1. Who we are
Cohort ("we", "us") is the data controller for the personal data you provide when using this platform. This means we decide how and why your personal data is processed, in line with the UK GDPR and the Data Protection Act 2018.
To contact us about your data, use the Feedback option in your account settings, or reach the team using the email address associated with your registration or invitation.
2. What personal data we collect
- Account data: your name and email address.
- Student profile: field of study, institution, programme year and dates, expected graduation, bio, profile photo and any CV you upload.
- Organisation profile: organisation name, type, website, description, logo, verified email domains and membership settings.
- Content you post: posts, updates and images you share.
- Messages: the content of direct messages you send and receive.
- Connections: who you follow and who follows you, and your affiliations with organisations or universities.
- Activity records: actions such as revealing a discount code, viewing or applying to a listing.
- Usage and technical data: analytics about how you use Cohort (only with your consent) and basic technical information collected by our hosting platform.
3. How and why we use your data
- To provide the service (contract): creating your profile, enabling discovery, messaging, affiliations and networking.
- With your consent: setting analytics cookies, and any optional content you choose to publish such as a CV or photo. You can withdraw consent at any time.
- For our legitimate interests: keeping the platform safe, moderating content, preventing misuse, and improving Cohort, balanced against your rights.
- For legal obligations: where we are required to retain or disclose data.
4. Who we share your data with
We do not sell your personal data. We share it only as necessary:
- Other members: profile information and posts you choose to make visible.
- Affiliated organisations and universities: to confirm your affiliation or membership.
- Listed employers, funders and partners: when you choose to apply, register or reveal an offer.
- Our service providers: hosting and infrastructure providers that help us operate Cohort, under appropriate safeguards.
- Administrators: for moderation and safety.
5. International transfers
Your data is stored on cloud infrastructure that may process data outside the UK. Where this happens, we rely on appropriate safeguards such as standard contractual clauses or recognised data protection frameworks to protect your data.
6. How long we keep your data
We keep your data while your account is active. Posts, messages and uploaded documents are kept until you delete them. Student status records follow our lifecycle rules, including any post-graduation grace period. When you erase your account, we delete the personal data described above. Some records may be retained where we have a legal obligation or legitimate interest in keeping them (for example, security records).
7. Cookies
We use essential cookies that are necessary for Cohort to function. We only set analytics cookies with your consent, which you can give or refuse using the cookie banner. You can change your choice at any time; analytics will then only resume if you consent again.
8. Security
We use access controls, admin verification and encryption in transit to protect your data. Access to personal data is limited to those who need it. No method of transmission or storage is completely secure, but we work to protect your data using appropriate technical and organisational measures.
9. Your rights
Under UK GDPR you have the right to:
- Access your personal data and receive a copy (you can do this from Account, then Data and privacy).
- Rectify inaccurate data, or complete incomplete data.
- Erase your personal data (right to be forgotten).
- Restrict our processing of your data.
- Object to processing based on legitimate interests.
- Receive your data in a portable format (data portability).
- Withdraw consent at any time where we rely on it.
To exercise any of these rights, use the Feedback option in your settings or contact us using the email associated with your account. If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
10. Children
Cohort is intended for students enrolled in higher education and is not directed at children. We do not knowingly collect data from anyone ineligible to use the platform.
11. Changes to this policy
We may update this policy from time to time. The "last updated" date shown above reflects when it was last revised.