The Skills and Education Group seeks to comply with the General Data Protection Regulation (GDPR), and is committed to maintaining the highest possible standards when handling personal information. The companies within the Group are both data processors and data controllers and have an independent registration with the Information Commissioners Office.
This policy explains the type of personal data we collect, how we use that data, how we store it and keep it safe. At no time will any personal data held by us be passed to organisations outside the Group for marketing or sales purposes.
This policy is reviewed on a regular basis and may be subject to change to ensure that the information it provides remains accurate and meets all our regulatory requirements.
-
1. About the Skills and Education Group
The Skills and Education Group unites skills and education orientated organisation that share similar values and objectives. The Skills and Education Group currently consists of the following companies:
Skills and Education Group
The Skills and Education Group unites skills and education orientated organisations that share similar values and objectives. The umbrella organisation for the Group, a membership body that provides a wide range of services and support to colleges, training providers, partners and stakeholders within the further education and skills sector.
Registered Address:
Robins Wood House
Robins Wood Road
Nottingham
NG8 3NHCompany Number: 02640936
Charity Commission Registration: 1004087BIIAB Qualifications Limited
A national awarding organisation primarily operating in the licensed hospitality sectors, offering qualifications and assessments in for all abilities and ages post-14. BIIAB Qualifications Limited trades as BIIAB.
Registered Address:
Robins Wood House
Robins Wood Road
Nottingham
NG8 3NHCompany Number: 10054831
Quality Licence Scheme Limited
The Quality Licence Scheme works training providers to develop high-quality courses and/or training programmes for the non-regulated market.
Registered Address:
Robins Wood House
Robins Wood Road
Nottingham
NG8 3NHCompany Number: 10051052
Skills and Education Group Access
A national awarding organisation and Access Validating Agency which develops vocational qualifications and Access to Higher Education diplomas.
Registered Address:
Robins Wood House
Robins Wood Road
Nottingham
NG8 3NHCompany Number: 03773914
Charity Commission Registration: 1088839Skills and Education Group Awards
A national awarding organisation which develops a diverse range of vocational qualifications for all ages and abilities for ages post-14.
Registered Address:
Robins Wood House
Robins Wood Road
Nottingham
NG8 3NHCompany Number: 04117784
Charity Commission Registration: 1086947 -
2. The legal bases used to collect your data
Consent
In certain circumstances we may ask your consent to process your data. This may occur when issuing newsletters or other marketing information in which we consider you may have a legitimate interest.
Contractual Obligations
Personal data may be collected to comply with our contractual obligations. This may occur when data needs to be transferred to our Regulators or Partners to support their own regulatory or legal objectives.
Legal Compliance
The law may require us to pass on your personal data. This may occur if we need to pass on details of persons who we have cause to believe are involved in any kind of malpractice which we have uncovered in the course of our legitimate business activity.
Legitimate Interest
We will collect certain personal data to enable us to carry out our business interests. This information will be limited to what we consider to be reasonable and necessary to pursue those business activities.
-
3. When we collect data and why
When you visit our websites, agree to the terms and conditions for the use of our services, or agree to conduct services on our behalf we will request certain data from you. These services include:
Awarding Services
- When you are an organisation who wishes to contract with us to provide services we will require certain key contact details and personal information in order to do business with you.
- When you are an individual who wishes to enrol on any of our qualifications or courses we collect personal learner data, via the centre providing your course, to help prove your identity and for the purposes of administering, awarding and verifying qualification achievement.
- When you are engaged as a sub-contractor in the capacity of an assessor, quality assurer, examiner or auditor to assist with our regulatory monitoring and awarding services, we collect personal and sensitive information to verify your identity and suitability for the role.
- When we receive an enquiry, appeal or complaint from an individual we will collect contact information in order that we can respond in a timely and efficient way
Professional Development and Membership Services
- When we receive a booking for a professional development event, network or meeting we will collect personal information relevant for the booking. This will be used to contact you about the booking if we need to clarify anything, issue joining instructions and send you other information relating to the event, network or meeting that you have booked onto.
- We will include your name, job title and the name of the organisation that you work for on a delegate list that will be made available to the other people attending the same event, network or meeting.
