The Institute for Apprenticeships and Technical Education (IfATE) is committed to protecting the privacy and security of your personal data.
In carrying out our work we collect and use (or ‘process’) personal data. This means that we are a ‘data controller’ under the UK General Data Protection Regulation and the Data Protection Act 2018 (‘data protection law’).
As a data controller, we are required to inform you of our privacy rules and your rights pertaining to your personal data. This privacy notice describes how we process your personal data in accordance with data protection law.
This notice applies to any individual whose personal data we process except where data is processed:
If you are not clear what personal data we process about you, or why, or you have any other questions about our use of your personal data you can contact us at Institute.DPO@education.gov.uk.
Individuals whose personal data we process include:
We collect and store personal data in order to discharge our statutory functions. This may be information that you have provided when you visit our website, or information that we have otherwise collected in the course of our work such as when you contact us by telephone, through email or other written communication or during events that you attend.
Personal data that we collect includes:
We also collect information about how you use our website using cookies and page tagging techniques.
We use the data we collect to support the effective delivery of our work.
We are required to ensure that we have a lawful basis for any processing of personal data that we carry out. Article 6 of the UK GDPR allows us to process personal data where it is necessary to perform a public task or for official functions, and the task or function has a clear basis in law. As a public body that is required by law to carry out certain tasks, we rely on this basis where we use your data in order to enable us to carry out those tasks.
For example, we rely on this basis to enable us to hold the contact details of, and records of engagement with, individuals with expertise related to our work. This is because it is necessary for us to liaise with these individuals to obtain their opinions, input or expertise on a matter on which we have a statutory responsibility. This includes anyone who:
We also rely on this basis where we use your personal data to:
We may also process personal data where the processing is necessary for us to comply with a legal obligation (not including contractual obligations). We rely on this basis where, for example, we process personal data in order to enable us to undertake diversity monitoring.
Finally, we may sometimes ask for your permission or consent to process your data. We rely on this basis where, for example, you have consented to us using photographs, video or audio recordings of you as part of our social media activity. Consent must be freely given in order to be valid and may be withdrawn at any time by contacting Institute.DPO@education.gov.uk.
In some cases, there may be more than one lawful basis for processing your personal data.
Where the information we process is special category personal data (for example, diversity monitoring information or information about a person’s accessibility or dietary requirements), in addition to the above lawful bases, we also rely on the following for processing your special category personal data (under Article 9 of the UK GDPR):
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated or new purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may, if necessary, process your personal data without your knowledge or consent, in compliance with this notice, where this is required or permitted by law.
We will in some circumstances have to share your data with third parties, including service providers, suppliers and other civil service bodies.
We will only share your data with third parties where we have a lawful basis to do so. We require third parties to respect the security of your data and to treat it in accordance with the law.
We will not, without your consent, share your information with any third parties for the purposes of direct marketing.
We store your data on secure servers in the UK.
Some information may also be stored on our behalf on secure servers outside the UK. This includes data held on our behalf for the purpose of:
We only keep personal data for as long as is necessary. After this point, we will delete or securely dispose of personal data depending on how we came into possession of the data.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we will anonymise your personal information so that it can no longer be associated with you, in which case we will use such information without further notice to you.
Our website contains links to other websites. This privacy notice does not apply to those websites. If you go to another website from this one, you should read the privacy notice on that website to find out how your information is used.
If you come to our website from another website, we may receive information from the other website. We don’t use this data. You should read the privacy notice of the website you came from to find out more about this.
It is important that the information we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.
Under data protection law, you have rights. The rights available to you depend on our reason for processing your information.
Request access to copies of your personal data (commonly known as making a ‘data subject access request’).
Request correction of any of your personal data that you think is inaccurate or incomplete.
Request erasure of your personal data in certain circumstances. This enables you to ask us to delete or remove personal data where there is no good reason for us to continue to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
Object to processing of your personal data in certain circumstances e.g., where we are relying on a legitimate interest (or those of a third party) and you wish to object to processing on this ground.
