Privacy Statement

General

From time to time you will be asked to tell us personal information about yourself (e.g. name and email address etc.) in order to become a learner or a customer, to use Training 2000 systems and services and so on. At the point of collecting the information we aim to clearly explain what it is going to be used for and who we may share it with. Unless required or permitted by law, we will always ask you before we use it for any other reason. We would only use it for marketing with your prior consent.

Any sensitive personal information will never be supplied to anyone outside Training 2000 without first obtaining your consent, unless required or permitted by law. We comply with the Data Protection Act 2018 and the General Data Protection Regulation (GDPR), including removing your personal information from our systems when it is no longer required and ensuring that all personal information supplied is held securely.

Whenever you provide such personal information, we will treat that information in accordance with this statement, current legislation and our Data Protection Registration (Registration Number: Z8105915). We also aim to meet current best practice.

Individuals whose personal information Training 2000 holds have certain rights under the law. More information can be found on the Information Commissioner’s website.

How Training 2000 uses your information

Training 2000 uses information you provided on your application form or contact/ booking form, as well as any supporting documents, references or records from interviews obtained as part of the admissions or booking process. We also collect and use information you provide during enrolment, including information about any disabilities or long-term health conditions you inform us about. As you progress through your course, we will collect and use a variety of other information to assist you with your studies, maintain records about your studies and achievements, finance and about your use of the facilities and services that we offer. Most of this information is usually collected from you directly during your time at Training 2000.

The information we collect may include the following:

• name
• contact information including email address
• demographic information such as postcode, preferences and interests
• information about your qualifications, skills and experience
• other information relevant to customer surveys and/or offers.

Training 2000 may share non-sensitive personal information about you with other organisations, for example the Local Authority (see below), for these purposes. We do not share your information for purposes that are incompatible, such as product marketing without your consent.

Sensitive personal information you provide (e.g. disability or ethnicity) may be used by Training 2000 for the purposes of equality of opportunity, support for your studies and to minimise risk. It may also be used anonymously for statistical purposes. Training 2000 will ask your permission before sharing sensitive information with other organisations, unless the sharing is permitted by law and necessary.

The legal basis for collecting the information

Most of the information on the form is collected because it is necessary for your enrolment as a learner, to manage your progress on your course or is required by law. You must provide it in order to enrol at Training 2000.

Participation in Learning: Sharing information with Local Authorities

This section applies to:

• 16 and 17 year olds
• Vulnerable 18 year olds (‘vulnerable’ is defined locally by individual Local Authorities)
• 18-25 year olds with an Education Health Care Plan (EHCP) in the local authority (LA) of Lancashire.

The Education and Skills Act 2008 (the Act) places duties on LA’s to promote the effective participation in education or training of all 16 and 17 year olds resident in their area, and to make arrangements to identify young people resident in their area who are not participating. It is part of the LA’s duties to secure sufficient suitable education and training provision for all 16-19 year olds, and to encourage, enable and assist young people to participate in learning.

Under the Act, it is Training 2000’s duty to provide relevant information about their learners to the LA of each learner’s residence, when requested to do so, and notify local LAs when a young person leaves learning at Training 2000. All educational institutions are required to share information with LAs as part of their duty under the Act.

Section 72 of the Act provides the legal basis for sharing information between LAs and educational institutions. Link to relevant section is referenced here: Educational institutions: duty to provide information

When you give us your information we will use your details to inform the LA where you live about the learning that you are participating in so that they are able to report monthly to the Department of Education and deliver their duties listed above.

Please note that some of the services for young people provided by the LA to fulfil their duties are provided by commissioned external contractors and organisations and they are required to use the same security standards as the LA.

If you wish to opt out of the sharing of your basic details for this purpose, or wish to see information held by Training 2000 about you for this purpose, please contact us at dpo@t2000.co.uk.

Right to erasure

The right to erasure is also known as ‘the right to be forgotten’. The broad principle underpinning this right is to enable an individual to request the deletion or removal of personal data where there is no compelling reason for its continued processing.

When can Training 2000 refuse to comply with a request for erasure?

We can refuse to comply with a request for erasure where the personal data is processed for the following reasons:

• to comply with a legal obligation;
• for the performance of a task carried out in the public interest or in the exercise of official authority;
• for archiving purposes in the public interest, scientific research historical research or statistical purposes where erasure is likely to render impossible or seriously impair the achievement of that processing; or
• for the establishment, exercise or defence of legal claims.

How Long We Keep Your Data

We will only keep your personal data for so long as is required to fulfil the purpose(s) for which it was collected unless there are other legal requirements or it is necessary for us to keep it for our own business continuity.

If you want more details about our specific retention periods, please contact our Data Protection Team at dpo@t2000.co.uk.

How We Keep Your Data Secure:

We will never give or sell your data to anyone else, nor will we make use of it except as described above. Your data is stored on our secure server, which is properly protected by the use of firewalls and other data security systems. Further, access to your data is restricted, with access to learner data restricted.

Responsibilities

Training 2000 is a data controller under the Data Protection Act and the Board of Trustees is ultimately responsible for implementation. The designated data controller who is appointed to ensure compliance with the Act is the Director of Business and Educational Standards; and appointed to deal with day-to-day matters are the Head of IT and Special Projects and the Business Assurance Manager.

October 2018 | PR/GN71.03