Legal · The True Troop Consulting Ltd
Privacy Notice
Privacy Notice
Service: TroopBoard (the TrueTroop Planner Intelligence Hub) Effective date: 4 July 2026 Version: 1.1 Last updated: 4 July 2026
In plain English: TroopBoard is invitation-only. We collect the minimum needed to run the service — your email address, your preferences, and the jobs you save. We sign you in with one-time email links, we use cookieless analytics, we do not run advertising trackers, and we never sell your data. To ask about anything here, or to exercise any of your rights, email privacy@thetruetroop.com.
1. Who we are
This service is provided by The True Troop Consulting Limited, the data controller.
- Registered in England and Wales, company number 16209809
- Registered office: 148 Mansell Road, Patchway, Bristol, England, BS34 5QX
- Privacy contact: privacy@thetruetroop.com (or support@thetruetroop.com)
If you have any concerns about how we handle your personal data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at any time — see Section 8.
2. Scope of this notice
This notice covers the personal data we process when you use TroopBoard ("the Service"). It does not cover personal data processed in other contexts (for example, when you enrol in the Primavera P6 Masterclass, which is governed by a separate notice).
3. What personal data we collect
We collect only the data we need to operate the Service.
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, Supabase user identifier | You |
| Authentication data | Session tokens, sign-in link timestamps, login IP address (transient) | Supabase Auth |
| Preferences | Preferred regions, market, salary minimum, digest cadence | You |
| Activity data | Jobs you save, activity events used to operate the Service | You |
| Service usage | Page views and feature usage (aggregated, cookieless) | Plausible Analytics |
| Error data | Crash reports and error traces (minimised where possible) | Sentry |
We do not collect: special category data (race, religion, health, sexual orientation, political opinion), biometric data, or financial payment data. The Service has no payment processing.
4. Job listing data is not your personal data
The Service aggregates publicly posted job listings from third-party job APIs (currently Adzuna and Reed.co.uk), and may add direct employer career systems over time. That listing data is published by employers and recruitment platforms; it is not your personal data. We do not share your personal data with those parties.
5. Why we process your data and the lawful basis
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Create and manage your account; authenticate you with a one-time email link | Performance of a contract |
| Show you relevant job listings based on your preferences | Performance of a contract |
| Send you the optional weekly digest email | Consent (you opt in; you may withdraw at any time) |
| Operate, secure and improve the Service; prevent and investigate misuse | Legitimate interests (operating a reliable, safe service) |
| Comply with legal obligations (e.g. responding to lawful requests) | Legal obligation |
You can object to processing based on legitimate interests at any time by emailing privacy@thetruetroop.com; we will weigh your objection against our legitimate interest and respond within one month.
6. Who else processes your data (our subprocessors)
We use the following processors, each under a data processing agreement or terms equivalent to one.
| Subprocessor | Purpose | Location |
|---|---|---|
| Supabase, Inc. | Database, authentication, storage | London, UK (eu-west-2) |
| Resend, Inc. | Transactional email (sign-in links, digest) | EU/US |
| Vercel, Inc. | Frontend hosting | Global edge network |
| Railway Corp. | Ingest worker hosting | EU region |
| Sentry (Functional Software, Inc.) | Error monitoring | EU region available |
| Plausible Insights OÜ | Privacy-friendly analytics (no cookies) | EU |
Where data is transferred outside the UK or EEA, we rely on the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses (SCCs), together with any additional safeguards the receiving country requires.
7. How long we keep your data
| Data | Retention |
|---|---|
| Account data | Kept while your account is active, and for up to 30 days after you request deletion (to handle accidental requests) |
| Preferences and saved jobs | Deleted with your account |
| Authentication and security logs | No longer than 90 days |
| Error data (Sentry) | 90 days |
| Aggregated usage analytics (Plausible) | Anonymised and retained up to 24 months |
| Database backups | Rolling window (currently up to 7 days), then deleted automatically |
8. Your rights
Under UK GDPR you have the right to:
- Be informed — this notice is part of that.
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data (the "right to be forgotten").
- Restrict processing — ask us to pause processing while a dispute is resolved.
- Data portability — request your data in a structured, commonly used format.
- Object — object to processing based on legitimate interests or direct marketing.
- Withdraw consent — for any processing we do based on your consent.
To exercise any of these, email privacy@thetruetroop.com. We respond within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ or by telephone on 0303 123 1113.
9. Cookies and tracking
The Service uses first-party session cookies for authentication only. These are essential cookies; no consent banner is required by law.
We do not use third-party advertising cookies, Google Analytics, or similar tracking. Our analytics provider (Plausible) operates without cookies and without collecting personal data.
10. Children
The Service is not directed at children and is gated to invitation-only adult professional users. If you believe a child has signed up, please contact us so we can delete the account.
11. Security
We use industry-standard security: TLS encryption in transit, encryption at rest, passwordless one-time sign-in links, Row Level Security on database tables containing personal data, least-privilege service access, and security logging. No system is perfect; if we discover a personal data breach that creates a risk to your rights, we will notify the ICO within 72 hours and you without undue delay, as required by law.
12. International transfers
Where data is transferred outside the UK, we use the legal safeguards set out in Section 6.
13. Changes to this notice
We will update this notice as the Service evolves. Material changes will be notified to you by email or by a banner in the Service. The "Last updated" date at the top of this page reflects the latest version.
14. Contact
For all privacy queries: privacy@thetruetroop.com For anything else: support@thetruetroop.com
Postal: The True Troop Consulting Limited, 148 Mansell Road, Patchway, Bristol, England, BS34 5QX
This Privacy Notice is published in the Service at /privacy and is available on request.