Privacy Policy | in.coming

Privacy Policy

We at In.coming value your membership and understand just how important it is to protect your Personal Data (defined herein). Please take the time to review our privacy policy (the “Privacy Policy”) carefully in conjunction with our terms and conditions (the “Terms and Conditions”), as you agree to be unconditionally bound by both the Privacy Policy and the Terms and Conditions when you use www.theincoming.co.uk (the "Website").
  
What does this policy cover?
  
We take your Personal Data seriously at In.coming. This Privacy Policy explains in detail the types of Personal Data we may collect about you when you interact with us. It also explains how we store and handle that data, and keep it safe.

 

We know that there’s a lot of information here, but we want you to be fully informed about your rights, and how In.coming uses your data.

 

We hope the following sections will answer any questions you have but if not, please do get in touch with us.

Who is In.coming?
 
Here at In.coming (a registered trade mark of A.K.H. Capital Ltd.), we're committed to delivering career advice and industry insights to students and other interested individuals. Our aim is to help them develop an understanding into the application processes, the professions and industries so that they can make great career choices. 

For simplicity throughout this notice, ‘we’ and ‘us’ means A.K.H. Capital Ltd trading as In.coming.

 

What is Personal Data?
 
Personal data is data that can identify you as a living individual. There is general Personal Data such as name and address. Personal data may also include information on physical and mental health, sexual orientation, race or ethnic origin, religious beliefs, trade union membership and criminal records (known as “Sensitive Personal Data“). Sensitive Personal Data must be protected to a higher level.
 
Who does In.coming collect Personal Data from?
 
We collect Personal Data from the following types of people to allow us to undertake our business:

  • “Incomers” – subscribed members of the website or application;
  • Mentors - prospective and current mentors who provide video content;
  • Website users; 
  • Supplier contacts to support our services; and
  • Employees, consultants, temporary workers and contractors.

 

Why does In.coming collect Personal Data?

Incomers: 

We want to connect you with the best career advice relevant to you. One way to achieve this is to get the clearest picture of who you are. 

For prospective candidates, we may use your Personal Data to:

  • deliver advice and information to you regarding your applications, chosen industry and career;
  • inform you about events that are most likely to interest you;
  • send you advice and information regarding In.coming and its services;
  • send you surveys and feedback requests to help improve our services;
  • carry out market research and analysis (including equal opportunities monitoring); and
  • send you important information regarding changes to our policies and other terms and conditions. 

Please do remember that if you choose not to share your Personal Data with us, or refuse certain contact permissions, we might not be able to provide some of the services you’ve asked for. 

 

Mentors: 

We want to connect your advice and expertise with In.coming Incomers.  We may use your Personal Data to:

  • match your advice with Incomers of similar background, profile, interests and/or motivations;
  • send you survey and feedback requests to help improve our services; and
  • send you important information regarding changes to our policies and other terms and conditions. 

 

What Personal Data does In.coming collect?

Incomers: 
 
We may collect and process the following Personal Data you will have given us:  

  • Your username; 
  • Your password;
  • Name;
  • Email Address;
  • Post Code;
  • Telephone Number;
  • Home Address;
  • Employment History;
  • Education & professional qualifications;
  • Educational Background;
  • University;
  • Whether you require a visa;  
  • Degree Subject;
  • Degree Grade;
  • Graduation Year;
  • A-Level Results; 
  • Your CV; 
  • IP Address; 
  • Marketing preferences;
  • Photographs; 
  • Videos; 
  • Voice recordings;
  • Bank details; and
  • If you contact us, we may keep a record of that correspondence.

 

Where you have given your explicit consent, sensitive Personal Data you may give us includes: 

  • Gender; 
  • Health Data; 
  • Sexual Orientation; and 
  • Ethnicity.

 

Mentors: 

Personal data you may give us includes: 

  • Name;
  • Email Address;
  • Telephone Number;
  • Employment History;
  • Education & professional qualifications;
  • Educational Background;
  • University;
  • Whether you require a visa;  
  • Degree Subject;
  • Degree Grade;
  • Graduation Year;
  • Marketing preferences;
  • Photographs; 
  • Videos; 
  • Voice recordings; and 
  • If you contact us, we may keep a record of that correspondence.

