Privacy Policy
đą 1. Who are we?
The website www.thegoodfeat.com is published and operated by The Good Feat, a platform dedicated to supporting consultants and experts in the humanitarian and development sectors.
The Good Feat is also present on thirdâparty platforms such as WhatsApp and LinkedIn, which are operated under their own terms and privacy policies. When you interact with our WhatsApp communities or LinkedIn company page, we act as data controller for the processing operations that we initiate (e.g. inviting you to a group, managing community rules, responding to messages), while WhatsApp and LinkedIn remain independent controllers for the operation of their services.
Data Controller:
The Good Feat
28 rue du docteur Thore
92330 Sceaux
Email: connect@thegoodfeat.com
đŻ 2. Data Flows and Subcontractors
Personal data is processed using:
- Hostinger (website hosting)
- WordPress/WorkScout (site management, user profiles)
- WooCommerce and Stripe (payment processing)
- WhatsApp (Meta Platforms) for operating groups and communities dedicated to information sharing, networking and support between members. WhatsApp acts as an independent data controller for data processed through its application in accordance with its own Privacy Policy, while The Good Feat acts as data controller for the community management purposes it defines.
- LinkedIn (LinkedIn Ireland Unlimited Company) for operating The Good Featâs company page, including Page Insights and interactions (likes, comments, private messages). LinkedIn is a joint/independent controller for Page Insights under its Page Insights Joint Controller Addendum and its own Privacy Policy.
- Data is only shared with these partners as needed for operations, under appropriate contractual or legal arrangements, and each partner is required to comply with GDPR and confidentiality rules.
đ 3. What data do we collect?
We collect and process: Identity and contact information (name, email, phone, address, profile/CV data), Navigation data (cookies, IP address, device/browser info, usage stats), Payment data (collected and processed by Stripe/WooCommerce, never stored by The Good Feat), Content and communications (comments, ratings, messages between users). We collect and process the following data when you use our site or services:
đ€ For candidates:
- Identification data: Name, surname, email address, phone number, postal address, professional experience, education, and other relevant information included in your CV or application materials.
- Contact data: Messages sent via contact form, email correspondence, and any communication related to job applications or inquiries.
- Navigation data: Cookies, pages visited, duration of visit, IP address, browser type and version, device information, referral source, and other usage data to improve user experience.
đą For recruiters:
- Identification data: Name, surname, email address, phone number, postal address, company name, company address, business sector, VAT number, and other company-related information provided during registration or profile setup.
- Contact data: Messages sent via contact form, email correspondence, and communications related to job postings or candidate management.
- Navigation data: Cookies, pages visited, duration of visit, IP address, browser type and version, device information, referral source, and other usage data to optimize service delivery.
- Job posting data: Information entered when posting job offers, including job descriptions, requirements, location, contract type, and deadlines.
Social and messaging channels (WhatsApp, LinkedIn): When you join one of our WhatsApp communities or groups, or interact with our LinkedIn company page (follow, like, comment, share, send messages or respond to forms), we may collect and process: Identification data: profile name, photo, job title, organisation and other information you make public or share with us through these platforms. Contact and interaction data: content of messages you send us, participation in groups or events, comments, likes, and responses to surveys, polls or lead generation forms. â Technical and usage data: aggregated statistics and Page Insights provided by LinkedIn about visits and interactions with our page (e.g. number of followers, anonymised demographic statistics) without access to the underlying individual profiles. â The use of WhatsApp and LinkedIn is voluntary. If you do not wish these platforms to process your data, you can choose not to join our groups or not to interact with our page and instead contact us directly by email.
đŻ 4. Why do we collect your data?
Your data is collected and processed for the following legitimate purposes, ensuring transparency and compliance with GDPR principles:
- Providing and improving our services: To deliver the features and functionalities you expect, to personalize your experience, and to enhance the performance, security, and usability of our platform.
- Responding to your requests: To handle inquiries, provide customer support, and communicate with you effectively and efficiently.
- Managing your user account: To create, maintain, and administer your user profile and preferences on the platform.
- Processing your application or CV (for candidates): To evaluate your qualifications, facilitate job application processes, and enable potential matching with relevant job opportunities.
- Managing your recruitment activities (for recruiters): To allow you to post job offers, review applications, and execute recruitment workflows.
- Ensuring security and legal compliance: To protect our platform and users against unauthorized access, fraud, and other security threats; and to comply with legal obligations and legitimate interests, such as audit and record-keeping requirements.
- Sending communications (with your consent): To provide updates, newsletters, marketing materials, and other information relevant to your interests, only when you have explicitly consented to receive such communications.
- Data retention and management: To retain your data only for as long as necessary for the purposes outlined above and in accordance with applicable laws; and to erase or anonymize data when no longer needed.
