The small print
Privacy policy
Last updated 26 June 2026
1. Who we are
The TalentXP App is provided by GetMyFirstJob Ltd, trading as Talent People (company number 06685719, registered office 61 Westway, Caterham, Surrey, CR3 5TQ, ICO registration ZA040618). We are the data controller for the information described in this policy. Our Data Protection Officer can be contacted at data@getmyfirstjob.co.uk.
2. Who this policy is for
You need to be at least 13 to have an account, and this policy applies to everyone who uses the app. If you are under 13 we are not able to set up an account for you — please ask a trusted adult how else you can take part. If you have any questions, ask a trusted adult or contact us at data@getmyfirstjob.co.uk.
3. Signing in
You sign in to the app using Microsoft Entra External ID. You don't need a Microsoft account or a password — you enter your email address and we send a one-time code to verify it's you. When you sign in for the first time, we create your Talent People candidate profile using the email address (and any name) you provide. This is the same account you can use across Talent People services, including GetMyFirstJob and the TalentXP website.
4. Information we collect
Once you're signed in, you can build your profile and take part in virtual work experiences. Depending on what you choose to complete, this may include:
| Category | What this covers |
|---|---|
| Basic profile | Name, email, phone number, date of birth, gender, home address |
| Education & experience | Qualifications, current school/college, work experience, skills |
| Work experience activity | The experiences you enrol on, the modules and activities you complete, your progress, and the answers you give within them |
| Badges & verified skills | The badges and certificates you earn, and the skills evidenced by the work experience you complete — shown on your profile and usable across Talent People services (for example, to strengthen a CV on GetMyFirstJob) |
| About-you and feedback answers | Short questions before you start an experience (what you're hoping to get out of it, how confident you feel) and optional feedback afterwards — used to personalise your experience and help the employers and educators who run programmes understand their impact (always reported in aggregate) |
| CV & documents | A CV you upload — including through the AI-assisted "CV Glow-Up" tool (Section 8) — and documents you submit as part of an experience activity |
| Optional / special category information | Disability or health information relevant to reasonable adjustments, ethnicity, and similar equality-monitoring data — always optional, captured with its own separate consent, never required to use the app |
5. How we use your information
- Running your work experiences — tracking your progress through modules and activities so you can pick up where you left off, on the app or on the TalentXP website.
- Issuing badges and certificates when you meet an experience's completion conditions, and building your record of verified skills.
- Personalising the experiences we show you, using your about-you answers and interests.
- Notifications — telling you about progress, badges you're close to earning, and experiences that are ending soon.
- Impact reporting for the employers and education providers who run programmes — always aggregated and never identifying you individually without a separate agreement covering your programme.
6. Our lawful bases
We only use your information where we have a valid legal reason under UK GDPR. Which reason applies depends on what we're doing:
| What we're doing | Lawful basis | Why |
|---|---|---|
| Creating your account and signing you in | Contract | We can't provide the app without it |
| Tracking progress and issuing badges and certificates | Contract | This is the service you've enrolled on |
| Optional equality-monitoring data (ethnicity, disability and similar) | Explicit consent | Special category data — always optional, and you can withdraw at any time |
| Marketing emails | Consent | Separate opt-in, and never sent to under-13s |
| Anonymised impact reporting for the organisations running programmes | Legitimate interests | No personal identifiers are shared |
| Telling you about other Talent People platforms | Legitimate interests, or consent where you've opted in | You can opt out at any time |
| Security monitoring and audit | Legitimate interests | Needed to keep the service and your data safe |
7. Programme-specific sharing
Some experiences are run with a particular employer, school programme or partner. Where a programme needs additional data sharing (for example with the employer running it), we tell you exactly what that is before you enrol and ask for your consent with its own tick-boxes — enrolling on those programmes is only possible once you've agreed.
8. AI-assisted features
Some parts of the app use AI — roleplay conversations with a virtual colleague, feedback on what you've submitted, assessment scoring, content-safety checks, and "CV Glow-Up", which reads a CV you upload and suggests how to present your qualifications, experience and skills more effectively. You review and approve anything CV Glow-Up suggests before it's saved to your profile. These tools run inside our own secure UK-based Azure environment, using Azure OpenAI and, for specific modules, the OpenAI API. They do not train on your personal data, they are monitored by people, and they include built-in safeguards. AI interaction logs are kept for two years so you can refer back to them. See also Section 10 — nothing in the app makes an automated decision about you.
9. Push notifications
If you allow it, the app can send you push notifications — for example, when you earn a badge or an experience you're enrolled on is closing soon. You'll be asked for permission the first time it's relevant, and you can turn it off at any time in your device's notification settings.
10. Automated decision-making
We don't make decisions about you using automated processes alone. Skills scoring, quiz marking and AI feedback help you and the organisations running programmes understand your progress — they don't decide anything about you that has a legal or similarly significant effect.
11. Keeping your information secure
Your information is stored using Talent People's secure Microsoft Azure cloud infrastructure, in UK data centres certified to ISO 27001:2022, protected by encryption in transit and at rest and by access controls limiting who can see your data. Talent People holds ISO 27001, ISO 9001 and Cyber Essentials Plus certifications.
12. Where your data is stored
All the personal data we collect is stored and processed in the United Kingdom. We do not currently transfer your personal data outside the UK. If that ever became necessary we would put appropriate safeguards in place first — such as a UK International Data Transfer Agreement, Standard Contractual Clauses approved by the ICO, or a transfer to a country covered by a UK adequacy decision — and update this notice before doing so.
13. Marketing and communications
We'll send you emails that help you use the app — reminders, progress updates, certificates and support replies. Those are transactional and don't need separate permission. Marketing emails about new opportunities or events are opt-in, and you can change your mind at any time from your account preferences or the unsubscribe link in any message. We never share your personal data with third parties for marketing, and we never market products from outside the Talent People group. If you are under 13 we will not send you marketing emails or add you to any marketing list. We may occasionally let you know about another Talent People platform that's relevant to you — for example apprenticeships on GetMyFirstJob matching skills you've earned — and you can opt out of that specifically, separately from everything else.
14. Retention
We keep your information for two years from whichever is later: the date you last used the app, the date you registered, or the date you last contacted us, unless you ask us to delete it sooner or we're required to keep specific records for longer. Badges and certificates you've earned stay on your profile for as long as your account exists.
15. Your rights
You can ask us for a copy of the information we hold about you, ask us to correct or delete it, object to how we use it, ask us to restrict its use, withdraw a consent you've given, or ask us to transfer your data to another provider. Contact our DPO at the details in Section 1 — we aim to respond within 30 days. If you're unhappy with how we've handled your information you can also complain to the Information Commissioner's Office at ico.org.uk.
16. Children and young people
The TalentXP App is for people aged 13 and over — if you are 11 or 12, see the Children's Privacy Notice referred to in Section 2. We apply the ICO's Age Appropriate Design Code: settings default to high privacy, we don't use your data for marketing unless you (and where appropriate a parent or guardian) actively opt in, and we write our notices in plain language. If you are under 18, we ask that a parent or guardian is aware you are using the app.
17. Changes to this policy
We'll post any changes to this policy here, and let you know directly if a change is significant.
18. Contact us
Questions about this policy can be sent to data@getmyfirstjob.co.uk.