Privacy Policy
Spaces, Floor 5
156 Great Charles Street
Queensway
Birmingham
B3 3HN
-
Name, address, email address and phone number
-
Date of birth, marital status, personal description (including gender), and geographical location
-
Employment history, right-to-work details, salary information, and training or achievement records
-
Consent – where you have given us permission to use your information
-
Contract – where processing is necessary to deliver our services to you
-
Legal obligation – where processing is required by law
-
Legitimate interests – where processing is necessary for our business interests and does not override your rights
|
Purpose of processing
|
Legal basis
|
|---|---|
|
Processing a job application
|
Performance of a contract
|
|
Apprenticeship enrolment and funding compliance
|
Legal obligation / Contract
|
|
Checking eligibility to work in the UK
|
Legal obligation
|
|
Marketing communications about similar services
|
Legitimate interest (with opt-out option)
|
-
Funding agencies such as the Department for Work & Pensions and ESFA
-
Reference and DBS check providers
-
Occupational health providers
-
Service providers, including HubSpot, which we use as our Customer Relationship Management (CRM) and marketing automation platform
We use HubSpot to manage customer and prospect relationships, send communications, and track engagement with our services. HubSpot acts as a data processor on our behalf. Data processed by HubSpot is stored securely within the EU or US (under appropriate safeguards such as Standard Contractual Clauses).
|
Type of data
|
Retention period
|
|---|---|
|
Job applicant data
|
6 months from the end of the recruitment campaign
|
|
Employee data
|
Duration of employment plus 7 years
|
|
Learner details
|
As required by government funding/awarding body rules
|
|
Employer details
|
As required by government funding/awarding body rules
|
-
We store data on secure servers and encrypt sensitive information.
-
We require service providers, including HubSpot, to use appropriate technical and organisational measures.
-
While we take steps to protect your data, the transmission of information online is never completely secure. Any data you send electronically is at your own risk.
-
Request access to information we hold about you
-
Request correction or erasure of your data
-
Restrict or object to certain processing
-
Withdraw consent (where consent was the lawful basis)
-
Essential cookies – required for the website to function properly
-
Performance cookies – collect anonymous data about how visitors use our site
-
Functionality cookies – remember preferences such as form inputs
-
Marketing and tracking cookies – set by HubSpot and other providers to measure engagement, deliver targeted content, and personalise communications
We engage carefully selected third-party partners and service providers who process personal data on our behalf in compliance with GDPR. From time to time, we appoint digital marketing agencies to conduct outreach and marketing activities on our behalf. As part of these activities, personal data may be processed in accordance with applicable data protection laws. Our appointed data processors include:
(i)Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy policy here: http://sopro.io. Sopro is registered with the ICO Reg: ZA346877. Their Data Protection Officer can be emailed at: dpo@sopro.io