Request the transfer of your personal data to another party, in certain circumstances.
Please contact us at Institute.DPO@education.gov.uk if you wish to make a request or object to the processing of your personal data.
You are not required to pay any charge for exercising your data protection rights. If you make a request, we have one month to respond to you.
If you’ve signed up for our newsletters, you can unsubscribe or change your settings at any time.
If you’ve created an account for the trailblazer portal or members area, you can delete your account and your personal information at any time. Personal information associated with the deleted account will be removed from our systems.
We will review inactive accounts as part of our regular Route Review exercises. You can read more about reviews to learn more about the frequency of these exercises.
Our Data Protection Officer is responsible for ensuring compliance across our data processing activities. For any questions or concerns about how we process your personal data you can contact our Data Protection Officer:
Simon Love - Institute.DPO@education.gov.uk
You can also write to us:
IfATE, Sanctuary Buildings,
20 Great Smith Street, London, SW1P 3BT
You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
This privacy notice was last updated on 1 March 2023. We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.
Who we are
This work is being carried out the Institute of Apprenticeships and Technical Education (IfATE)., IfATE is the data controller for the personal data processed.
What data we will collect
We will collect:
Where your data is stored
We use Cognito Forms for temporary data collection activities. This data will then be downloaded as a .CSV file to our own servers for analysis.
Keeping your data secure
Sending information over the internet is generally not completely secure, and we can’t guarantee the security of your data while it’s in transit.
Any data you send is at your own risk.
We have procedures and security features in place to keep your data secure once we receive it.
Disclosing your information
We may pass on your personal information if we have a legal obligation to do so, or if we have to enforce or apply our terms of use and other agreements. This may include exchanging information with other government departments for legal reasons.
We won’t share your information with any other organisations for marketing, market research or commercial purposes, and we don’t pass on your details to other websites.
Your rights
You can find out what information we hold about you and ask us not to use any of the information we collect.
An IfATE employee you already work with may signpost you to the survey asking for your support in our stakeholder engagement around the Big Conversation. Participation is voluntary.
This stakeholder engagement is part of IfATE’s commitment to listening and learning, IfATE needs to collect and act on insights from stakeholders gathered by teams across the organisation. As part of this, we may quote participants in written reports or articles published on our website and made available to the public. We will always check with you if you are happy for us to quote you in this way before any publication. You have the right to withdraw your consent to this if you so wish.
How we will use your information
This stakeholder engagement will form part of the Big Conversation project which will provide IfATE with a snapshot of public views about apprenticeships, technical education, and the skills system. This may be used to form a report from the Big Conversation project, to help shape internal processes and to inform policy.
Why our use of your personal data is lawful
In order for our use of your personal data to be lawful, we need to meet one (or more) conditions in the data protection legislation. For the purpose of this survey, the relevant condition is:
Who we will make your personal data available to
We sometimes need to make personal data available to other organisations. These might include contracted partners (who we have employed to process your personal data on our behalf) and/or other organisations (with whom we need to share your personal data for specific purposes).
Where we need to share your personal data with others, we ensure that this data sharing complies with data protection legislation.
How long we will keep your personal data
IfATE will keep your personal data as part of the Big Conversation project for 12 months or until the report is published (Report is expected to be published in April 2023), whichever is sooner.
Your data protection rights
Under the Data Protection Act 2018, you are entitled to ask if we hold information relating to you and ask for a copy, by making a ‘subject access request’.
For further information and how to request your data, please contact IfATE at Enquiries.IFA@education.gov.uk.
Further information about your data protection rights appears on the Information Commissioner’s website at: Individual rights | ICO. Alternatively, you have the right to raise any concerns with the Information Commissioner’s Office (ICO).
Last updated
We may need to update this privacy notice periodically, so we recommend that you revisit this information from time to time. This version was last updated September 2022.
