The Institute for Apprenticeships and Technical Education (IfATE) is committed to protecting the privacy and security of your personal data.
In carrying out our work we collect and use (or ‘process’) personal data. This means that we are a ‘data controller’ under the UK General Data Protection Regulation and the Data Protection Act 2018 (‘data protection law’).
As a data controller, we are required to inform you of our privacy rules and your rights pertaining to your personal data. This privacy notice describes how we process your personal data in accordance with data protection law.
This notice applies to any individual whose personal data we process except where data is processed:
If you are not clear what personal data we process about you, or why, or you have any other questions about our use of your personal data you can contact us at Institute.DPO@education.gov.uk.
Individuals whose personal data we process include:
Our website contains links to other websites. This privacy notice does not apply to those websites. If you go to another website from this one, you should read the privacy notice on that website to find out how your information is used.
If you come to our website from another website, we may receive information from the other website. We don’t use this data. You should read the privacy notice of the website you came from to find out more about this.
We collect and store personal data in order to discharge our statutory functions. This may be information that you have provided when you visit our website, or information that we have otherwise collected in the course of our work such as when you contact us by telephone, through email or other written communication or during events that you attend.
Personal data that we collect includes:
We also collect information about how you use our website using cookies and page tagging techniques.
We have a number of statutory functions conferred on us by the Apprenticeships, Skills Children and Learning Act 2009. We use the data we collect to support the effective delivery of these functions.
We are required to ensure that we have a lawful basis for any processing of personal data that we carry out. Article 6 of the UK GDPR allows us to process personal data where it is necessary to perform a public task or for official functions, and the task or function has a clear basis in law. As a public body that is required by law to carry out certain tasks, we rely on this basis where we use your data in order to enable us to carry out those tasks.
For example, we rely on this basis to enable us to hold the contact details of, and records of engagement with, individuals with expertise related to our work. This is because it is necessary for us to liaise with these individuals to obtain their opinions, input or expertise on a matter on which we have a statutory responsibility. This includes anyone who:
We also rely on this basis where we use your personal data to:
We may also process personal data where the processing is necessary for us to comply with a legal obligation (not including contractual obligations). We rely on this basis where, for example, we process personal data in order to enable us to undertake diversity monitoring.
Finally, we may sometimes ask for your permission or consent to process your data. We rely on this basis where, for example, you have consented to us using photographs, video or audio recordings of you as part of our social media activity. Consent must be freely given in order to be valid and may be withdrawn at any time by contacting Institute.DPO@education.gov.uk.
In some cases, there may be more than one lawful basis for processing your personal data.
Where the information we process is special category personal data (for example, diversity monitoring information or information about a person’s accessibility or dietary requirements), in addition to the above lawful bases, we also rely on the following for processing your special category personal data (under Article 9 of the UK GDPR):
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated or new purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may, if necessary, process your personal data without your knowledge or consent, in compliance with this notice, where this is required or permitted by law.
We may in some circumstances have to share your data with third parties, including service providers, suppliers and other civil service bodies.
We will only share your data with third parties where we have a lawful basis to do so. We require third parties to respect the security of your data and to treat it in accordance with the law.
We will not, without your consent, share your information with any third parties for the purposes of direct marketing.
We store your data on secure servers in the UK.
Some information may also be stored on our behalf on secure servers outside the UK. This includes data held on our behalf for the purpose of:
We only keep personal data for as long as is necessary. After this point, we will delete or securely dispose of personal data.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we will anonymise your personal information so that it can no longer be associated with you, in which case we will use such information without further notice to you.
It is important that the information we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.
Your right of access - you have the right to ask us for copies of your personal data (known as ‘making a data subject access request’).
Your right to rectification - you have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to request restriction of processing - you have the right to ask us to restrict the processing of your data in certain circumstances.
Your right to object to processing - you have the right to object to the processing of your personal data in certain circumstances.
Your right to erasure – you have the right to ask us to erase your personal data in certain circumstances.