- In addition to the purposes listed above, your data may also be processed for the following purposes:
Community management and networking (WhatsApp groups/communities): To create, administer and moderate thematic groups or communities for consultants and recruiters, share information about opportunities, events, news and resources, and facilitate exchanges between members in line with the groupâs objectives.
Professional visibility and audience development (LinkedIn): To publish content on the humanitarian and development sectors, interact with your comments and messages, answer your requests, and analyse anonymised Page Insights to understand and improve the reach and relevance of our content.
â
When communications through WhatsApp groups go beyond the strict management of the community (e.g. sending marketing information not directly linked to the groupâs purpose), your prior consent will be obtained where required.
âïž 5. What is the legal basis for processing your data?
The processing of your personal data by The Good Feat is strictly governed by the GDPR principles and is based on one or more of the following lawful grounds depending on the context and purpose of the processing::
- Consent: We process your data on the basis of your consent when you explicitly agree to certain uses of your personal data, such as subscribing to newsletters, receiving marketing communications, accepting the use of nonâessential cookies, or submitting information via online forms. You may also be asked to consent when you join certain WhatsApp groups that are clearly presented as information or marketing channels, or when you provide your data through LinkedIn lead generation forms or similar tools. You may withdraw your consent at any time, for example by using the unsubscribe link in our emails, leaving a WhatsApp group, unfollowing our LinkedIn page, changing your LinkedIn advertising preferences, modifying your cookie settings, or by contacting us directly. Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.
- Performance of a Contract: Some processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract. This includes, for example, when you register an account, submit a job application, purchase a service, participate in a programme or cohort, or use our consulting or recruiting services. It may also include communication via WhatsApp groups or LinkedIn messages when these channels are used to deliver services you have requested (such as programme coordination, followâup of a consulting support, or operational exchanges necessary for the performance of our agreement).
- Legal Obligation: We may process your personal data when this is necessary to comply with legal obligations to which we are subject, such as tax, accounting, labour or social security rules, statutory retention requirements, or to respond to lawful requests from public or judicial authorities.
- Legitimate Interests: In certain situations, we process your personal data on the basis of our legitimate interests or those of third parties, provided that such interests are not overridden by your fundamental rights and freedoms. These legitimate interests include ensuring the security and proper functioning of our website and services, preventing fraud and abuse, and protecting our rights, our users and our business. They also cover the improvement of our services, the development of our activities, and the conduct of audience measurement and analytics. In addition, we rely on legitimate interests to operate and moderate professional WhatsApp communities that you have chosen to join, in order to foster exchanges between members, share relevant information, and maintain a safe, respectful and professional environment. Finally, we may process data to manage and improve our LinkedIn company page, interact with your comments and messages, and use LinkedIn Page Insights and similar tools to better understand our audience, measure the performance of our content, and ensure the security of our accounts and prevention of abuse, without disproportionately affecting your privacy.
We carefully assess and balance these legal bases to guarantee your privacy rights are respected and that all data processing is transparent, fair, and secure.
đ„ 6. Who has access to your data?
Only authorized members of our team and our subcontractors (hosting provider, technical service providers) have access to your data, strictly within the scope of their duties.
In addition, when you interact with us on WhatsApp or LinkedIn, other members of the relevant group or the public (depending on your own privacy settings on these platforms) may view the information you decide to share (e.g. messages in a WhatsApp group, likes or comments on LinkedIn). We recommend that you do not share excessive or sensitive personal data through these channels.Hosting: Our site is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus.
â° 7. How long do we keep your data?
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, in compliance with legal obligations and to respect your rights. You may request deletion of your data at any time. Deletion and anonymization is immediate upon request where possible. The retention periods vary depending on the type of data and your relationship with The Good Feat:
For social and messaging channels (WhatsApp, LinkedIn), messages and interactions within WhatsApp groups are retained for the lifetime of the group and may remain visible to members for as long as they belong to the group; when a group linked to a specific programme is closed, messages are no longer accessible to participants via that group, but may remain temporarily in our backups for security and legal purposes. Data relating to interactions on our LinkedIn company page (such as comments and private messages) is kept for the duration of the pageâs existence and in accordance with LinkedInâs own retention periods, and we may archive screenshots or exports strictly where necessary to manage community issues, document abuse or demonstrate compliance, within the applicable statutory limitation periods.For Candidates:
- Contact data (e.g., name, email, phone): retained for 3 years after the last interaction or communication with you.
- CV data: retained for 5 years in accordance with legal obligations in France and GDPR requirements. We ask candidates to update or confirm their CV information every 6 months to keep their profile active.
- Application data (e.g., cover letters, application forms): retained until the completion of the recruitment process. If you consent to be considered for future opportunities, we may store this data longer, with your explicit permission. Otherwise, data is deleted or anonymized after the process ends or upon your request for deletion.
- Connection and navigation data (e.g., login details, IP address, cookies): retained for 1 year to support security, fraud prevention, and service improvement.
- Billing and payment data (if applicable): retained for 10 years in accordance with applicable financial and tax legislation.
