Privacy Policy

Interim Collective (“we”, “us”, “our”) is a private, by-referral network connecting vetted interim and fractional consultants with companies that need senior expertise.

The data controller for personal data processed through this website and platform is Rachael Walsh, trading as Interim Collective. You can contact us about anything in this policy at gdpr@the-interim-collective.co.uk.

This policy applies to interim-collective.co.uk and the Interim Collective platform, including consultant profiles, employer accounts, mandates and the vetting and endorsement processes.

It is written for the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

• Account data: your email address, authentication identifiers and the role you register under (consultant, employer, or admin).
• Consultant profile data: your name (held privately), professional headline, sectors, day rate, availability calendar, working locations and postcode, right-to-work status, LinkedIn URL, uploaded CV, avatar image, business backing and SME situation experience, fundraising experience, and board or stakeholder experience.
• Employer profile data: company details, mandate briefs and the private fields within them.
• Endorsement data: the endorser’s name, work email address, stated relationship to you, and the testimonial they submit.
• Vetting data: the recorded Microsoft Teams vetting call and the associated Read AI report, accessible only to superadmins.
• Usage data: profile views and traction, expressions of interest in mandates, and basic technical logs (IP address, browser type, timestamps) used for security and diagnostics.

• Performance of a contract: operating the network, matching consultants to mandates, and managing expressions of interest.
• Legitimate interests: vetting members to protect the network, detecting fraud and abuse, improving the product, and using AI to parse uploaded CVs so we can prefill profile fields.
• Consent: when endorsers submit a testimonial through the magic link we send them, and for any optional marketing communications.
• Legal obligation: retaining tax and accounting records where an engagement has been booked through the platform.

When you upload a CV, we send its contents to an AI model provider to extract skills, sectors, seniority and other structured fields. The output is used to prefill your profile and improve matching. You can review, edit or delete anything the AI extracts before you publish your profile.

The platform is anonymised by default. Consultant names, contact details, precise geolocation (postcode, latitude and longitude), CV and avatar storage paths, and right-to-work status are held privately and are never exposed in the public directory. Employers see anonymised profiles with headline, sectors, day rate, availability and testimonials.

Your identity is revealed to an employer only when you accept an assignment with them.

We do not sell your personal data. We share it only with the processors we need to run the service:

• Our cloud hosting, database, authentication, file storage and server function infrastructure providers.
• The AI model provider used to parse your CV.
• Our transactional email provider, which sends account and platform emails from notify.the-interim-collective.co.uk.
• Any endorser you nominate, who receives an email inviting them to write a testimonial.
• Employers, once you accept an assignment with them and your identity is released.

Some of our processors may process personal data outside the UK. Where this happens, transfers are covered by the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

• Account and profile data: for as long as your account is active.
• Endorsements: retained with your profile so employers can see verified testimonials.
• Vetting recordings and reports: retained by superadmins for the integrity of the network.
• Records of engagements: retained for the period required by UK tax and accounting law.

You can ask us to delete your account and personal data at any time (see “Your rights” below), subject to any legal retention obligations.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct data that is inaccurate or incomplete.
• Ask us to erase your data.
• Restrict or object to how we process your data.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time, where we rely on consent.
• Complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise any of these rights, email gdpr@the-interim-collective.co.uk.

We use browser storage that is strictly necessary to keep you signed in and to operate the platform. We do not use third-party advertising trackers.

We protect your data with row-level security on every database table, column-level restrictions on personal identifiers (name, precise geolocation, CV and avatar storage paths, right-to-work status), server-signed short-lived URLs for CVs and avatars, and privileged data access limited to trusted server functions.

The Interim Collective platform is intended for professional use and is not directed at anyone under 18.

We may update this policy from time to time. The “Last updated” date at the top of the page will always reflect the current version.

For any privacy question or request, email gdpr@the-interim-collective.co.uk.