Contractual Necessity
Processing is required to manage apprentice enrolment, progression, and completion, as well as to fulfil apprenticeship agreements.
Add a short introduction explaining what this policy covers and which organisations it applies to.
Engineering Trust Training (ETT) provides recruitment and training services for apprenticeships in the engineering sector. Our services require the collection and use of personal data for learners, employers, and staff. ETT is committed to complying with the Data Protection Act 2018 and GDPR, acting as the Data Controller for personal data collected. ETT is registered with the Information Commissioner’s Office (ICO), registration number Z5955910.
ETT processes personal data primarily to fulfil its contractual and legal obligations. The main lawful bases for data processing are:
Processing is required to manage apprentice enrolment, progression, and completion, as well as to fulfil apprenticeship agreements.
Processing is necessary for compliance with ESFA and other government or regulatory requirements, including funding and auditing purposes.
In certain cases, ETT may process data based on legitimate interests, such as improving services, communications, or monitoring learner outcomes, provided these do not override data subject rights.
Where consent is required for certain activities, ETT will clearly request this consent and allow individuals to withdraw it at any time.
ETT collects and processes the following categories of personal data:
ETT uses personal data to:
Personal data is retained according to ETT’s Data Retention Policy and ESFA guidelines. This includes:
Learner Data Retention: Learner records are retained for a minimum of six years after the completion of the apprenticeship programme to meet ESFA audit requirements. This includes enrolment, attendance, assessment records, and completion data.
Employer and Funding Data Retention: Financial and funding data related to apprenticeships is retained to meet statutory reporting and auditing obligations.
Deletion Process: At the end of the retention period, personal data is securely destroyed in line with ETT’s data destruction policy, ensuring it is unrecoverable.
ETT implements robust security measures to protect personal data, including:
Access to personal data is restricted to authorised personnel only.
Data is encrypted during transmission and at rest where applicable.
Physical records are stored in secure, access-controlled facilities.
Regular audits and reviews of our security practices are conducted to safeguard against data breaches and unauthorised access.
Data subjects have the following rights regarding their personal data:
You have the right to request access to the personal data ETT holds about you. We will respond to such requests within one month.
If your data is inaccurate or incomplete, you may request correction. We aim to rectify inaccurate data within one month of your request.
You may request the deletion of your data in certain circumstances. However, data required for ESFA auditing or legal obligations may be retained as necessary.
You may request that we limit the processing of your data if you contest its accuracy or object to its use.
You have the right to object to data processing for direct marketing purposes and any processing based on our legitimate interests.
Where applicable, you may request a copy of your data in a structured, commonly used format.
If ETT processes your data based on your consent, you have the right to withdraw this consent at any time. Please note that withdrawing consent may impact our ability to provide you with certain services.
ETT does not share personal data with third parties for marketing purposes. Data may be shared with third parties for operational purposes, including:
ETT does not transfer personal data outside the UK or EEA. If this changes, ETT will ensure any international data transfer complies with UK GDPR requirements and will inform data subjects of the relevant safeguards.
Our website may use cookies to improve user experience and analyse web traffic. Users are notified of the use of cookies upon visiting the site and have the option to disable cookies through their browser settings. For further details, please refer to our Cookie Policy.
View Cookie Policy →ETT may update this privacy policy from time to time to reflect changes in legal obligations or practices. Any significant changes will be communicated via our website or direct email notifications. The date of the last update is provided at the end of this policy.
ETT aims to uphold the highest standards in handling personal data. If you have any concerns or wish to make a complaint about our data practices, please contact the Data Protection Officer.