 

Where you have given your explicit consent, sensitive Personal Data you may give us includes: 

  • Gender; 
  • Health Data; 
  • Sexual Orientation; and 
  • Ethnicity.

 

How does In.coming collect Personal Data? 

Incomers: 
 
Directly from you, when:

  • you visit our website; 
  • you register as a member;
  • you complete any surveys we send you;
  • you engage with us on social media; or
  • you correspond with us (for example, by email, telephone or video conferencing). 

 

Through publicly available sources:

  • We may source employment data about you on LinkedIn.

 

We also collect from:

  • our website; 
  • cookies; and
  • other tools and applications. 

 
Mentors: 

Directly from you, when:

  • you visit our website; 
  • you complete any surveys we send you; or
  • you correspond with us (for example, by email, telephone or video conferencing). 

 

Through publicly available sources:

  • We may source employment data about you on LinkedIn.

 

We also collect from:

  • our website; 
  • cookies; or
  • other tools and applications. 

 

Use of Google Analytics

In.coming uses Google Analytics to gather information about how users and In.comers interact with the In.coming website. For further information regarding how Google Analytics collects and processes data please refer to the site "How Google uses data when you use our partners' sites or apps", (located at www.google.com/policies/privacy/partners/, or any other URL which Google may provide from time to time).

 

What legal basis do we rely on to process your Personal Data?

UK Data Protection laws set out a number of different reasons for which a company may collect and process your Personal Data, including:

 

Legitimate Interest

In certain situations, we need to process your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests. 

Incomers:

 

Our legitimate interests include understanding our candidates and providing the most relevant and highest levels of service by doing the following:

  • delivering our services to you including but not limited to, career and industry advice and/or information which has been tailored to you;
  • contacting you about events that we think might be of interest to you; 
  • assessing your eligibility for an event; 
  • communicating with you;
  • processing data for marketing purposes; or
  • analysing your behaviour, activities, preferences and needs in order to send relevant and tailored promotional communications to you.

 

Mentors:

Our legitimate interests include understanding our candidates and providing the most relevant and highest levels of service by doing the following:

  • processing data for marketing purposes; or
  • communicating with you.

 

Consent 

In certain situations, we can collect and process your Personal Data with your consent.

 

Incomers:

We may ask you to consent to disclose Sensitive Personal Data such as your gender, ethnicity and educational background. 

Please note that you have the right to withdraw your consent at any time. Where consent is the only legal basis for processing, we will cease to process your Personal Data after your consent is withdrawn.

 

Contractual Obligations

We need your Personal Data to comply with our contractual obligations of delivering a tailored service to you.

 

Incomers: 

In.coming may process your Personal Data when we need to do this to fulfil a contract with you, such as deliver tailored career and industry advice to you.

 

Mentors: 

In.coming may process your personal data when we need to do this to fulfil a contract with Incomers. 

 

Legal Compliance

Incomers & Mentors: 

In.coming may be compelled to process your Personal Data to comply with our legal and regulatory obligations under UK law, e.g. to prevent and investigate fraud or anti-social behaviour and to work with law enforcement agencies:

  • handling customer contacts, queries, complaints and disputes; and
  • fulfilling our duties to our customers, colleagues, shareholders and other stakeholders; 

 
Public Interest

Incomers

In.coming may process your personal data for the performance of a task carried out in the public interest. 

 

Who do we share your Personal Data with?

 

We sometimes share your Personal Data with third parties. We require third parties to respect the security of your data and to treat it in accordance with the law. 
 
Incomers and Mentors: 

In.coming may make Personal Data available to:

  • Our service providers
    • Your data may be shared with parties who process data on our behalf. We are happy to provide a list of these third-party suppliers on request
  • Government authorities and third parties involved in court
    • Any regulatory authority or statutory body pursuant to a request for information or any legal obligation which applies to us. 
  • Other third parties
    • Occasionally, we may share Personal Data with other third parties such as legal and professional advisors or insurers. 

 

Other than the disclosures referred to in this policy, we will not disclose any Personal Data without your permission unless we are legally entitled or obliged to do so.
  
Where we store your Personal Data
 
Due to the nature of our business and the global technologies required, your Personal Data is generally transferred to, and stored at, third-party service providers outside the European Economic Area (EEA). It is generally processed by staff operating outside the EEA.
 