Contact Info:
If you have any questions about how your personal information will be used, please contact us at Enquiries.IFA@education.gov.uk.
Our contact details
Name: Institute for Apprenticeships and Technical Education
Address:
Sanctuary Buildings,
20 Great Smith Street,
London
SW1P 3BT
Email: Ifate.POST16@education.gov.uk
The type of personal information we collect
We currently collect and process the following information:
How we get personal information and why we have it
All of the personal information we process is provided to us directly by you or your awarding organisation/body through the online form for one of the following reasons:
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
What we do with the information we have
We use the information that you or your awarding organisation/body have given us in order to:
We may share this information with the Department for Education, Ofqual, and the Office for Students for the purpose of evaluation of the programme and/or evaluation of the submitted qualifications. They may wish to contact you during the approvals process. Each of these public bodies has a power to share information with the other public bodies for the purpose of their statutory functions. We will ensure that any personal data disclosed is only disclosed for the purpose of these functions.
What is our basis in law for processing your personal data
The GDPR allows us to process personal data where it is necessary to perform a task in the public interest (Article 6(1)(e) of the UK GDPR). We have a number of statutory functions conferred on us by the Apprenticeships, Skills Children and Learning Act 2009 and we process your personal data in order to effectively discharge those functions. We therefore rely on Article 6(1)(e) as the lawful basis on which we process your personal data.
How we store your information
Any personal information we hold information is securely stored on our internal file storage and information management systems.
We keep the name, email address and telephone number information for the applicant’s primary contact for seven years from the date of registration/application. We will then review our need to retain this information, where we dispose of this information, we will do so securely by deleting all electronic copies of the data.
Your data protection rights
Under data protection law, where we process personal data about you, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
How to contact us
Our Data Protection Officer is responsible for ensuring compliance across our data processing activities. For any questions or concerns about how we process your personal data you can contact our Data Protection Officer at Institute.DPO@education.gov.uk
Please contact us at Institute.DPO@education.gov.uk if you wish to make a subject access request.
How to complain
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Our contact details
Name: Institute for Apprenticeships and Technical Education
Address:
Sanctuary Buildings,
20 Great Smith Street,
London
SW1P 3BT
Email: HTQ.approvals@education.gov.uk
The type of personal information we collect
We currently collect and process the following information:
How we get personal information and why we have it
All of the personal information we process is provided to us directly by you or your awarding organisation/body through the online form for one of the following reasons:
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
What we do with the information we have
We use the information that you or your awarding organisation/body have given us in order to:
We may share this information with the Department for Education, Ofqual, and the Office for Students for the purpose of evaluation of the programme and/or evaluation of the submitted qualifications. They may wish to contact you during the approvals process. Each of these public bodies has a power to share information with the other public bodies for the purpose of their statutory functions. We will ensure that any personal data disclosed is only disclosed for the purpose of these functions.
What is our basis in law for processing your personal data
The GDPR allows us to process personal data where it is necessary to perform a task in the public interest (Article 6(1)(e) of the UK GDPR). We have a number of statutory functions conferred on us by the Apprenticeships, Skills Children and Learning Act 2009 and we process your personal data in order to effectively discharge those functions. We therefore rely on Article 6(1)(e) as the lawful basis on which we process your personal data.
How we store your information
Any personal information we hold information is securely stored on our internal file storage and information management systems.
We keep the name, email address and telephone number information for the applicant’s primary contact for seven years from the date of registration/application. We will then review our need to retain this information, where we dispose of this information, we will do so securely by deleting all electronic copies of the data.
Your data protection rights
Under data protection law, where we process personal data about you, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
How to contact us
Our Data Protection Officer is responsible for ensuring compliance across our data processing activities. For any questions or concerns about how we process your personal data you can contact our Data Protection Officer at Institute.DPO@education.gov.uk
Please contact us at Institute.DPO@education.gov.uk if you wish to make a subject access request.