Your right to request the transfer of personal data – you have the right to ask that we transfer the data you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a subject access request, we have one month to respond to you.
Please contact us at Institute.DPO@education.gov.uk if you wish to make a request or object to the processing of your personal data.
If you’ve signed up for our newsletters, you can unsubscribe or change your settings at any time.
If you’ve created an account for the trailblazer portal or members area, you can delete your account and your personal information at any time. Personal information associated with the deleted account will be removed from our systems.
We will review inactive accounts as part of our regular Route Review exercises. You can read more about reviews to learn more about the frequency of these exercises.
Our Data Protection Officer is responsible for ensuring compliance across our data processing activities. For any questions, concerns or complaints about how we process your personal data you can contact our Data Protection Officer:
Simon Love - Institute.DPO@education.gov.uk
You can also write to us:
IfATE
Sanctuary Buildings
20 Great Smith Street
London SW1P 3BT
You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have processed your personal data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
This privacy notice was last updated on 1 May 2024. We reserve the right to update this privacy notice at any time, with changes published on our website, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.
The Institute for Apprenticeships and Technical Education (IfATE) is committed to protecting the privacy and security of your personal data.
In carrying out our work we collect and use (or ‘process’) personal data. This means that we are a ‘data controller’ under the UK General Data Protection Regulation and the Data Protection Act 2018 (‘data protection law’).
As a data controller, we are required to inform you of our privacy rules and your rights pertaining to your personal data. This privacy notice describes how we process your personal data in accordance with data protection law.
This notice applies to any individual whose contact details we hold on our directory of professional and employer-led bodies (‘Employer Directory’).
The personal data we hold about you includes your:
Organisations need to apply for entry to the Employer Directory. As part of the application process, organisations are asked to provide the details of a nominated person through whom all contact will be made.
The Employer Directory is designed to support our statutory functions in connection with the quality assurance of apprenticeship end-point assessments.
We will store the contact details of the person named on the application form in order to contact them to seek their organisation’s views and insight in connection with these assessments.
You can find out more about the purpose of the Employer Directory here: Directory of professional and employer-led bodies.
We may also contact you for other purposes in connection with our work such as where we conduct surveys to assess stakeholder satisfaction or to invite you to events or consult with you.
Under data protection law, we are required to ensure that we have a lawful basis for processing your personal data. Article 6 of the UK GDPR allows us to process personal data where it is necessary to perform a public task or for official functions, and the task or function has a clear basis in law.
We have a legal obligation to carry out the quality assurance of apprenticeship end-point assessments or make arrangements for other persons to carry out the evaluations on our behalf. We rely on this basis where we use your data, including sharing it as described below, in order to enable us to carry out this obligation.
We also rely on this basis where we contact you for purposes such as those relating to stakeholder satisfaction surveys, events or consultation.
We may sometimes ask for your permission or consent to process your data. We rely on this basis where, for example, you have consented to us using photographs, video or audio recordings. Consent must be freely given in order to be valid and may be withdrawn at any time by contacting Institute.DPO@education.gov.uk.
We may also process your personal data where it is necessary for us to comply with a legal obligation (not including contractual obligations).
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated or new purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may, if necessary, process your personal data without your knowledge or consent, in compliance with this notice, where this is required or permitted by law.
We may in some circumstances have to share your data with third parties, including service providers, suppliers and other civil service bodies.
We sometimes make arrangements for other organisations to carry out work, in relation to the quality assurance of end-point assessments on our behalf and we may share your details with those organisations for that purpose. These include Ofqual, the Office for Students (OfS), or any body appointed by Ofqual or the OfS including any qualifying body designated under paragraph 3 of Schedule 4 to the Higher Education and Research Act 2017.
We will only share your data with third parties where we have a lawful basis to do so. We require third parties to respect the security of your data and to treat it in accordance with the law.
We will not, without your consent, share your information with any third parties for the purposes of direct marketing.
We hold your data in our Directory of Professional and Employer-led Bodies. This is stored on secure servers in the UK.
