Data Protection & Privacy Policy

1. Introduction

INTEGER TRAINING LIMITED is committed to preserving the privacy of its learners and employees and to complying with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). This policy sets out how we collect, use, store and protect personal information.

2. Data Protection Principles

We adhere to the following data protection principles. Personal data shall be:

• Obtained and processed fairly and lawfully
• Obtained for a specified and lawful purpose
• Adequate, relevant and not excessive for those purposes
• Accurate and kept up to date
• Not kept for longer than is necessary
• Processed in accordance with data subjects' rights
• Kept safe from unauthorised access, accidental loss or destruction
• Not transferred to a country outside the European Economic Area without adequate protection

3. Data Controller

The data controller is INTEGER TRAINING LIMITED, registered at 9 Bude Business Centre, Kings Hill Industrial Estate, Bude, EX23 8QN. The designated Data Protection Coordinator is the Operations Manager, Sandeep Dawar.

4. Information We Collect

We may collect the following categories of personal data:

• General personal details such as name, address, telephone number, and email address
• Class attendance records
• Course work marks and grades
• Notes of personal supervision

Sensitive personal data -- including information about health, sexual orientation, political or religious views, trade union membership, and ethnicity -- is only collected where the individual has given explicit consent and it is necessary for a lawful purpose.

5. Data Sharing

INTEGER TRAINING LIMITED will not release staff or learner data to third parties except to relevant statutory bodies as required by law. In all other circumstances, consent will be obtained from the individual before any personal data is shared with a third party.

6. Your Rights

Under the Data Protection Act 2018 and UK GDPR, you have the following rights:

• Right to access your data: You may submit a Standard Request Form to access the personal data we hold about you. We will respond within 21 days of receiving the request.
• Right to be forgotten: You may request that your personal data be erased. We will respond within one month of receiving the request.
• Subject consent: Where we process data based on your consent, you have the right to withdraw that consent at any time.

7. Data Retention

We retain personal data for as long as necessary for the purpose it was collected. Specific retention periods include:

• Personnel files and training records: 6 years after employment ends
• Application forms (unsuccessful candidates): 6 months
• Wage and salary records: 6 years
• Student records: at least 6 years from the end of the academic year
• Health records: for the duration of employment

8. Security

We take appropriate technical and organisational measures to protect personal data, including:

• Data is kept in lockable storage when in physical form
• All ICT equipment is password-protected
• Data files containing personal information must be password-protected
• Paper records containing personal data are shredded when no longer required

9. Compliance

Any breach of this data protection policy may lead to disciplinary action and, in serious cases, could result in criminal prosecution under the Data Protection Act 2018.

10. Contact

For any data protection enquiries, to exercise your rights, or to report a concern, contact the Data Protection Coordinator:

• Data Protection Coordinator: Sandeep Dawar (Operations Manager)
• Address: INTEGER TRAINING LIMITED, 9 Bude Business Centre, Kings Hill Industrial Estate, Bude, Cornwall, EX23 8QN
• Phone: 0121 690 9563
• Email: [email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.