- We may use your personal information to send you details of other professional development events, networks or meetings that you may be interested in.
- If we send you information on other events, networks or meetings you will have the option to “opt out” of receiving future emails or other forms of communication.
Project Work
- If you book onto or agree to attend an event or meeting about an activity that is project based or funded by project work, we will collect personal information relevant for the event or meeting. This will be used to contact you about the event or meeting if we need to clarify anything, issue joining instructions and send you other information relating to the event or meeting.
- We will include your name, job title and the name of the organisation that you work for on a delegate list that will be made available to the other people attending the same event or meeting.
- We may use your personal information to send you details of other events or meetings that you may be interested in.
- If we send you information on other events or meetings you will have the option to “opt out” of receiving future emails or other forms of communication.
Website Services
- When you make an enquiry through our websites, book on an event or engage with us through social media about the products we offer we only collect sufficient information to respond fully to your requests.
- Information collected through surveys and cookies is analysed to improve our products and services for our customers. Our policy on how personal information collected through cookies. Please visit each of our websites to view our cookie statements.
- With your consent we will use this information to provide you with further information about our services. Once given you may review this consent and/or your preferences at any time.
- Please note that our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites outside the Group. These sites are not governed by this privacy policy. You should exercise caution and look at the privacy statement applicable to the website in question.
-
4. How we protect your data
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect through our online systems.
- We secure access to our websites and online portals by using ‘https’ technology and encryption.
- Access to your personal data is password protected and where required accessed through secure virtual private network technology (VPN).
- We carry out regular penetration testing and daily monitoring of our systems for vulnerabilities and attacks.
- We have regularly updated virus and malware protection.
- We have appropriate storage and retention procedures for both physical and electronic data.
-
5. Sharing your data with organisations outside of the Skills and Education Group
Group Awarding Services
We require all approved Centres to have their own privacy (fair processing) notices and to ensure that all learners are aware of how and when their data may be used by them and others.
We will pass regulated learner achievement data to the organisations listed below in line with the timescales specified and agreed in individual agreements with each of these organisations. Once this information is shared with these organisations we are no longer the data controller but remain the authoritative source of all achievements.
Education and Skills Funding Agency (ESFA):
The information you supply will be used by the ESFA, an Executive Agency, sponsored by the Department for Education, to issue you with a Unique Learner Number (ULN), and to create your Personal Learning Record (PLR). Further details of how this information is processed and shared can be viewed here.
We will submit learner achievement data to the PLR when the learner achievement has been verified and where a ULN has been provided by the centre. The PLR is managed by the Learning Records Service (LRS). If you want to know more about the ULN and the PLR.
The Department for Education (DfE):
The DfE uses registration and achievement data for research and statistical purposes to inform and improve educational policy.
We submit achievement data annually to government departments or agencies acting on their behalf to support Schools Performance Tables.
If you wish to know more about the data held please contact the DfE’s Data Protection Officer at: Caxton House, Tothill Street, London, SW1H 9NA or view data protection.
UCAS:
UCAS is the organisation responsible for managing applications to higher education courses in the UK. Qualifications that have UCAS tariff points mean they are recognised as contributing to entry to university.
We report achievement of these qualifications annually to UCAS directly. If you wish to learn more about how this data is stored and protected please view the UCAS Privacy Policy.
The Regulators:
The Regulators process enrolment and achievement data for regulated qualifications. This data is used for research and statistical purposes to enable the Regulators to fulfil their regulatory duties.
If you wish to learn more about the data collected by the Regulators please contact either:
- Ofqual’s Data Protection Officer at: Ofqual, Spring Place, Coventry Business Park, Herald Avenue, Coventry, CV5 6UB. Phone: 0300 303 3344. View Ofqual’s Data Protection Policy.
- Qualifications Wales Data Protection Officer at: Q2 Building, Pencam Lane, Imperial Park, Coedkernew, Newport, NP10 8AR. View Qualification Wales’ Privacy Policy.
- CCEA Regulation at: 29 Clarendon Road, Clarendon Dock, Belfast BT1 3BG: Contact info@ccea.org.uk; tel. 02890 261200. View CCEA’s Privacy Policy.
