Last updated: 8 October 2026
This privacy policy explains how Good Innovation Limited ("Good Innovation", "we", "us") uses personal information. It covers:
clients and potential clients;
job applicants and employees;
research participants; and
other people we work with.
Information about how we use data when you visit our website is in our website privacy notice. Please see our website privacy notice for information about how we use data, including cookies, when you visit our website.
If you have any questions about this policy, or how we use your information, please contact us at operations@goodinnovation.co.uk. We may update this policy from time to time, and the latest version will always be on this page.
What we collect
We keep information about you in our client relationship management (CRM) system. This includes your name, job title, organisation, email address and phone number, along with records of our interactions with you, such as summaries of meetings, emails and other communications.
Why we use it
We use this information to:
manage our relationship with you and any projects we work on together;
respond to your enquiries and provide support;
tailor our communications to your needs and interests;
tell you about our services, unless you've asked us not to; and
improve our services, based on your feedback.
Our lawful basis
We use your information because it is in our legitimate interests to manage and develop our client relationships, deliver our services effectively, and grow our business. We only collect information that is relevant and necessary, and we've considered your interests and rights. You can ask us to stop sending you marketing communications at any time.
If you sign up to our newsletter, we use your email address to send it to you, based on your consent. We use Mailchimp to send our newsletter. You can unsubscribe at any time using the link in our emails.
Who we share it with
We may share your information with:
service providers who support our business, such as IT, data storage, CRM and email providers;
our employees and contractors, where they need it to work with you;
partners we work with on your project, where relevant;
our professional advisers;
anyone who takes over all or part of our business; and
courts, regulators or law enforcement, where the law requires it, or to establish or defend legal claims.
We may use AI-powered tools to support our work, such as transcribing and summarising meetings. We'll always let you know before recording or transcribing a meeting. Most of our client information is stored on secure cloud systems provided by third parties. Where any of these process data outside the UK, we make sure appropriate safeguards are in place.
How long we keep it
We keep your information while we have an active relationship with you. We regularly review the information we hold about potential clients and inactive contacts, and delete anything we no longer need.
Good Innovation is the controller of the information you provide during the application process and your employment, unless we tell you otherwise.
When you apply
We'll ask for your CV and a covering letter, which will include your name, contact details, previous experience, education, referees and any other information relevant to the role. Our Operations Director will have access to this information, and our hiring managers will see it when shortlisting for interview. We use it to assess your suitability for the role and to contact you about your application.
You don't have to provide the information we ask for, but it may affect your application if you don't.
We may also invite you to complete an optional equality monitoring form. This is kept separately, and is never seen by the people making decisions about your application.
If you're unsuccessful, we may ask whether you'd like us to keep your details in our talent pool for one year, so we can contact you about future vacancies. We'll only do this if you agree.
If we make you an offer
If we make a conditional offer, we'll ask for further information so we can carry out pre-employment checks. These may include:
proof of identity and right to work in the UK: we'll check your documents, either in person or digitally, and keep copies;
proof of qualifications: we may check your original documents and keep copies;
a criminal records declaration, asking you to declare any unspent convictions and, for some roles, a DBS check; and
references: we'll contact your referees directly, using the details you provide.
If we make a final offer, we'll also ask for:
your bank details, to pay your salary;
emergency contact details; and
information to enrol you in our pension scheme. Our pension provider is a separate organisation.
While you work for us
During your employment, we will also hold information such as your contract, pay, tax and National Insurance details, holiday and absence records, performance reviews, training records, and any information about your health that you share with us, for example fit notes or reasonable adjustments. We may monitor use of our IT systems, as explained in our IT Security policy.
Our lawful basis
We use your information:
to take steps before entering into a contract with you, and to perform your employment contract;
to meet our legal obligations, for example on right to work checks, tax, pensions, health and safety, and holiday records; and
for our legitimate interests in managing our business and workforce, for example performance reviews and IT security.
We process special category data, such as health information, and criminal records information, where this is necessary to meet our obligations as an employer, under Article 9(2)(b) of the UK GDPR and Schedule 1 of the Data Protection Act 2018. Equality monitoring information is only collected with your consent. We do not use AI or automated decision-making to make decisions about job applicants or employees.
Who we share it with
We use third parties to help with some of our processes, such as payroll, pension and IT providers. We have contracts with them which mean they can only use your information as we instruct, must keep it secure, and must keep it only for as long as we tell them. Some organisations we share information with, such as HMRC and our pension provider, are controllers in their own right, and have their own privacy notices.
We won't share your information with third parties for their marketing, or transfer it outside the UK unless appropriate safeguards are in place.
How long we keep it
Unsuccessful applicants: your application and any interview notes are kept for one year after the recruitment campaign closes, then deleted.
Employees: information from your application, including your criminal records declaration, references and checks, becomes part of your employee file. We keep your employee file for the length of your employment plus six years.
Right to work records: these are kept for the length of your employment plus two years.
Holiday and holiday pay records: these are kept for six years, as required by law.
Good Innovation is a consultancy that carries out research on behalf of charities and other organisations.
What we collect
We’ll ask for your name, contact details and confirmation that you've agreed to take part. During the research, we'll collect what you tell us, and may record the session with your permission. Sometimes, with your explicit agreement, we may ask about sensitive topics, such as your health.
Why we use it and our lawful basis
We use your information to carry out the research you've agreed to take part in, on the basis of your consent. If we ask about sensitive topics, we'll ask for your explicit consent.
Who we share it with
The findings we share with the organisation we're working for are anonymised, so you can't be identified. We may use trusted service providers, including AI-powered transcription and analysis tools, to help us process and analyse the research. These providers can only use your information on our instructions.
Keeping you safe
What you share with us is confidential. The only exception is if you tell us something that suggests you or someone else is at risk of serious harm. In that case, we may need to share it with the right people to keep you safe.
How long we keep it
We keep identifiable information, including recordings, until 12 months after the project ends, then delete it or anonymise it.
Withdrawing your consent
You can stop taking part at any time, without giving a reason. You can also withdraw your consent afterwards, by contacting your recruiter or us at operations@goodinnovation.co.uk, and we'll delete your information, unless it has already been anonymised and can't be linked to you.
We may also hold personal data about other people we work with, such as contacts at our suppliers. We use this information only to manage that relationship, in line with our contracts with those organisations.
You have the right to:
ask for a copy of the information we hold about you;
ask us to correct information that is wrong or incomplete;
ask us to delete your information;
ask us to restrict how we use your information;
object to us using your information, including for marketing;
ask us to transfer your information to another organisation; and
withdraw your consent at any time, where we rely on it.
Some of these rights only apply in certain circumstances. To make a request, or to update your information or marketing preferences, please contact us at operations@goodinnovation.co.uk. We will normally respond within one month.
How to complain
If you're unhappy with how we've handled your personal data, please contact us at operations@goodinnovation.co.uk. We will acknowledge your complaint within 30 days, look into it promptly, keep you updated, and tell you the outcome.
If you're still not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Contact us
operations@goodinnovation.co.uk
Good Innovation Limited
128 City Road, London, United Kingdom, EC1V 2NX
ICO registration number ZA376949