PRIVACY POLICY

What is the purpose of this document?

This is the Privacy Notice applicable to the Top Apprenticeship Employers Website run by the Department for Education (DfE) and RateMyApprenticeship (RMA). We are the joint data controllers of your information. This means that both RMA and DfE are responsible for deciding how we hold and use personal information about you and your organisation. You are being provided with this privacy notice because you are completing a registration on this website. It makes you aware of how and why your data will be used and how long it will usually be retained for. It provides you with certain information that must be provided under UK privacy laws.

Section 1: Information we collect from you, and what we use it for

We collect the information you input on our registration form.

We use all this information to qualify your entry for the Top Apprenticeship Employer rankings and your participation in it. Alongside the information submitted on this website, we will also take into consideration eligible reviews submitted by your apprentices via RateMyApprenticeship.co.uk. 

We will use your email address to confirm receipt of your nomination/entry and to contact you with future communications related to the Top Apprenticeship Employer rankings. 

We may use your email address or phone number to contact you if we have any queries relating to the data you have provided.

Our lawful basis for this processing is our legitimate interests in providing information about the Top Apprenticeship Employer rankings that you have registered for, and facilitating your participation.

Section 2: Data sharing

Why might you share my personal information with third parties?

The personal information you submit in your nomination will be used by RMA and DfE to process and communicate with you about your application. 

Information in your application, including your personal information may be shared with PR, creative or marketing agencies working on behalf of RMA and DfE for publicity purposes relating to the promotion of apprenticeships as part of the Top Apprenticeship Employers rankings process. We will obtain your consent before doing this. Commercially sensitive information will not be shared publicly.

All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

Section 3: Data security

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Section 4: Data retention

How long will you use my information for?

We keep your personal data for 10 years after it was last modified. DfE has a disposal schedule for personal data based on the needs of the department and the law.

We will take necessary steps to keep your information safe. It will then be securely destroyed when it is no longer needed.

Section 5: Rights of access, correction, erasure, and restriction

Your rights in connection with personal information

Under certain circumstances you have the right to:

  • Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.  See the DfE Personal Information Charter for further details.

  • Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

  • Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).

  • Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.

  • Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.

  • Request the transfer of your personal information to another party. 

Section 6: How to contact us

If you want to request information about our privacy policy in relation to the Top Apprenticeship Employers campaign Website you can email issy@rmpenterprise.co.uk or write to:

RMP Enterprise Ltd.

9 Brighton Terrace

Brixton

London

SW9 8DJ

To contact the Department for Education (DfE) directly you can use the DfE contact form or write to:

Data Protection Officer

Department for Education (B2.28)

7 & 8 Wellington Place

Wellington Street

Leeds

LS1 4AW

Feel free to contact us if you have any concerns or questions about how we handle your data and personal information.

Section 7: How to complain

We hope that we can resolve any query or concern you raise about our use of your information.

The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns/ or telephone: 0303 123 1113.