Some information may also be stored on our behalf on secure servers outside the UK. This includes data held on our behalf for the purpose of:
We only keep your personal data for as long as is necessary. After this point, we will delete or securely dispose of the personal data.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we will anonymise your personal information so that it can no longer be associated with you, in which case we will use such information without further notice to you.
It is important that the information we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.
Your right of access - you have the right to ask us for copies of your personal data (known as ‘making a data subject access request’).
Your right to rectification - you have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to request restriction of processing - you have the right to ask us to restrict the processing of your data in certain circumstances.
Your right to object to processing - you have the right to object to the processing of your personal data in certain circumstances.
Your right to erasure – you have the right to ask us to erase your personal data in certain circumstances.
Your right to request the transfer of personal data – you have the right to ask that we transfer the data you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a subject access request, we have one month to respond to you.
Please contact us at Institute.DPO@education.gov.uk if you wish to make a request or object to the processing of your personal data.
Our Data Protection Officer is responsible for ensuring compliance across our data processing activities. For any questions, concerns or complaints about how we process your personal data you can contact our Data Protection Officer:
Simon Love – Institute.DPO@education.gov.uk
You can also write to us:
IfATE
Sanctuary Buildings
20 Great Smith Street
London SW1P 3BT
You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have processed your personal data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline number: 0303 123 1113
ICO website: www.ico.org.uk
This privacy notice was last updated on 1 May 2024. We reserve the right to update this privacy notice at any time, with changes published on our website, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.
The Institute for Apprenticeships and Technical Education (IfATE) is committed to protecting the privacy and security of your personal data.
In carrying out our work we collect and use (or ‘process’) personal data. This means that we are a ‘data controller’ under the UK General Data Protection Regulation and the Data Protection Act 2018 (‘data protection law’).
As a data controller, we are required to inform you of our privacy rules and your rights pertaining to your personal data. This privacy notice describes how we process your personal data in accordance with data protection law.
We have a number of statutory functions conferred on us by the Apprenticeships, Skills Children and Learning Act 2009, including responsibility for approving Higher Technical Qualifications (HTQs) for new or existing level 4 and 5 qualifications. To effectively discharge those functions, we engage with awarding organisations and other stakeholders which requires us to process personal data.
Our website contains links to other websites. This privacy notice does not apply to those websites. If you go to another website from our website, you should read the privacy notice on that website to find out how your information is used.
If you come to our website from another website, we may receive information from the other website. We don’t use this data. You should read the privacy notice of the website you came from to find out more about this.
We may collect, store and use the following categories of your personal data:
All of the personal information we process is provided to us directly by you or your awarding organisation/body through the online form for one of the following reasons:
We use the information that you or your awarding organisation/body have given us in order to:
We may also contact you for other purposes in connection with our work such as where we conduct surveys to assess stakeholder satisfaction or to invite you to events or consult with you.
Under data protection law, we are required to ensure that we have a lawful basis for processing your personal data. Article 6 of the UK GDPR allows us to process personal data where it is necessary to perform a public task or for official functions and the task or function has a clear basis in law, or where it is needed for the performance of a contract. As a public body that is required by law to carry out certain tasks, including those described above, we rely on this basis where we use your data in order to enable us to carry out those tasks.
We may sometimes ask for your permission or consent to process your data. We rely on this basis where, for example, you have consented to us using photographs, video or audio recordings. Consent must be freely given in order to be valid and may be withdrawn at any time by contacting Institute.DPO@education.gov.uk.
We may also process your personal data where it is necessary for us to comply with a legal obligation (not including contractual obligations).
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated or new purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may, if necessary, process your personal data without your knowledge or consent, in compliance with this notice, where this is required or permitted by law.
We may in some circumstances have to share your data with third parties, including service providers, suppliers and other civil service bodies.
