CODE FIRST GIRLS PRIVACY POLICY
Last updated: 20 January 2026
YOUR PRIVACY MATTERS TO US
Code First Girls Ltd (“Code First Girls”, “Code First Teams”, “we”, “us” or “our”) is committed to protecting and respecting your privacy.
For the purposes of this privacy policy (“Policy”), Code First Girls Ltd is the data controller and is a company registered in England and Wales (company number 13792640), with its registered office at 3rd Floor, 20–24 Old Street, London, EC1V 9AB, and registered with the UK Information Commissioner’s Office.
This Policy explains how we collect, use, store, share, and protect your personal data, as well as your rights in relation to that data, whether you engage with us as a learner, community member, employee, contractor, partner, client, or representative of an organisation.
Entity and Brand Clarification
Code First Girls Ltd operates and delivers services under multiple brands, including Code First Girls and Code First Teams. This Policy applies to all personal data collected, processed, and stored by Code First Girls Ltd in connection with its activities across both brands, including (but not limited to) learner programmes, community participation, education and training delivery, corporate and employer partnerships, recruitment and placement activities, events, marketing, commercial relationships, and any other products or services offered to individuals or organisations.
We are committed to being transparent with you about the data we collect about you and how it is used and shared. This Policy aims to give you information on how we collect and process your personal data through your use of our website, including applying for a place on a coding course, joining our community, or applying to become an instructor.
1. INFORMATION WE COLLECT
1.1 Applying for a place on a self-paced coding course (for example: Tech Tasters, Classes)
When applying for a place on one of our self-paced courses, you will first be asked to apply and register on our website via our application form. If successful in your application, you will be provided with access to our Learning Hub, which is our primary platform for delivering self-paced courses, learning content, assessments, and learner tools.
From time to time, we may also use additional third-party platforms to support learning delivery, communication, or administration of our programmes. These may include, for example, video conferencing tools, collaboration tools, content-sharing platforms, or community platforms. The platforms we use may change over time.
1.2 Applying for a place on an employee coding course (for example: Business Essentials)
When applying for a place on one of our employee training courses, you will first be asked to register on our website via our application form. After registration, you will receive onboarding communications and instructions to access the course via our Learning Hub, which is our primary platform for learning delivery and content access.
For some programmes, we may also use additional third-party tools to support live delivery, collaboration, file sharing, or communication. These may include platforms such as video conferencing tools (e.g. Zoom), collaboration or messaging tools (e.g. Slack), or document storage platforms (e.g. Google Drive).
Participation in certain communication platforms may be optional. If you do not wish to be added to a particular platform, you may contact us via our Community Support Form.
1.3 Applying to join our community or respond to an opportunity
As part of the registration process to join our community or apply for a Code First Girls opportunity, you will be asked to provide information about yourself. This information may include, but is not limited to: name, phone number, email address, education status, university, date of birth, when you left school, highest qualification, country of residence, nationality, right to work, level of tech experience, career stage, sectors of interest, reasons for applying, and a link to your LinkedIn profile.
We may also collect equality, diversity, and inclusion information such as gender, ethnicity, social mobility indicators, and neurodiversity. Where this data is collected, it is either anonymised at the point of collection or separated from identifiable personal data and used only in aggregated form to report on overall diversity and inclusion statistics.
1.4 Applying for a place on our Advanced Programmes or Consultant Placement opportunities (for example: CFGdegree, +Masters, Mid-Level Accelerator, Tech Accelerator)
When applying for a place on one of our Advanced Programmes or consultant placement opportunities, you will be asked to share additional details such as your CV and information regarding your technical experience, motivations for applying, and reasons for wanting to join a particular company or role.
In some instances, our partner companies may require additional information relating to background checks, security, and right-to-work verification.
If successful at the initial application stage, you may be asked to complete a technical assessment via a platform such as Coderbyte or via our Learning Hub, followed by a video interview using a platform such as Hireflix.
Further interviews or assessments may be conducted directly by the partner company.
After registration, you will receive onboarding communications and instructions to access the course. For our advanced programmes, we may use our Learning Hub platform and/or additional third-party tools to support live delivery, collaboration, file sharing, or communication. These may include platforms such as video conferencing tools (e.g. Zoom), collaboration or messaging tools (e.g. Slack), or document storage platforms (e.g. Google Drive).
Participation in certain communication platforms may be optional. If you do not wish to be added to a particular platform, you may contact us via our Community Support Form.
1.5 Applying for a freelance contract role (for example: Instructor, Interview Coach, Technical Coach, Ambassador)
When applying for a freelance or volunteer role, you will complete an application process as outlined in section 1.3 and may be asked to provide additional information such as your CV, technical experience, motivations, and availability.
You may be asked to undertake an interview or technical assessment. If successful, you will receive onboarding instructions and may be required to use certain platforms to deliver or support programmes, such as the Learning Hub or collaboration tools (e.g. Slack). The platforms used may vary depending on the role.
1.6 Our clients and commercial partners
We collect personal data from individuals working with or representing our clients and commercial partners. This may include name, job title, organisation, email address, phone number, and communications relating to our services.
