Privacy Notice
Last updated: February 2026
This page explains what personal data we collect when you use this site, why we collect it, and what we do with it. This site is operated by GB Geotechnics Ltd.
If you have any questions, contact us.
What we collect and why
When you submit an application, you provide us with your contact details, CV, and challenge solutions. We use this solely to assess your application. We also record the date and time of your submission.
We temporarily store a hashed version of your email address alongside a one-time passcode and your IP address. This data is used only for rate limiting and expires shortly after your session ends.
In your browser, we store your form progress locally so you don't lose your work if you navigate away. We also use a cookie to maintain your authenticated session for 24 hours during the application process.
Lawful basis for processing
We process your personal data lawfully under the following grounds:
- Consent - you have given us permission to process your data for the purposes outlined in this notice
- Legitimate interests - to maintain the security and integrity of our application process
Who else sees your data
Your application passes through the following third-party services:
- Resend — used to deliver one-time passcodes and to route your application to us
- Cloudflare — provides security and infrastructure for this site
- Microsoft 365 — your application is received and stored in our mailbox
How long we keep your data
Session data (OTPs, IP addresses) expires within 5 minutes. Application data held in our inbox is retained for up to 6 months after the recruitment process concludes, after which it is deleted unless we have a reason to keep it longer.
Your rights
Under UK GDPR you have the right to access, correct, or request deletion of your personal data. To exercise any of these rights, contact us.