Privacy Policy

Last Updated: September 2026

1. Introduction & Overview

This Privacy Policy explains how GalaProp Ltd trading as APC Collective (“we”, “us”, or “our”) collects, uses, stores, and protects personal data obtained from visitors to our website, prospective clients, corporate partners, and enrolled candidates.

We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purpose of applicable data protection law, GalaProp Ltd is the Data Controller.

  • Trading Name: APC Collective

  • Company Registration Number: 17439610

  • Jurisdiction: Registered in England and Wales

  • Registered Office Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ

  • Data Contact: info@apccollective.co.uk

2. Information We Collect

We collect and process the following categories of personal information:

  1. Identity & Contact Details: Full name, corporate/employer email address, direct telephone number, job title, and employer/organization name.

  2. Mentoring, Training & APC Assessment Data: Candidate CVs, summary of experience drafts, case studies, continuous professional development (CPD) logs, mock interview performance notes, written feedback, and candidate progress evaluations.

  3. Financial & Commercial Data: Invoicing details, business billing addresses, purchase orders, and payment confirmation details (we do not directly store full card numbers).

  4. Technical & Usage Information: IP addresses, browser type, operating system, and interaction data captured via essential website logs or analytical tools (subject to your consent).

3. Lawful Bases for Processing

Under UK GDPR Article 6, we rely on the following lawful bases to process your personal data:

  • Contractual Necessity: Processing required to deliver mentoring packages, review candidate documentation, conduct training sessions, and invoice organizations or individuals under an agreed Statement of Work or booking confirmation.

  • Legal Obligation: Processing required to maintain statutory accounting, corporation tax, and VAT records under UK law.

  • Legitimate Interests: Processing necessary to manage our business operations, maintain mentoring quality standards, respond to professional inquiries, and prevent fraud, provided candidate and client fundamental rights do not override these interests.

  • Consent: Processing where you have provided explicit, affirmative consent (e.g., subscribing to direct email updates or accepting non-essential website analytics). You may withdraw consent at any time.

4. How We Share Your Information

We do not sell, rent, or trade personal data. We share personal data only with trusted third-party service providers bound by strict confidentiality and data protection terms:

  • Cloud Infrastructure & Productivity: Encrypted cloud storage, document review suites, and video conferencing tools used to deliver mentoring and mock interviews.

  • Financial & Professional Services: Cloud accounting software, banking partners, our professional accountants, and professional indemnity insurers.

  • Statutory Authorities: Law enforcement or regulatory bodies where disclosure is strictly mandated by applicable law.

5. International Data Transfers

Where personal data is stored or processed outside the United Kingdom, we ensure appropriate statutory safeguards are maintained (such as UK International Data Transfer Agreements, approved standard contractual clauses, or transfers to jurisdictions recognized under UK adequacy regulations).

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was gathered:

  • Candidate Submissions & Feedback Records: Retained for 6 years following the conclusion of the mentoring or training service, in line with statutory limitation periods for professional liability and contract claims.

  • Statutory Accounting & Tax Records: Retained for a minimum of 6 years from the end of the relevant financial year in compliance with HMRC requirements.

  • Prospective Inquiries: Retained for up to 12 months if no commercial engagement ensues.

7. Your Statutory Rights

Under the UK GDPR, you have the right to:

  • Access: Request a copy of the personal data we hold about you.

  • Rectification: Request correction of inaccurate or incomplete records.

  • Erasure: Request deletion of your personal data where retention is no longer legally necessary.

  • Restriction: Request temporary restriction of processing under certain legal conditions.

  • Data Portability: Request transfer of your electronic data to another service provider.

  • Object: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, contact us at info@apccollective.co.uk.

If you have unresolved concerns, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or via their helpline on 0303 123 1113.

8. Cookies

Our website uses essential technical cookies to ensure platform functionality. Non-essential cookies (such as analytics scripts) will only operate with your prior affirmative consent via our cookie settings banner.