder, Interview Practice or Skills-Gap tools, the text you enter may be sent to our AI provider (OpenAI) to generate a response. We screen inputs for harmful content. Please don't enter sensitive personal details you don't need to share.
Who we share it with
The providers that run the service for us, under data-processing agreements: Supabase (database & sign-in), OpenAI (the AI features), Vercel (hosting), and Resend (emails). The job map uses OpenStreetMap on the web and Apple Maps on iPhone — we do not use Google Maps.
If you join a programme with an access code (from a college, charity, Jobcentre or council), and only if you tick to agree, your support worker at that organisation can see your progress — the steps you've completed, how your confidence is changing, and your first name — so they can support you. You choose this when you join, and you can ask us to stop at any time.
We also produce anonymous, grouped outcome reports for the organisations that fund programmes (e.g. “18 of 30 young people started work”). These never name you, and we never report a figure for a group smaller than 10 people, so no one can be identified.
We may share information if the law requires it. We never sell your data.
Sensitive information (and your control over it)
Some tools may ask about things like being care-experienced, having a disability or health need, caring responsibilities, or contact with the justice system — only to point you to the right support and money you're entitled to. This is “special category” data, so we only collect it with your
explicit, separate consent, you can skip any of it, and you can delete it at any time from your
Account & privacy page.
What we will never do
We will never analyse your face or voice to judge your emotions or “confidence”, never run hidden wellbeing surveillance, and never let employers browse your profile. Those things are unfair to young people and we've chosen not to build them — ever.
How long we keep it
For as long as your account is active. Delete your account and we remove your personal data (some minimal records may be retained briefly where the law requires).
Your rights
Under UK GDPR you can access, correct, export, restrict or delete your data, and object to certain uses. You can do the main things yourself on the
Account & privacy page:
- Download my data — a full export as JSON.
- Delete my account — permanent erasure.
You can also complain to the
Information Commissioner's Office (ICO).
Keeping your data safe
Encryption in transit (HTTPS) and at rest, strict per-user access controls (database row-level security), and secrets kept server-side. No method is 100% secure, but we take it seriously.
Age
WorkPathway UK is for people aged 16 and over. We don't knowingly collect data from anyone under 16; if you're under 16, please speak to a parent, guardian or your school's careers adviser instead.