Legal
Privacy Policy
Last updated: 24 October 2026
1. Who we are
West Midlands Cyber & Tech Veterans CIC ("WMCTV", "we", "us") is a Community Interest Company registered in England & Wales under company number 17458445. We were incorporated on 14 September 2026. Our registered office is at Osbourne Suite 2.08, Imperial & Whitehall, 23 Colmore Row, Birmingham, B3 2BS. We are the data controller for the personal data described in this policy.
You can contact us about any data protection matter at info@wmcybertechveterans.co.uk.
2. What personal data we collect
- Candidate intake: full name, email, military status and service branch; optional phone number, regiment or unit, exit date, discharge reference, clearance expiry or lapse date, preferred cyber or Tech/IT roles, notes and CV. SC/DV clearance status is self-reported and unverified until checked. Initial registration has no service-number field. Officers may request a service number privately later only when genuinely needed for verification; service numbers already held remain subject to this policy. Please do not add a service number to initial notes or your CV.
- Event registrations: your name, email and any details you give when joining the interest register for forthcoming meetups.
- Sponsor & partner enquiries: company name, contact name, work email, partner type and tier of interest.
- Officer accounts: email address and authentication data for signed-in Admin Officers.
3. How we use your data and our lawful bases
- To support private military-status verification and provisionally triage candidates from self-reported clearance into Stream A (Active SC/DV), Stream B (Lapsed SC/DV) or Stream C (no clearance required on day one) — consent, given at intake. Triage is not clearance verification and does not imply automatic clearance transfer.
- To introduce candidates to relevant regional employers — consent.
- To manage interest in forthcoming community events and mentorship — legitimate interest in establishing the CIC's community mission.
- To respond to sponsorship and partnership enquiries — legitimate interest.
- To produce anonymised, aggregated impact reporting for sponsors and partners. These reports never include names, emails, phone numbers or service numbers — legitimate interest.
4. CVs and file storage
CVs uploaded during intake are stored in a private, access-controlled store. They are only visible to signed-in WMCTV Admin Officers and are never publicly accessible. CVs are shared with an employer only where you have consented to an introduction.
5. Who we share data with
We share candidate profiles with relevant regional employers only where you have given explicit consent. We use a small number of service providers to host and operate this website and its database, acting as processors under appropriate contracts. We do not sell personal data, and we do not share it for marketing by third parties.
6. How long we keep data
Candidate records are kept while your membership or job-seeking engagement with WMCTV is active, and for up to 24 months afterwards so we can report impact to our funders, unless you ask us to delete them sooner. Sponsor enquiry records are kept for the duration of the sponsorship or ally discussion and up to 24 months after. You may request erasure at any time (see Your rights below).
7. Your rights under UK GDPR
You have the right to:
- Access a copy of the personal data we hold about you.
- Have inaccurate data corrected.
- Have your data erased ("right to be forgotten").
- Restrict or object to our processing of your data.
- Data portability — receive your data in a machine-readable format.
- Withdraw consent at any time, without affecting processing already carried out.
To exercise any of these rights, email info@wmcybertechveterans.co.uk. We aim to respond within one month.
8. Security
Access to candidate data is restricted by row-level security rules so that only authenticated Admin Officers can read, update or delete records. Public forms can only submit new records; they cannot read anyone's data. All traffic is encrypted in transit over HTTPS.
9. Cookies
This site uses only strictly necessary cookies (for sign-in sessions). See our Cookie Policy for details.
10. Complaints
If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk or 0303 123 1113.
11. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows the current version. Material changes will be highlighted on this page.