We may share this information with the Department for Education, Ofqual, and the Office for Students for the purpose of evaluation of the programme and/or evaluation of the submitted qualifications. They may wish to contact you during the approvals process. Each of these public bodies has a power to share information with the other public bodies for the purpose of their statutory functions. We will ensure that any personal data disclosed is only disclosed for the purpose of these functions.
We will not, without your consent, share your information with any third parties for the purposes of direct marketing.
We store your data on secure servers in the UK.
Some information may also be stored on our behalf on secure servers outside the UK. This includes data held on our behalf for the purpose of:
We keep the name, email address and telephone number information for the applicant’s primary contact for seven years from the date of registration/application. We will then review our need to retain this information, where we dispose of this information, we will do so securely by deleting all electronic copies of the data.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we will anonymise your personal information so that it can no longer be associated with you, in which case we will use such information without further notice to you.
It is important that the information we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.
Your right of access - you have the right to ask us for copies of your personal data (known as ‘making a data subject access request’).
Your right to rectification - you have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to request restriction of processing - you have the right to ask us to restrict the processing of your data in certain circumstances.
Your right to object to processing - you have the right to object to the processing of your personal data in certain circumstances.
Your right to erasure – you have the right to ask us to erase your personal data in certain circumstances.
Your right to request the transfer of personal data – you have the right to ask that we transfer the data you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a subject access request, we have one month to respond to you.
Please contact us at Institute.DPO@education.gov.uk if you wish to make a request or object to the processing of your personal data.
Our Data Protection Officer is responsible for ensuring compliance across our data processing activities. For any questions, concerns or complaints about how we process your personal data you can contact our Data Protection Officer:
Simon Love – Institute.DPO@education.gov.uk
You can also write to us:
IfATE
Sanctuary Buildings
20 Great Smith Street
London SW1P 3BT
For enquiries regarding HTQs and the approval process please contact us at:
HTQ.approvals@education.gov.uk
You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have processed your personal data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline number: 0303 123 1113
ICO website: www.ico.org.uk
This privacy notice was last updated on 1 May 2024. We reserve the right to update this privacy notice at any time, with changes published on our website, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.
The Institute for Apprenticeships and Technical Education (IfATE) is committed to protecting the privacy and security of your personal data.
In order that you can carry out your role as a Peer Reviewer, IfATE will collect and use (or ‘process’) personal data about you. This means that we are a data controller under the UK General Data Protection Regulation and the Data Protection Act 2018 (‘data protection law’).
As a data controller, we are required to inform you of our privacy rules and your rights pertaining to your personal data. This privacy notice describes how we process your personal data in accordance with data protection law.
Our website contains links to other websites. This privacy notice does not apply to those websites. If you go to another website from our website, you should read the privacy notice on that website to find out how your information is used.
If you come to our website from another website, we may receive information from the other website. We don’t use this data. You should read the privacy notice of the website you came from to find out more about this.
We may collect, store and use the following categories of your personal data:
We may also collect, store and use the following types of your special category personal data:
We collect your personal data for purposes relating to your recruitment and your role as a Peer Reviewer, including for contacting you in relation to your role. Most of the personal data we process is provided to us directly by you, for example, within the following:
We may also collect your personal data if you respond to emails or other communications from us, and through the reviews you have carried out and any feedback scores provided in relation to those reviews.
We use your personal data for the purposes of enabling you to carry out your role as a Peer Reviewer, including:
Under data protection law, we are required to ensure that we have a lawful basis for processing your personal data. Article 6 of the UK GDPR allows us to process personal data where it is necessary to perform a public task or for official functions, and the task or function has a clear basis in law. As a public body that is required by law to carry out certain tasks, including those described above, we rely on this basis where we use your data in order to enable us to carry out those tasks.
We may also process your personal data where it is necessary for us to comply with a legal obligation (not including contractual obligations).
In relation to special category data, Article 9 of the UK GDPR allows us to process special category data where it is necessary for reasons of substantial public interest (to promote equality of opportunity or treatment). We rely on this basis to process your special category data for equality, diversity and inclusion monitoring.
We may also request your explicit consent to process your special category data for other purposes.
