Privacy Policy

 
 

Last updated: 03/09/2025

This Privacy Policy explains how we collect, use, and protect your personal information when you interact with us, including when you apply for roles by emailing cv@thomaspegg.com.

1. Who we are

This website is operated by Thomas Pegg (“we”, “us”, or “our”). We are based in the United Kingdom and comply with UK and EU data protection laws.

You can contact us at: info@thomaspegg.com

2. What information we collect

We may collect:

  • Your name, email address, CV, portfolio links, and any other details you provide when applying for work.

  • Basic correspondence records (emails, attachments, and notes related to your application).

  • Technical data such as IP address and browser type if you use the website (via standard server logs).

3. How we use your information

We use your information for:

  • Reviewing your application for freelance, contract, or project-based roles.

  • Contacting you about current or future opportunities.

  • Keeping secure internal records of applicants to help us manage recruitment.

We do not sell or share your data with third parties for marketing purposes.

4. Legal basis for processing

We process your personal data on the following bases:

  • Consent – by emailing us your CV, you consent to us reviewing and storing your details.

  • Legitimate interest – we have a legitimate business interest in assessing and managing freelance and project hires.

5. Data storage and security

  • Your information is stored securely in email and project management systems.

  • Access is restricted to Thomas Pegg and, if relevant, trusted collaborators involved in hiring.

  • We may use secure automated tools to help us organise and manage applications (e.g., extracting applicant details into a database). These tools are used only for administration. All recruitment decisions are reviewed and made by a human.

  • We take appropriate steps to protect against unauthorised access, alteration, or loss.

6. How long we keep your data

We will retain your CV and application details for up to 24 months from receipt, unless you request otherwise. After this period, we may contact you to refresh your consent or securely delete your data.

7. Your rights

Under UK and EU GDPR, you have the right to:

  • Access the data we hold about you.

  • Request correction of inaccurate data.

  • Request deletion of your data.

  • Withdraw your consent at any time.

  • Complain to the ICO (UK regulator) if you are unhappy with how your data is handled.

To exercise any of these rights, email info@thomaspegg.com.

8. International data transfers and third-party processors

We use Google Workspace as part of our process to manage applications. This means your data may be processed or stored on servers outside the UK and European Economic Area (EEA), including in the United States.

Google LLC is certified under the EU-US Data Privacy Framework and implements Standard Contractual Clauses approved by the European Commission to ensure appropriate safeguards are in place.

By submitting your information, you acknowledge that your data may be transferred and processed in this way.

9. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised “Last updated” date.