1.7 Job applications (Code First Girls employee roles)
If you apply for employment with Code First Girls, you will complete an application via a HR platform such as BambooHR. You may be asked to provide your CV, employment history, contact details, and other relevant information. All applications are treated in strict confidence.
1.8 Learning and performance data
When you participate in our courses or programmes, we may collect and generate data relating to your learning activity and performance. This may include course progress, attendance, assessment results, completion status, engagement with learning materials, submissions, and feedback.
We use this data to administer programmes, support learners, issue certificates, improve learning content, report on outcomes (including to sponsors or partners where applicable), and meet contractual and legitimate business obligations. Where shared externally, data will be anonymised or aggregated unless otherwise agreed.
1.9 Other technical information
Technical information such as IP addresses may be treated as personal data in certain jurisdictions. We also use cookies and similar technologies. You will be able to manage your cookie preferences when you first visit our website.
2. HOW WE USE THE INFORMATION WE COLLECT
2.1 For course applications
We may contact you by email, web or mobile app notifications or text during and after the course to check your progress, address any attendance issues, and send your course completion certificate. We also send you an invitation to join a cohort group channel (e.g on a platform such as Slack or on our Learning Hub) with other learners on your course, so instructors can keep you informed of learning tips and administrative matters.
If you do not wish to join the Slack channel group, please let the Code First Girls team know by submitting a request via our Community Support Form.
We will also use the information you provide during your application to match you to a sponsor company.
2.2 Code First Girls community surveys and career opportunities
From time to time we may email you to ask about your career progression and insights about your current position. We rely on responses to demonstrate our progress towards our mission of getting more women working in the tech sector. We may also contact you with invitations to our events and news of career opportunities with partner organisations.
The legal basis for this processing is our legitimate interests, provided your rights and interests are not overridden.
2.3 Instructors and host organisations
If you become a course instructor, we will use the information you share with us to assess your suitability. We may contact you regarding course updates, paid opportunities, and community activities.
For host organisations, we may contact you regarding course logistics and updates. Personal data is processed for the performance of a contract if applicable and for our legitimate interests in promoting our community.
2.4 Applications for jobs or volunteering roles
Data provided for employment or volunteer roles is used to process your application and communicate other opportunities. Processing is based on contractual necessity if you become an employee or volunteer, and legitimate interests for promotion and community engagement.
2.5 Analysing the Code First Girls community
We process data from various platforms used to deliver our programmes and services, including but not limited to Hubspot, Learning Hub, Google Drive, Looker, and Typeform. This data may include information about:
Learning activity and engagement
Course participation and progress
Assessment results and performance metrics
Interactions with learning content or community tools
We use this information to:
Personalise learning experiences
Support programme delivery and administration
Analyse outcomes and report on learning or community metrics
Improve our courses, content, and overall services
Legal basis for this processing is our legitimate interest in supporting the mission of Code First Girls and ensuring high-quality programme delivery.
From time to time, we may use additional platforms, tools, or integrations to provide similar functionality. Any new tools will also be used in accordance with this Privacy Policy, and personal data will always be processed in line with applicable data protection laws.
We may share aggregated or anonymised insights with sponsors, partners, or other stakeholders to demonstrate programme outcomes. Individual personal data is only shared externally where necessary and in accordance with this Privacy Policy.
2.6 Marketing
We do not sell your contact information. We may contact you to inform you of opportunities within the Code First Girls community. You may opt-out of marketing emails via our Community Support Form or via the unsubscribe link at the bottom of the emails.
Opting out does not affect administrative communications, course participation, or rights management.
2.7 Our legal obligations
We may process your data to comply with legal obligations, protect rights, prevent fraud, or ensure safety.
2.8 Equality and Diversity
We may collect equality and diversity data via forms. This data is anonymised or aggregated to report on overall diversity and inclusion statistics.
2.9 Assisting Support Communications with AI
We may use AI tools to assist our team in drafting responses to support requests. Human oversight is always applied, and AI is not used for automated decisions with legal or similarly significant effects.
The legal basis is a legitimate interest in providing timely and effective support.
3. DISCLOSURE OF YOUR DATA
3.1 Third parties
In certain circumstances (such as our Advanced Programmes applications) we may request to share your data with third parties, as part of your application for a specific role within our partner organisations.
3.1.1 Vendors and website providers
To assist us in meeting business operations needs and to perform certain services and functions, we may share personal data with vendors and service providers, including providers of hosting services (such as AWS), cloud services (such as Google or Hubspot), artificial intelligence platform providers to assist with support communications (such as Google for its Gemini models), and other information technology services providers, email communication software and email newsletter services, advertising and marketing services, payment processors and web analytics services.
We only allow our service providers to handle your data if we are satisfied that they take appropriate measures to protect your data. We also impose contractual obligations on service providers relating to ensure they can only use your data to provide services to (us and) you.
3.1.2 Legal requirements
If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, including to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of our website, courses and community, or the public, or (v) protect against legal liability.