We may also process your personal data where it is necessary for us to comply with a legal obligation (not including contractual obligations).
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated or new purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may, if necessary, process your personal data without your knowledge or consent, in compliance with this notice, where this is required or permitted by law.
We may in some circumstances have to share your data with third parties, including service providers, suppliers and other civil service bodies.
We will only share your data with third parties where we have a lawful basis to do so. We require third parties to respect the security of your data and to treat it in accordance with the law.
We will not, without your consent, share your information with any third parties for the purposes of direct marketing.
We store your data on secure servers in the UK.
Some information is also stored on our behalf on secure servers outside the UK:
We only keep your personal data for as long as is necessary. After this point, we will delete or securely dispose of the data.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we will anonymise your personal information so that it can no longer be associated with you, in which case we will use such information without further notice to you.
It is important that the information we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.
Your right of access - you have the right to ask us for copies of your personal data (known as ‘making a data subject access request’).
Your right to rectification - you have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to request restriction of processing - you have the right to ask us to restrict the processing of your data in certain circumstances.
Your right to object to processing - you have the right to object to the processing of your personal data in certain circumstances.
Your right to erasure – you have the right to ask us to erase your personal data in certain circumstances.
Your right to request the transfer of personal data – you have the right to ask that we transfer the data you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a subject access request, we have one month to respond to you.
Please contact us at Institute.DPO@education.gov.uk if you wish to make a request or object to the processing of your personal data.
Our Data Protection Officer is responsible for ensuring compliance across our data processing activities. For any questions, concerns or complaints about how we process your personal data you can contact our Data Protection Officer:
Simon Love – Institute.DPO@education.gov.uk
You can also write to us:
IfATE
Sanctuary Buildings
20 Great Smith Street
London SW1P 3BT
You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have processed your personal data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline number: 0303 123 1113
ICO website: www.ico.org.uk
This privacy notice was last updated on 1 May 2024. We reserve the right to update this privacy notice at any time, with changes published on our website, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.
The Institute for Apprenticeships and Technical Education (IfATE) is committed to protecting the privacy and security of your personal data.
In carrying out our work we collect and use (or ‘process’) personal data. This means that we are a ‘data controller’ under the UK General Data Protection Regulation and the Data Protection Act 2018 (‘data protection law’).
As a data controller, we are required to inform you of our privacy rules and your rights pertaining to your personal data. This privacy notice describes how we process your personal data in accordance with data protection law.
We have a number of statutory functions conferred on us by the Apprenticeships, Skills Children and Learning Act 2009, including responsibility for approving new and revised technical qualifications at level 2 and 3. To effectively discharge those functions, we engage with awarding organisations and other stakeholders, which requires us to process personal data.
Our website contains links to other websites. This privacy notice does not apply to those websites. If you go to another website from our website, you should read the privacy notice on that website to find out how your information is used.
If you come to our website from another website, we may receive information from the other website. We don’t use this data. You should read the privacy notice of the website you came from to find out more about this.
We may collect, store and use the following categories of your personal data:
Most of the personal information we process is provided to us directly by you or your awarding organisation/body through the online form for one of the following reasons:
We use the information that you or your awarding organisation/body have given us in order to:
Under data protection law, we are required to ensure that we have a lawful basis for processing your personal data. Article 6 of the UK GDPR allows us to process personal data where it is necessary to perform a public task or for official functions and the task or function has a clear basis in law, or where it is needed for the performance of a contract. As a public body that is required by law to carry out certain tasks, including those described above, we rely on this basis where we use your data in order to enable us to carry out those tasks.
We may sometimes ask for your permission or consent to process your data. We rely on this basis where, for example, you have consented to us using photographs, video or audio recordings. Consent must be freely given in order to be valid and may be withdrawn at any time by contacting Institute.DPO@education.gov.uk.
We may also process your personal data where it is necessary for us to comply with a legal obligation (not including contractual obligations).
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated or new purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may, if necessary, process your personal data without your knowledge or consent, in compliance with this notice, where this is required or permitted by law.
