Who we are
Roleline is a trading name of Simple Things Limited, a company registered in England and Wales with company number 09915018. Registered office: 86-90 Paul Street, London, England, EC2A 4NE. We are the controller for the personal data described in this notice unless a section says otherwise. Questions about this notice go to hello@simplethin.gs or to our registered office.
Visiting this website
This site is served by Cloudflare, which processes technical data such as your IP address, browser type and the pages requested in order to deliver the site and protect it from abuse. We do not use analytics, advertising or tracking cookies, and this site sets no cookies of its own. Cloudflare may set strictly necessary cookies for security purposes. Your browser may keep a local copy of pages so the site works offline; that copy stays on your device.
Our lawful basis is our legitimate interest in operating a secure website.
Booking a call
Calls are booked through Cal.com, Inc., which processes your name, email address, the time you choose and anything you add to the booking under its own privacy policy. We receive the booking into our calendar and email and use it to prepare for and hold the call. Our lawful basis is our legitimate interest in responding to a business enquiry, or taking steps at your request before entering a contract.
Sending an enquiry
When the enquiry form on this site is available, we ask for your name, work email address, organisation, an optional website address and your question. We use them only to review and reply to your enquiry. Do not include candidate personal data, CVs, application details or confidential information in an enquiry.
The enquiry is stored in a dedicated Cloudflare database configured for the European Union jurisdiction, protected by a bot check, rate limits and access controls. The stored record is scheduled for deletion 90 days after we receive it. Cloudflare's database recovery feature may allow a deleted record to be restored for up to 30 days after that, which we use only to recover from a failure.
A copy of each enquiry is emailed to two Simple Things mailboxes, one provided by Zoho and one by Google, so that we see it and can reply. Those emails are kept as ordinary business correspondence and are not deleted on the 90-day schedule.
Our lawful basis is our legitimate interest in responding to business enquiries about our services.
Working with us
If your organisation becomes a client, we hold the business contact details of the people we work with, together with proposals, contracts, approvals, invoices and correspondence, in order to perform the contract and meet our legal and accounting obligations. We keep those records for six years after the relationship ends, in line with limitation and tax record-keeping periods, unless a longer period is required by law.
Using an employer's Roleline assistant
If you meet Roleline on an employer's careers site, that employer is the controller. Their privacy notice explains how they use the assistant and how to contact them. We process conversation data on their behalf under our data processing agreement and do not use it for our own purposes. The assistant does not ask for personal details, does not score or rank candidates and does not make decisions about you. To exercise your rights over a conversation with an employer's assistant, contact that employer; we help them respond.
Who we share personal data with
We share personal data only with the providers listed on our sub-processor page, for the purposes described there, and with professional advisers, insurers or authorities where the law requires or allows it. We do not sell personal data.
International transfers
Some of our providers are based in the United States or operate global infrastructure. Where personal data leaves the United Kingdom or the European Economic Area, the transfer relies on an adequacy decision, the UK International Data Transfer Addendum or the EU standard contractual clauses in the provider's data processing terms. Ask us if you would like details for a particular transfer.
Your rights
Under the UK GDPR, and the EU GDPR where it applies, you can ask us for access to your personal data, ask us to correct or delete it, ask us to restrict how we use it, object to processing based on legitimate interests, and ask for a copy of data you gave us in a portable format. Write to hello@simplethin.gs. We reply within one month.
If you are unhappy with how we have handled your personal data you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. We would welcome the chance to address your concern first.
Automated decisions
We do not make decisions about you by automated means that have legal or similarly significant effects. Roleline is designed to explain employer content and point to an official route, not to evaluate people.
Changes to this notice
We update this notice when our processing changes and show the version and effective date beside it. Material changes that affect an active enquiry or client relationship are notified by email.