In such situations, we transfer the minimum amount of Personal Data necessary, anonymise it (where possible) and enter legal contracts to ensure these third parties handle your Personal Data in accordance with this Privacy Policy and the European levels of data protection. We will take all steps reasonably necessary to ensure that your Personal Data is treated securely and in accordance with this privacy policy.

 

Security
 
In.coming is committed to keeping your Personal Data safe and secure from unauthorised access to or unauthorised alterations, disclosure or destruction of information that we hold. Our security measures include: 

  • encryption of our services and data;
  • reviewing our information collection, storage and processing practices, including physical security measures;
  • restricting access to Personal Data to In.coming employees, contractors and agents who need to know that information in order to process it for us and who are subject to contractual confidentiality and processing obligations.  They may be disciplined or their contract terminated if they fail to meet these obligations; and
  • Internal policies setting out our data security approach.

 

How long do we keep your Personal Data for?
 
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Details of retention periods for different aspects of your personal data are available in our retention policy which you can request from us. 
 
 

Your rights
 
In accordance with applicable UK Data Protection Laws, you have a number of rights when it comes to your Personal Data.

  • The right to be informed
    • You have the right to be provided with clear, transparent and easily understandable information about how we use your Personal Data and your rights. This is why we’re providing you with the information in this policy.
  • The right of access
    • You have the right to obtain access to your Personal Data (if we’re processing it), and certain other information (similar to that provided in this Privacy Policy). This is so you’re aware and can check that we’re using your information in accordance with data protection law.
  • The right to rectification
    • You are entitled to have your Personal Data corrected if it’s inaccurate or incomplete.
  • The right to erasure
    • This is also known as the ‘right to be forgotten’, and, in simple terms, enables you to request the deletion or removal of your Personal Data where there is no compelling reason for us to keep using it. It is not a general right to erasure, there are exceptions.
  • The right to restrict processing
    • You have the right to object to certain types of processing, including processing for direct marketing (i.e. if you no longer want to be contacted with potential opportunities);
    • In cases where we are processing your Personal Data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your Personal Data.
  • The right to data portability
    • You have rights to obtain and reuse your Personal Data for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
  • The right to lodge a complaint
    • You have the right to lodge a complaint about the way we handle or process your Personal Data with your national data protection regulator.
  • The right to withdraw consent
    • If you have given your consent to anything we do with your Personal Data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your Personal Data with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your Personal Data for marketing purposes.

We usually act on requests and provide information free of charge, but may charge a reasonable fee to cover our administrative costs of providing the information for:

  • baseless or excessive/repeated requests; or
  • further copies of the same information.

Please consider your request responsibly before submitting it. We’ll respond as soon as we can. Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we’ll come back to you and let you know. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask for further information in relation to your request to speed up our response. 
 
If you would like to exercise any of your rights, please send an email to info@theincoming.co.uk. Please do not forget to tell us who you are. 
  
Third Party Privacy Policies

Our website and some emails contain links to and from the websites of our partner networks, third-party employers, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites and any services that may be accessible through them have their own privacy policies and that we do not accept any responsibility or liability for these policies, or for any Personal Data that may be collected through these websites or services, such as contact and location data. Please check these policies before you submit any Personal Data to these websites or use these services.
 
Changes to Privacy Policy
 
Any changes we make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by email. 

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. 
 
Contact
 
The data controller responsible for your information is A.K.H. Capital Ltd.
 
If you have any questions, comments or requests regarding this privacy policy or our use of your Personal Data, you can email info@theincoming.co.uk. If you do not think we are handling your Personal Data adequately, you have the right to lodge a complaint with the Information Commissioner’s Office. Further information, including contact details, are available at https://ico.org.uk A.K.H. Capital Ltd. is registered with the ICO with registration number ZA474924.
 
Unauthorised Access

If an In.coming Member thinks an unauthorised person has become aware of any In.coming password, they should contact In.coming immediately. We cannot be responsible for any unauthorised use of a Member's profile or unauthorised activity on the Website.

 

Transfer of Ownership 

If we sell or transfer In.coming to another company, this may transfer all of our rights and obligations under these terms and conditions without any further consent and may disclose or transfer all information we hold about Incomers or prospective Incomers to a prospective or actual new owner. Such a disclosure or transfer will not alter the rights of such Incomers in respect of the use that can be made of such information by such other company.