3.1.3 Business transfers
If we are involved in a merger, acquisition, financing due diligence, reorganisation, bankruptcy, receivership, sale of all or a portion of our assets, or transition of service to another provider (collectively a “Transaction”), your data and other information may be shared in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that transaction along with other assets. Usually, information will be anonymised, but this may not always be possible. The recipient of the information will be bound by confidentiality obligations.
3.2 Where your data is held
Information may be held at our offices, third-party agencies, service providers, representatives and agents as described above. Some of these third parties may be based outside the European Economic Area. For more information, including on how we safeguard your data when this occurs, see section 3.3 below.
3.3 Transferring your data out of the EEA
To deliver the website, course or community to you, it is sometimes necessary for us to share your data outside the EEA, for example, our service providers located outside the EEA. These transfers are subject to special rules under European and UK data protection laws. Some of these non-EEA countries may not have the same data protection laws as the United Kingdom and EEA. We will, however, ensure the transfer complies with data protection law and that all personal data will be secure. Our standard practice is to use standard data protection contract clauses which have been approved by the European Commission. Questions may be directed via our Community Support Form.
4. CHILDREN
Our website, courses and community are not directed at/to children who are under the age of 16. We do not knowingly collect personal data from children under the age of 16. If you have reason to believe that a child under the age of 16 has provided personal data to us, please contact us via the Community Support Form.
5. THIRD PARTY LINKS
Our website may include links to third-party websites, plug-ins and applications. Please remember that when you use a link to go from our website to another website or you request a service from a third party, this Policy no longer applies. Please be aware that we are not responsible or liable for the privacy practices of other websites. We encourage you to be aware when you leave our website and to read the privacy policies of every website that collects personally identifiable information. This Policy applies solely to information collected by us on our website.
Your browsing and interaction on any other websites, or your dealings with any other third-party service provider, are subject to that website’s or third-party service provider’s own rules and policies. We do not monitor, control, or endorse the privacy practices of any third parties.
We encourage you to become familiar with the privacy practices of every website you visit or third-party service provider that you deal with and to contact them if you have any questions about their respective privacy policies and practices. This Policy applies solely to personal data collected by us through our website and does not apply to these third-party websites and third-party service providers.
6. YOUR RIGHTS
Data protection law provides you with the following rights, which you may be able to exercise free of charge:
ACCESS
The right to be provided with a copy of your data.
RECTIFICATION
The right to require us to correct any mistakes in your data.The right to be provided with a copy of your data.
ERASURE
The right to require us to delete your data – in certain situations.
RESTRICTION OF PROCESSING
The right to require us to restrict the processing of your data – in certain circumstances, e.g. if you contest the accuracy of the data.The right to require us to correct any mistakes in your data.The right to be provided with a copy of your data.
DATA PORTABILITY
The right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party- in certain situations.
TO OBJECT
The right to object: (i) at any time to your data being processed for direct marketing (including profiling); and (ii) in certain other situations to our continued processing of your data, e.g. processing carried out for our legitimate interests.The right to require us to restrict the processing of your data – in certain circumstances, e.g. if you contest the accuracy of the data.The right to require us to correct any mistakes in your data.The right to be provided with a copy of your data.
NOT TO BE SUBJECT TO AUTOMATED INDIVIDUAL DECISION MAKING
The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you. The right to require us to restrict the processing of your data – in certain circumstances, e.g. if you contest the accuracy of the data.The right to require us to correct any mistakes in your data.The right to be provided with a copy of your data.
If you would like to exercise any of these rights, please email us using this form. Please note that requests to exercise data protection rights will be assessed by us on a case-by-case basis.
If you have a complaint about how we handle your data, please get in touch with us via this form. If you are unhappy about how a complaint has been handled, you have the right to refer your complaint to the Information Commissioner’s Office.
7. SECURITY
We have appropriate security measures to prevent personal data from being accidentally lost, used or accessed unlawfully. From time to time, we implement and update administrative, technical, and physical security measures to help protect your information against unauthorised access, loss, destruction, or alteration. We limit access to your data to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures to deal with suspected data security breaches. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
However, the internet is not a 100% secure environment, so we can’t guarantee the security of the transmission or storage of your information. In particular, emails sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the website or email. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on our website or third-party websites.
8. DATA RETENTION
We will retain your data for as long as necessary to provide our services to you and fulfil transactions you have requested, or for other purposes such as collecting longitudinal data about our community’s career progress. Because these needs can vary for different data types in the context of different products or services, actual retention periods can vary significantly. Deletion requests may be submitted via the Community Support Form.
9. CHANGES TO THIS POLICY
We reserve the right to modify this Policy at any time by this provision. If we make changes to this Policy, we will post the revised Policy on the Code First Girls website and update the “Last Updated” date at the top of this Policy. By continuing to use our website or providing us with personal data after we have posted an updated Policy, or notified you by other means if applicable, you agree that you will be deemed to have agreed to be bound by the replacement policy.
10. CONTACT US
Questions or complaints regarding this Policy or personal data may be submitted via the Community Support Form.
Or by writing to:
Code First Girls Ltd
3rd Floor, 20–24 Old Street
London, EC1V 9AB
