Privacy policy

Towpath Holdings Limited (“Towpath”, “we”, “us”) is the data controller for personal data collected through this site and through our hiring.

Registered office: 124 City Road, London, United Kingdom, EC1V 2NX. Registered in England & Wales (No. 16540606).

What we collect

If you subscribe to new posts, we collect your email address and, if you tell us, whether you're a financial adviser.

If you apply for a job with us, or we get in touch with you about a role, we collect:

• your name and contact details
• your CV, work history and qualifications, and your answers to any application questions
• notes from our conversations and interviews with you
• if we offer you a job: references (including regulatory references from previous employers, which are required for financial advisers), right-to-work checks, and background checks, which may include credit and criminal record checks where the role requires them

We get this information from you, from recruitment agencies, from your referees and previous employers, and from public sources such as the FCA Register and LinkedIn.

We only collect sensitive information (for example health information, so we can make adjustments to our process) if you choose to give it to us.

How we use it

We use your email to send you new blog posts and news about Towpath. We use website data to understand how visitors use the site and to keep it working properly.

If you apply for a job or we contact you about one, we use your information to assess you for the role, to communicate with you about it, and, if we offer you the job, to carry out the checks we need to before you start. We may use software, including AI tools, to help us organise and review applications, but a person always makes the decisions about who we hire.

Lawful basis

We process your email based on your consent (you opted in). We process website data based on our legitimate interest in operating and improving the site.

We process job applicants' information based on our legitimate interest in finding and hiring the right people, and to take steps at your request before entering into an employment contract. Some checks, such as right-to-work checks and regulatory references, are required by law. We only carry out criminal record checks where the law allows, for roles where they're needed.

Analytics

We measure how the public pages of this site are used: which pages and posts are read, how far readers scroll and which site or link sent you here. PostHog processes this for us in the EU and uses it for nothing else. It sets no cookies and cannot identify you. Switch it off here at any time; the only thing saved on your device is that choice. We also honour a browser setting that asks sites not to track you.

Sharing

We don't sell your data. We may share it with technology providers that support our systems (e.g. email delivery, hosting), who are required to keep it secure and use it only for the purposes we specify.

For job applicants, we may also share information with recruitment agencies we work with, providers of hiring software and background checks, other companies in the Towpath group, and our professional advisers.

International transfers

Some service providers may process data outside the UK. Where this happens, appropriate safeguards (such as UK adequacy regulations or standard contractual clauses) are in place.

How long we keep it

If you subscribe to new posts, we keep your email until you unsubscribe.

If you apply for a job and aren't successful, we keep your information for 6 months after the role is filled, or longer if you agree to us keeping it for future roles. If you join us, your application becomes part of your employee record.

Your rights

Under UK data protection law, you can ask to access, correct or delete your data, restrict or object to how we use it, or receive a copy to move elsewhere. Where we rely on your consent, you can withdraw it at any time, and you can unsubscribe from any email we send. To make a request, email [email protected]. We'll respond within one month, or tell you if we need longer because the request is complex.

Complaints

If you're unhappy with how we've handled your data, please tell us at [email protected]. We'll acknowledge your complaint within 30 days and let you know the outcome. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Security

We take appropriate measures to protect your data against unauthorised access, loss or misuse.

Changes

We may update this policy. The latest version will always be on our website.

Contact

Email: [email protected]