How to complain
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
About this notice
The Institute for Apprenticeships and Technical Education (IfATE) is committed to protecting the privacy and security of your personal data.
In carrying out our work we collect and use (or ‘process’) personal data. This means that we are a ‘data controller’ under the UK General Data Protection Regulation and the Data Protection Act 2018 (‘data protection law’).
As a data controller, we are required to inform you of our privacy rules and your rights pertaining to your personal data. This privacy notice describes how we process your personal data in accordance with data protection law.
Who does this notice apply to?
This notice applies to any individual whose contact details we hold on our Directory of professional and employer-led bodies / IfATE for Apprenticeships and Technical Education (Employer Directory).
What personal data do we hold about you?
The personal data we hold about you includes your:
How do we obtain your personal data?
Organisations need to apply for entry to the Employer Directory. As part of the application process, organisations are asked to provide the details of a nominated person through whom all contact will be made.
How do we use your personal data?
The Employer Directory is designed to support our statutory functions in connection with the quality assurance of apprenticeship end-point assessments.
We will store the contact details of the person named on the application form in order to contact them to seek their organisation’s views and insight in connection with these assessments.
You can find out more about the purpose of the Employer Directory here Directory of professional and employer-led bodies / IfATE for Apprenticeships and Technical Education.
We may also contact you for other purposes in connection with our work such as where we conduct surveys to assess stakeholder satisfaction or to invite you to events or consult with you.
Sharing your personal data
We sometimes make arrangements for other organisations to carry out work, in relation to the quality assurance of end-point assessments on our behalf and we may share your details with those organisations for that purpose. These include Ofqual, the Office for Students (OfS), or any body appointed by Ofqual or the OfS including any qualifying body designated under paragraph 3 of Schedule 4 to the Higher Education and Research Act 2017.
We may also share your details with other organisations where we are required to do so by law.
Where we share your data with another organisation we require them to respect the security of your data, to only use your data for the purpose of contacting you, and to treat it in accordance with the law.
What is our lawful basis for processing your personal data?
Article 6(1)(e) of the UK GDPR allows us to process personal data where it is necessary to perform a public task or for official functions, and the task or function has a clear basis in law. We have a legal obligation to carry out the quality assurance of apprenticeship end-point assessments or make arrangements for other persons to carry out the evaluations on our behalf. We rely on this basis where we use your data, including sharing it as described above, in order to enable us to carry out this obligation
We also rely on this basis where we contact you for purposes such as those relating to stakeholder satisfaction surveys, events or consultation.
We may also rely on Article 6(1)(c) of the UKGDPR (which allows processing where it is necessary for the performance of a legal obligation) where we are required by law to process your data.
Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated or new purpose, we will notify you.
Please note that we may, if necessary, process your personal data without your knowledge or consent, in compliance with this notice, where this is required or permitted by law.
Data storage
We hold your data in our Directory of Professional and Employer-led Bodies. This is stored on secure servers in the UK.
Data retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. We will review the information contained on our data base annually to ensure it remains relevant and up to date.
Ensuring your personal data is accurate and current
It is important that the information we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.
Your data protection rights
Under certain circumstances, by law you have the right to:
Request access to copies of your personal data (commonly known as making a ‘data subject access request’).
Request correction of any of your personal data that you think is inaccurate or incomplete.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us to continue to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and you wish to object to processing on this ground.
Request the transfer of your personal data to another party.
You are not required to pay any charge for exercising your data protection rights. If you make a request, we have one month to respond to you.
How to contact us
Our Data Protection Officer is responsible for ensuring compliance across our data processing activities. For any questions or concerns about how we process your personal data you can contact our Data Protection Officer:
Simon Love
If you wish to make a data subject access request please contact IfATE.DPO@education.gov.uk.
How to contact the ICO
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
Changes to this privacy notice
This privacy notice was last updated on 5 December 2022. We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.