We may in some circumstances have to share your data with third parties, including service providers, suppliers and other civil service bodies.
We may share information with the Department for Education, Ofqual, and the Office for Students for the purpose of evaluation of the programme and/or evaluation of the submitted qualifications. They may wish to contact you during the approvals process. Each of these public bodies has a power to share information with the other public bodies for the purpose of their statutory functions. We will ensure that any personal data disclosed is only disclosed for the purpose of these functions.
We will not, without your consent, share your information with any third parties for the purposes of direct marketing.
We store your data on secure servers in the UK.
Some information may also be stored on our behalf on secure servers outside the UK. This includes data held on our behalf for the purpose of:
We keep the name, email address and telephone number information for the applicant’s primary contact for seven years from the date of registration/application. We will then review our need to retain this information, where we dispose of this information, we will do so securely by deleting all electronic copies of the data.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we will anonymise your personal information so that it can no longer be associated with you, in which case we will use such information without further notice to you.
It is important that the information we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.
Your right of access - you have the right to ask us for copies of your personal data (known as ‘making a data subject access request’).
Your right to rectification - you have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to restriction of processing - you have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing - you have the right to object to the processing of your personal data in certain circumstances.
Your right to erasure - you have the right to ask us to erase your personal information in certain circumstances.
Your right to request the transfer of personal data - you have the right to ask that we transfer the data you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a subject access request, we have one month to respond to you.
Please contact us at Institute.DPO@education.gov.uk if you wish to make a request or object to the processing of your personal data.
Our Data Protection Officer is responsible for ensuring compliance across our data processing activities. For any questions, concerns or complaints about how we process your personal data you can contact our Data Protection Officer:
Simon Love - Institute.DPO@education.gov.uk
You can also write to us:
IfATE
Sanctuary Buildings
20 Great Smith Street
London SW1P 3BT
For enquiries regarding Post 16 please contact us at:
Email: Ifate.POST16@education.gov.uk
You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have processed your personal data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline number: 0303 123 1113
ICO website: www.ico.org.uk
This privacy notice was last updated on 1 May 2024. We reserve the right to update this privacy notice at any time, with changes published on our website, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.
The Institute for Apprenticeships and Technical Education (IfATE) is committed to protecting the privacy and security of your personal data.
In carrying out our work we collect and use (or ‘process’) personal data. This means that we are a ‘data controller’ under the UK General Data Protection Regulation and the Data Protection Act 2018 (‘data protection law’).
As a data controller, we are required to inform you of our privacy rules and your rights pertaining to your personal data. This privacy notice describes how we process your personal data in accordance with data protection law.
We have a number of statutory functions conferred on us by the Apprenticeships, Skills Children and Learning Act 2009 and Route Panel members play a crucial role in our work. As leaders and sector experts, Route Panel members help to guide the current and long-term direction of their route, allowing us to ensure that education and training within our remit is appropriate for those who undertake it.
In order that you can carry out your role as a member of a Route Panel, IfATE will collect, store and use (or ‘process’) your personal data.
Our website contains links to other websites. This privacy notice does not apply to those websites. If you go to another website from our website, you should read the privacy notice on that website to find out how your information is used.
If you come to our website from another website, we may receive information from the other website. We don’t use this data. You should read the privacy notice of the website you came from to find out more about this.
We may collect, store and use the following categories of your personal data:
Most of the personal data we collect is provided to us directly by you, for example, within the following:
We may also collect your personal data from your communications and interactions with us, including by email or other correspondence and during meetings. Where meetings are held online (e.g. Teams) these may be recorded and stored within IfATE’s OneDrive and SharePoint systems. Where it is intended for a meeting to be recorded, you will be given advance notice of this.
We use your personal data for the purposes of enabling us to discharge our statutory functions, including collecting your views and expertise. As part of this, we may use your personal data to:
We may also contact you for other purposes in connection with our work such as where we conduct surveys to assess stakeholder satisfaction or to invite you to events or consult with you.