- The Quality Assurance Organisation for Higher Education (QAA) at: Southgate House, Southgate Street, Gloucester, GL1 1UB. View QAA’s Privacy Policy.
- The Scottish Qualifications Authority (SQA), The Optima Building, 58 Robertson Street, Glasgow, G2 8DQ. View SQA’s Privacy Policy.
Driver Vehicle and Standards Agency (DVSA):
The DVSA is an executive agency, sponsored by the Department for Transport. We share MOT Tester, MOT Manager and Annual MOT Tester Assessment achievement data with the DVSA to support it in monitoring MOT Testers, MOT Managers and the centres in which they work. If you wish to know how they protect your data please refer to their Personal Information Charter.
Security Industry Authority (SIA)
The SIA is an executive non-departmental public body, sponsored by the Home Office. It was created by the Private Security Industry Act 2001 to regulate the UK’s private security industry. We share security qualification data with the SIA to support the issue of security licences and to support the SIA with the monitoring of security qualifications, the Centres that provide these and the individuals who take security qualification examinations. If you wish to know how the SIA uses your data and protects this then please refer to SIA’s Privacy Policy.
Professional Development and Membership Services
We may share your personal information with your employing organisation for the purposes of reporting on how the organisation has access and used professional development and membership services.
We will share your personal information in delegate lists shared with other people attending the same event, network or other meeting. We will not share your email address with other people attending the same event, network or other meeting unless we have your permission to do so. We will not share your personal information with any third party other than described above.
Project Work
We may share your personal information with your employing organisation for the purposes of reporting on how the organisation has access and used project work managed by the Skills and Education Group.
We will share your personal information in delegate lists shared with other people attending the same event, network or other meeting. We will not share your email address with other people attending the same event, network or other meeting unless we have your permission to do so.
We may have to share your personal information with the organisation providing project funding. The organisation that we are likely to have to share your information with is:
The Education and Training Foundation:
The Education and Training Foundation (ETF) is the government-backed, sector-owned national support body for the Further Education and Training sector. The ETF provide project-based funding to enable access to and support for a range of activities to support and develop the sector. Where we have funding from the ETF to deliver local, regional and national activities we may be asked to share your personal information with the ETF to demonstrate reach, impact and value for money. View the ETF’s Privacy Policy.
IT companies used by the Group
We engage with a number of IT Companies whose platforms we use to support our independent assessment activity. We have separate agreements with these organisations to ensure that we transfer any shared personal information through a secure application programming interface (API).
-
6. Retention of data
We retain data only for as long as necessary to carry out our responsibilities under the purpose for which it was originally collected. At the end of those periods data will either be permanently deleted or anonymised.
-
7. Access rights to your data
You may request:
- access to your personal data, free of charge in most cases;
- a correction to your personal data if found to be incorrect, subject to specific rules that may be in place across our services;
In the cases above we will need you to put this in writing and to provide proof of identity before we can comply with any request. If we are unable to carry out your request, we will explain why.
- to withdraw your consent or change your preferences if previously given for consent-based processing.
In cases of the above you can withdraw your consent by ‘unsubscribing’ to the notification or by requesting a change to your preferences. You will need to give us time to update our records so may receive further communications until this is completed.
If you wish to know more about the personal data held by the Skills and Education Group or you feel your data has been compromised in any way, please contact Data Protection at Robins Wood House, Robins Wood Road, Aspley, Nottingham, NG8 3NH or email:
dataprotection@skillsedugroup.co.uk
The Skills and Education Group’s Chief Operating Officer is the senior person responsible for ensuring compliance with the General Data Protection Regulations.
-
8. Contacting the Information Commissioner's Office (ICO)
If you are unhappy with the way your data has been handled and we have been unable to give you a satisfactory response to your request you may contact the Information Commissioner’s Office (ICO) on 0303 123 1113 or you can visit their website.
If we become subject to any data breach of any significance where the rights of individuals are prejudiced in any way i.e. where there is potential for an individual’s identity to be stolen or confidentiality is breached, we will report that breach to the ICO.