JFC Training College Data Privacy Notice

We also collect special category data, necessary for legal requirements and reporting but also to help us provide you with the most effective education and to keep you safe whilst in the College.

Special categories of particularly sensitive personal information require higher levels of protection. We need to have further justification for collecting, storing and using this type of personal information and we do this with either your consent or as permitted by UK and EU data protection legislation

The special category information we collect includes:

- Learning difficulty/disabilities - Ethnicity - Religion - Sexual Orientation - Disability & learning support, e.g. Education Healthcare Plan(EHCP) - Household status - Details of any Criminal convictions

The personal data collected is needed in order to:

- provide you with education; - to give our staff information necessary to facilitate your learning; - for necessary funding and administrative purposes; - to meet our legal and regulatory obligations as a college; - promote the college to prospective learners or clients

Information we may collect through our website is needed:

- to help identify your computer; - analyse data about web page traffic and to help us tailor our website for your needs; - to allow learners, staff and guests to access information they may require.

We also collect personal contacts from our Business and Corporate clients for our legitimate interests. Almost entirely, these contacts are corporate or business individuals and while this is still categorised under UK and EU legislation as personal data we are aware that it can be used for business-to-business purposes, as stipulated by the Privacy of Electronic Communications Regulation (PECR) with which we also comply.

We collect personal information:

- directly from learners: e.g. when a learner applies to join us, attends a promotional pre enrolment event or at enrolment; - from publicly available sources: eg. networking, social media, internet services, exhibitions, direct referrals, other Corporate bodies; - from guests or visitors

We are committed to keeping your information up to date as far as is reasonably possible. However, if you believe that we have made an error, then please contact us as we have outlined below and we will use reasonable endeavours to correct your record.

We also capture data using Cookies. A cookie consists of a piece of text sent by a web server to a web browser, and is stored by the browser. The information is then sent back to the server each time the browser requests a page from the server. This enables the web server to identify and track the web browser.

The majority of our data is held within our learner database, accessible only to those staff who need access.

Any processing activities we undertake are fully compliant with UK and European data protection legislation and PECR where needed for the marketing approaches we undertake.

Information collected may be used for the following:

1. On internal displays (including digital display) – to inform learners of college related activities and news; 2. disciplinary/grievance procedures; 3. attendance monitoring; 4. correspondence to learners relating programme of study; 5. distribution of examination/registration documents; 6. storage and usage of learner image to create ID Cards and for identification purposes; 7. contact to learners via text, e-mail or post using information collected on the enrolment/learning agreement; 8. the provision of advice and support to learners via, amongst others, Learner Support & Inclusion; 9. registration with awarding bodies; 10. we make use CCTV cameras throughout the College for security, crime prevention and safeguarding purposes, both for the public and vital interests of our visitors, staff and learners 11. Safeguarding; 12. disclosing information where necessary, either with your consent or as required by law to: - Local Authority; - sponsors/employers (where stated on the Learning Agreement) - external work based training providers; - professional and statutory bodies; - Government agencies including the Police, if deemed necessary and within the confines of legislation. In particular in relation to safeguarding of young people and vulnerable adults and others and in line with the Children’s Act and FE Act. - funding agencies: 13. Disclosing information on your learning status including – attendance, awarding body entry and exam attendance, if you are a 16-18 year old learner (at the start of your learning programme). This data will only be disclosed to the next of kin(s) (i.e. parent/guardian) details you provided at enrolment. If your next of kin/guardian details change during your time at the College, please contact Learner Support & Inclusion. 14. Marketing purposes, such as to keep you informed of College activities and services which may interest you.

JFC is committed to keeping your personal information secure to protect it from being inappropriately or accidentally accessed, used, shared or destroyed, or lost.

In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality

In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.

We currently do not share any data outside the EEA but should we need to transfer personal information to third parties located outside the UK, we will ensure that information is protected to a level which meets the requirements of UK and European data protection regulations

If we provide you with a login and password in order to access any of our systems, you are responsible for keeping your password and user details confidential and safe. We will never ask you for your password, never disclose it to anyone.

Access to your personal information is only allowed when required by law or is required in order to fulfil our service obligations. We do not, and will never, sell or share your personal information with other third parties.

All our third-party service providers and other entities in the College are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

We use third party providers to:

- ensure our IT and security measures are sufficiently robust to protect your data - to help us manage and host events - allow us to receive funding - to help us promote the college or advertise forthcoming events

Our website and email newsletters and bulletins may contain links to other websites of interest. However, you should note that we do not have any control over these other websites. Once you have used any of these links to leave our site, therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting these sites and such sites are not governed by this privacy statement.

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

For our learners we are required by law to retain all the personal details we collect for as long as they remain a learner and only certain personal details in line with Funding Agency requirements after they leave us. For anyone who enquires about joining the college but does not register we will hold these personal details for a maximum of four years.

Details of retention periods for other aspects of your personal information are available in our retention policy which is available from the College Data Protection Officer.

JFC undertake limited marketing activity and only necessary to promote the college to prospective learners or sponsors. This is completed for our legitimate interests and will include:

- E-Communications such as keep warm from application to enrolment, emails to event data where you have opted in - Social Platform activity, sharing information with Facebook, Instagram, Twitter and LinkedIn - Events to profile the college to new entrants or prospective new markets

Any marketing we undertake is made in a fully complaint manner as governed by UK and European data protection regulations and PECR, with the contacts being given the option to opt out from such contact.

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your working relationship with us.

If you want to review, verify, correct or question anything detailed in this policy or anything about your personal information, please contact the College Data Protection Officer in writing.

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances to the extent permitted by law.

Under certain circumstances, by law you have the right to:

- request details of personal information which we hold about you - restrict the collection or use of your personal data - to withdraw any permission you have given us to use your data - or even to delete any records that we may hold;

We have appointed a Data Protection Officer (DPO) to oversee compliance with this Privacy Notice. If you have any questions about this Privacy Notice or how we handle your personal information, please contact the DPO via the contact details below.

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.