Under data protection law, we are required to ensure that we have a lawful basis for processing your personal data. Article 6 of the UK GDPR allows us to process personal data where it is necessary to perform a public task or for official functions, and the task or function has a clear basis in law. As a public body that is required by law to carry out certain tasks, we rely on this basis for processing your personal data for the purposes described above.
We may sometimes ask for your permission or consent to process your data. We rely on this basis where, for example, you have consented to us using photographs, video or audio recordings. Consent must be freely given in order to be valid and may be withdrawn at any time by contacting Institute.DPO@education.gov.uk.
We may also process your personal data where it is necessary for us to comply with a legal obligation (not including contractual obligations).
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated or new purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may, if necessary, process your personal data without your knowledge or consent, in compliance with this notice, where this is required or permitted by law.
We may in some circumstances have to share your personal data with third parties, including service providers, suppliers and other civil service bodies.
We will only share your data with third parties where we have a lawful basis to do so. We require third parties to respect the security of your data and to treat it in accordance with the law.
We will not, without your consent, share your information with any third parties for the purpose of direct marketing.
We store your data on secure servers in the UK.
Some information may also be stored on our behalf on secure servers outside the UK. This includes data held on our behalf for the purpose of:
We only keep your personal data for as long as is necessary. After this point, we will delete or securely dispose of the data. The data is retained for the duration of the panel membership. When a member of the panel leaves the panel, we will retain their data for a period of 12 months, before removing it.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use of disclosure of your personal data, the purpose for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we will anonymise your personal information so that it can no longer be associated with you, in which case we will use such information without further notice to you.
It is important that the information we hold about you is accurate and current. Please inform your Route Manager if your personal data changes during your working relationship with us.
Your right of access - you have the right to ask us for copies of your personal data (known as ‘making a data subject access request’).
Your right to rectification - you have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to request restriction of processing - you have the right to ask us to restrict the processing of your data in certain circumstances.
Your right to object to processing - you have the right to object to the processing of your personal data in certain circumstances.
Your right to erasure – you have the right to ask us to erase your personal data in certain circumstances.
Your right to request the transfer of personal data – you have the right to ask that we transfer the data you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a subject access request, we have one month to respond to you.
Please contact us at Institute.DPO@education.gov.uk if you wish to make a request or object to the processing of your personal data.
Our Data Protection Officer is responsible for ensuring compliance across our data processing activities. For any questions, concerns or complaints about how we process your personal data you can contact our Data Protection Officer:
Simon Love – Institute.DPO@education.gov.uk
You can also write to us:
IfATE
Sanctuary Buildings
20 Great Smith Street
London SW1P 3BT
You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have processed your personal data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline number: 0303 123 1113
ICO website: www.ico.org.uk
This privacy notice was last updated on 1 May 2024. We reserve the right to update this privacy notice at any time, with changes published on our website, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.
The Institute for Apprenticeships and Technical Education (IfATE) is committed to protecting the privacy and security of your personal data.
In carrying out our work we collect and use (or ‘process’) personal data. This means that we are a ‘data controller’ under the UK General Data Protection Regulation and the Data Protection Act 2018 (‘data protection law’).
As a data controller, we are required to inform you of our privacy rules and your rights pertaining to your personal data. This privacy notice describes how we process your personal data in accordance with data protection law.
The Apprenticeships, Skills, Children and Learning Act 2009 requires occupational standards and end-point assessment (EPA) plans to be developed by groups of persons (Trailblazers) approved by IfATE. The Trailblazer group must be a group of employers recognised by IfATE and reflective of those who employ people in the occupation, including small employers. Members of Trailblazer groups can also assist IfATE with other work including in relation to route reviews, the promotion of occupational standards and their linked apprenticeships and technical qualifications and the monitoring of their performance.
In order that you can carry out your role as a member of a Trailblazer group, IfATE will collect, store and use (or ‘process’) personal data about you.
