
Coalition’s Privacy Center
At Coalition, privacy is more than compliance. It’s a core value. When you share your data with us, we protect it, use it responsibly, and respect your choices. This Privacy Center explains how we handle your information, the principles that guide us, and how you can manage your data settings at any time.
Manage your privacy experience
Global Privacy Policy
Learn how Coalition collects, uses, shares, and protects personal information across our products, services, and website.
Global Candidate & Employee Privacy Policy
Understand how we handle personal information throughout the employment lifecycle.
Cookies & Tracking Technologies Policy
See how we use cookies and similar technologies to improve site performance, understand usage, and support your preferences.
Data Processing Agreements: Customer
Access our customer data processing terms, including how Coalition handles personal data on behalf of customers.
Data Processing Agreements: Vendor
Review the data processing terms that apply to vendors who process personal data in connection with services provided to Coalition.
Coalition Subprocessors
View the third-party subprocessors Coalition uses to support our services and help process customer data securely.
Privacy inquiries
Have a privacy-related question or request? Contact our team for help with data rights requests, policy questions, or other privacy concerns.
How does Coalition protect the personal data it processes?
Coalition is committed to responsible data stewardship and prioritizes data privacy principles to maintain customer trust. Our framework includes:
Security Certifications: Coalition is ISO/IEC 27001 certified.
Encryption: Data is encrypted at-rest using 256-bit encryption via native AWS capabilities and in-transit using bank-grade TLS 1.2 or higher.
Access Control: We enforce the principle of least privilege, reviewing permissions regularly and using multi-factor authentication (MFA) for all applications storing personal data.
Monitoring: Security logs are monitored in accordance with industry standards to identify potential threats
Who are Coalition’s subprocessors and how are they vetted?
Coalition engages third-party subprocessors to assist in providing its products and services. For a full list of our subprocessors, please visit our Privacy Center.
Where is my data physically stored?
Primary Storage: Most data storage locations are within AWS-US services. International Transfers: Some data may be transferred outside of the UK and EU to the US in compliance with data privacy principles. We have executed intra-company transfer agreements including Standard Contractual Clauses (SCCs) between all Coalition entities. Coalition has executed data processing agreements including Standard Contractual Clauses (SCCs) with its subprocessors.
EU Storage: Some specific data storage is located within the EU.
How long does Coalition retain personal data?
Data is retained based on the principles of data minimization and storage limitation.
Retention Limits: We set retention periods based on global privacy laws and business necessity.
Erasure: Unless a legal hold or law enforcement request is in place, data is deleted at the end of its assigned retention period. Individuals may also request data erasure in accordance with our privacy policy. Please visit our Privacy Center for more information.
What happens in the event of a data breach?
Coalition will send notifications in accordance with contractual obligations and global data privacy laws, as applicable. We maintain rigorous technical and organizational measures (TOMs) to prevent and respond to such incidents.
Are Coalition employees trained on data privacy?
Yes. All employees are required to complete privacy and security training during onboarding and on an annual basis.
How can I contact the Data Protection Officer (DPO)?
Coalition has appointed a dedicated Data Protection Officer to oversee our privacy framework. You can direct any questions regarding data privacy or subprocessor engagement to privacy@coalitioninc.com.