Privacy notice · Crest self-assessment
Your information
Draft for data protection review
This notice covers the Crest self-assessment and the applications that come through it. It sets out what we collect, why, who sees it, how long we keep it and how to have it deleted.
Who we are
Crest is the executive brand studio of TheOnly. The business responsible for your information is THEONLY LTD, a company registered in England and Wales (company number 16089487). To ask anything about your information, email hello@theonly.uk.
What we collect
- What you enter: your name, email, role, organisation, where you're based, your LinkedIn profile address and your 12-month ambition.
- Your answers to the ten statements, and the result we work out from them.
- A copy of your public LinkedIn profile, which we save as a PDF from the address you give.
- Your choices about email, and when you agreed to this notice.
We save your details from the first step, so you can finish later. That includes applications that are never submitted.
Why we use it
To give you your result, to send you a copy and a link to finish, and to tell you about Foundation and what it would focus on for you. For a funded-place campaign, we also use it to choose the places against the published criteria. If you opt in, we send occasional emails about Crest and TheOnly; you can unsubscribe at any time. We don't sell your information or share it for anyone else's marketing.
Our lawful basis is your request to take part, and our legitimate interest in replying to it. Marketing emails rely on your consent.
How AI tools are used
We use an AI assistant to help compare your answers with your LinkedIn profile and to prepare first drafts of any follow-up. A person on the Crest team reads and decides everything that reaches you. [Confirm with the adviser: the tool, its terms, where data is processed, and whether material is used to train it.]
Who sees it
Only the Crest consultants who work with applicants.
Where it's stored
Our service providers store and send it on our behalf: Netlify hosts this site and stores your application, and Resend sends our emails. Both may process data outside the UK, under safeguards approved for international transfers.
How long we keep it
- Applications that are started but not submitted: deleted 90 days after you last saved.
- Submitted applications and saved profiles: kept for 12 months, then deleted, unless you go on to work with Crest.
- If you opt in to emails, we keep your name and email for that until you unsubscribe.
You can ask us to delete your information sooner.
Your rights
You can ask to see the information we hold about you, have it corrected, have it deleted, or have us stop using it. Email hello@theonly.uk. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.