Our website contains links to other websites. This privacy notice does not apply to those websites. If you go to another website from our website, you should read the privacy notice on that website to find out how your information is used.
If you come to our website from another website, we may receive information from the other website. We don’t use this data. You should read the privacy notice of the website you came from to find out more about this.
We may collect, store and use the following categories of your personal data:
Most of the personal data we collect is provided to us directly by you, for example, within the following:
We may also collect your personal data from your communications and interactions with us, including by email or other correspondence and during meetings. Where meetings are held online (e.g. Teams) these may be recorded and stored within IfATE’s OneDrive and SharePoint systems.
We use your personal data for the purposes of enabling us to discharge our statutory functions. This includes in relation to the approval of groups of persons (Trailblazers) to prepare occupational standards and EPA plans, and the approval of those occupational standards and EPA plans. As part of this, we may use your personal data to:
We may also contact you for other purposes in connection with our work such as where we conduct surveys to assess stakeholder satisfaction or to invite you to events or consult with you.
Under data protection law, we are required to ensure that we have a lawful basis for processing your personal data. Article 6 of the UK GDPR allows us to process personal data where it is necessary to perform a public task or for official functions, and the task or function has a clear basis in law. As a public body that is required by law to carry out certain tasks, including those described above, we rely on this basis where we use your data in order to enable us to carry out those tasks.
We may sometimes ask for your permission or consent to process your data. We rely on this basis where, for example, you have consented to us using photographs, video or audio recordings. Consent must be freely given in order to be valid and may be withdrawn at any time by contacting Institute.DPO@education.gov.uk.
We may also process your personal data where it is necessary for us to comply with a legal obligation (not including contractual obligations).
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated or new purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may, if necessary, process your personal data without your knowledge or consent, in compliance with this notice, where this is required or permitted by law.
We may in some circumstances have to share your data with third parties, including service providers, suppliers and other civil service bodies.
We will only share your data with third parties where we have a lawful basis to do so. We require third parties to respect the security of your data and to treat it in accordance with the law.
We will not, without your consent, share your information with any third parties for the purposes of direct marketing.
We store your data on secure servers in the UK.
Some information may also be stored on our behalf on secure servers outside the UK. This includes data held on our behalf for the purpose of:
We only keep your personal data for as long as is necessary. After this point, we will delete or securely dispose of the personal data.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we will anonymise your personal information so that it can no longer be associated with you, in which case we will use such information without further notice to you.
It is important that the information we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.
Your right of access - you have the right to ask us for copies of your personal data (known as ‘making a data subject access request’).
Your right to rectification - you have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to request restriction of processing - you have the right to ask us to restrict the processing of your data in certain circumstances.
Your right to object to processing - you have the right to object to the processing of your personal data in certain circumstances.
Your right to erasure – you have the right to ask us to erase your personal data in certain circumstances.
Your right to request the transfer of personal data – you have the right to ask that we transfer the data you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a subject access request, we have one month to respond to you.
Please contact us at Institute.DPO@education.gov.uk if you wish to make a request or object to the processing of your personal data.
Our Data Protection Officer is responsible for ensuring compliance across our data processing activities. For any questions, concerns or complaints about how we process your personal data you can contact our Data Protection Officer:
Simon Love – Institute.DPO@education.gov.uk
You can also write to us:
IfATE
Sanctuary Buildings
20 Great Smith Street
London SW1P 3BT
You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have processed your personal data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline number: 0303 123 1113
ICO website: www.ico.org.uk
This privacy notice was last updated on 1 May 2024. We reserve the right to update this privacy notice at any time, with changes published on our website, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.
Data Protection Policy: Version 0.3
Our retention and erasure practices will be set out in our retention schedules.
The policy will be reviewed on an annual basis (or more regularly if circumstances require it) and updated as necessary at these reviews. This policy will be retained for as long as we process these categories of data, and for six months after processing ceases.
Appropriate policy for processing sensitive personal information: Version 0.2
Page last updated 12 July 2024
(JT, NS)