- Identification and company data (e.g., contact details, company information): retained for the entire duration of your account activity plus any additional period required to comply with legal retention obligations.
- Job posting and candidate management data: retained as long as the related job posting is active or as needed for administrative and legal purposes.
- Billing and payment data (if applicable): retained for 10 years in accordance with applicable financial and tax legislation.
- Connection and navigation data: retained for 1 year to ensure the security and proper functioning of our platform.
For Recruiters:
đĄïž 8. What are your rights regarding your data?
Under the GDPR, you have the following rights:
- Access to your data
- Rectification or updating of your data
- Erasure (right to be forgotten)
- Data portability
- Restriction of processing
- Opposition to processing
- Withdrawal of consent (if processing is based on consent)
To exercise your rights, please contact us at: connect@thegoodfeat.com . If you believe that your personal data has not been processed in accordance with applicable data protection laws, you also have the right to lodge a complaint with a supervisory authority. In France, this authority is the Commission Nationale de lâInformatique et des LibertĂ©s (CNIL). You can find more information and submit a complaint here: https://www.cnil.fr/fr/plaintes.
đ 9. Security of your data
We implement technical and organizational measures to protect your data against loss, alteration, or unauthorized access. These measures include encryption, access management, and staff training.
Communications via WhatsApp and LinkedIn are protected by the technical and organisational measures implemented by these providers; however, no channel is completely riskâfree. For this reason, we discourage the sharing of special categories of data (e.g. health data) or highly confidential information via these tools and may delete messages that expose you or third parties to unnecessary risk. When we create or administer WhatsApp groups, we may remind participants of good practices (e.g. not sharing third partiesâ data without necessity) and reserve the right to remove content or users in case of misuse.
đȘ 10. Data Breach Notification
In the event of a suspected or actual personal data breach, we will promptly notify the affected users and the CNIL as required by law. An incident log documenting such breaches is maintained.
In case of a breach affecting data processed through thirdâparty platforms such as WhatsApp or LinkedIn, we will cooperate with the relevant provider and the competent supervisory authorities, and inform you when the breach is likely to result in a high risk to your rights and freedoms, in accordance with GDPR requirements.
đ 11. Comments and Evaluations
Comments and ratings submitted by users are visible to other registered users and may contain personal data. Users may request moderation, correction, or deletion of comments or ratings that concern them or others. We aim to address issues such as abuse, impersonation, or legal violations rapidly. We aim to address all moderation, correction, and deletion requests promptly and efficiently.
This section also applies, where relevant, to public comments you leave on our LinkedIn company page. You can delete your own comments directly via LinkedIn; you may also contact us if you consider that content published on or about you on our page infringes your rights.
đ 12. International data transfers
Your data is stored with our hosting provider Hostinger International Ltd., located in Cyprus, a member state of the European Union, which ensures a level of protection in line with the GDPR. If a transfer outside the EU is necessary, we ensure that appropriate safeguards are in place (standard contractual clauses, etc.).
Some of our partners, such as WhatsApp (Meta Platforms) and LinkedIn, may transfer personal data outside the European Union, in particular to the United States and other countries where they operate data centres or support services. These transfers are carried out under appropriate safeguards as required by the GDPR (such as adequacy decisions, standard contractual clauses or equivalent mechanisms) as described in their respective privacy policies.
đȘ 13. Cookies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, personalize content, and deliver relevant features and advertisements. You have full control over your cookie preferencesâŻââŻyou can manage or disable cookies at any time through our cookie manager available on the site or directly via your browser settings. Please note that disabling certain cookies may impact the functionality and performance of our services. Only essential cookies are enabled by default. Analytics and marketing cookies are set only after users provide explicit consent through the siteâs Cookie Manager. Users may manage or withdraw cookie consent at any time via the cookie settings or their browser.
Our website may also use thirdâparty cookies or similar technologies (such as the LinkedIn Insight Tag or Meta tools) for audience measurement and marketing, set only after your explicit consent via our Cookie Manager. These tools allow us to obtain aggregated statistics about visits and conversions from LinkedIn or other platforms, without accessing the identity of individual visitors, unless you have separately agreed to be identified (e.g. via a form).
đ 14. Changes to the Privacy Policy
This Privacy Policy is reviewed at least annually and after significant regulatory or technical changes. The current version and last updated date are displayed prominently at the top of this page. We reserve the right to update this Privacy Policy. Any changes will be notified on this page.
đ 15. Contact
For any questions regarding the protection of your data, please contact us at:
đź The Good Feat
28 rue du docteur Thore
92330 Sceaux
đ Note:
We collect and process personal data for both candidates and recruiters strictly for the purposes of recruitment and platform management.
Our Terms and Conditions are available at: https://thegoodfeat.com/terms-and-conditions/
Use of the site implies acceptance of the Terms and Conditions and the Privacy Policy.
