Contents
Plain English summary: We collect the information you give us when you purchase and fill in your portfolio form. We use it to build your portfolio website and may occasionally email you about updates to your portfolio or new features. We don't sell your data, and you can ask us to delete everything at any time by emailing hello@firstrole.co.uk.
1 Who we are
First Role ("we", "us", "our") operates the website firstrole.co.uk and provides professional portfolio website services for graduates and students.
For the purposes of UK GDPR and the Data Protection Act 2018, First Role is the data controller responsible for your personal data.
Contact: hello@firstrole.co.uk
2 Data we collect
We collect personal data in two ways:
2.1 At the point of purchase (via Stripe):
- Name
- Email address
- Payment details (processed and stored securely by Stripe — we never see your full card number)
2.2 When you complete your portfolio form (via our onboarding form):
| Category | Data collected |
|---|---|
| Personal | Full name, email address, phone number, profile photograph |
| Educational | University, degree subject, graduation year, grade, modules, dissertation, awards |
| Professional | Work experience (company names, roles, dates, summaries) |
| Skills & interests | Technical skills, soft skills, languages, societies, leadership roles |
| Career goals | Career goal, additional information, preferred job location |
All data you provide is voluntarily submitted by you for the purpose of creating your portfolio. You control what you include.
3 How we use your data
We use your data exclusively to:
- Process your payment and confirm your order
- Build and publish your portfolio website at firstrole.co.uk/p/your-name
- Send you your portfolio link once it is live
- Email you about updates to your portfolio or new features we launch
- Respond to any support requests you raise
- Comply with legal obligations (including tax and financial record-keeping)
Regarding feature update emails: By purchasing a FirstRole portfolio, you agree to receive occasional emails about updates to your portfolio and new features. These emails will always be relevant to your FirstRole account. You can opt out at any time by replying to any email with "unsubscribe" or by contacting us at hello@firstrole.co.uk.
We do not: sell your data, share it with advertisers, use it for unrelated marketing purposes, or send you unsolicited third-party promotional emails.
4 Legal basis for processing
Under UK GDPR, we rely on the following legal bases:
- Contract performance — processing your data is necessary to fulfil our contract with you (building and delivering your portfolio)
- Legitimate interests — emailing you about portfolio updates and new features directly relevant to your purchase
- Legal obligation — retaining financial records is required by law
You may object to processing based on legitimate interests at any time by contacting us at hello@firstrole.co.uk.
5 Third parties we share data with
To deliver your portfolio, we use the following trusted third-party services. Each acts as a data processor on our behalf:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing | stripe.com/privacy |
| Airtable | Order and data management | airtable.com/privacy |
| Make (Integromat) | Automation between services | make.com/privacy |
| WordPress / WP Engine | Portfolio website hosting | wpengine.com/privacy |
| Google Workspace | Email communication | policies.google.com/privacy |
| Tally | Portfolio data collection form | tally.so/privacy |
We do not sell, rent, or trade your personal data with any third party for their own marketing purposes.
All third-party services we use are GDPR compliant and have appropriate data processing agreements in place.
6 How long we keep your data
| Data type | Retention period | Reason |
|---|---|---|
| Portfolio content (name, bio, skills, photo etc) | While your portfolio is active, or until you request deletion | Necessary to provide the service |
| Payment & transaction records | 7 years from purchase date | Legal requirement (HMRC / tax compliance) |
| Email correspondence | 2 years | Support and dispute resolution |
Your portfolio will remain live for as long as you wish it to be. If you would like your portfolio and associated data removed at any time, simply email us at hello@firstrole.co.uk and we will process your request within 30 days.
Please note that payment records must be retained for 7 years regardless of deletion requests, as this is required by UK law.
7 Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access — you can request a copy of all personal data we hold about you
- Right to rectification — you can ask us to correct any inaccurate data
- Right to erasure — you can ask us to delete your data (subject to legal retention requirements)
- Right to restrict processing — you can ask us to pause processing your data in certain circumstances
- Right to data portability — you can request your data in a machine-readable format
- Right to object — you can object to processing based on legitimate interests, including receiving feature update emails
To exercise any of these rights, email hello@firstrole.co.uk with your request. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
8 Cookies
Our website uses cookies to function correctly. We use the following types:
- Strictly necessary cookies — required for the website to work (e.g. WordPress session cookies). These cannot be disabled.
- Analytics cookies — if we use Google Analytics or similar, these help us understand how visitors use our site. You can opt out via your browser settings.
We do not use advertising or tracking cookies. We do not share cookie data with third parties for marketing purposes.
You can control cookies through your browser settings. Disabling cookies may affect the functionality of some parts of our website.
9 Children
Our service is intended for students and graduates. We do not knowingly collect personal data from children under the age of 13.
If you are under 13, please do not use our service or submit any personal data. If we become aware that we have collected data from a child under 13 without appropriate consent, we will delete it immediately.
Users aged 13–17 should have parental or guardian consent before using our service.
10 Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page.
We encourage you to review this policy periodically. Continued use of our service after changes are posted constitutes your acceptance of the updated policy.
11 Contact us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
- Email: hello@firstrole.co.uk
- Website: firstrole.co.uk
- Response time: We aim to respond to all privacy-related enquiries within 5 working days
Questions about your data?
We're happy to help. Get in touch and we'll respond within 5 working days.
hello@firstrole.co.uk