Privacy Policy - Buckinghamshire Adult Learning

Privacy Policy

Privacy policy

Our commitment to your data protection

Our policy is to respect and protect the privacy of anyone who visits this website.

This privacy notice explains how the Department for Education (DfE) uses (processes) any personal data you give to us, or any that we may collect about you in relation to Key Stage 5 and adult education.

Key Stage 5 and adult education includes learners that stay in full-time education in schools, sixth-forth colleges, further education colleges or University Technical College; or learners that start an apprenticeship or traineeship.

For the purposes of relevant data protection legislation, the DfE is the data controller for personal data, this includes personal data processed by Education and Skills Funding Agency (ESFA).

If you would like more information about how we process your personal data or your data protection rights to make a request about your information – for example to request a copy of your information or to ask for your information to be changed to contact our Data Protection Officer.

You can contact us in the following ways using our secure contact form or in writing to:
Data Protection Officer
Department for Education (B2.28)
7 & 8 Wellington Place
Wellington Street

The kinds of personal data we process about you

When we ask you for personal data, we will:

  • tell you the reasons we’re asking for it
  • only ask for the information we need
  • make sure we don’t keep it for longer than necessary
  • protect it and make sure only the appropriate people have access to it
  • let you know if we’ll share it with other organisations
  • keep it up to date where necessary
  • consider privacy risks when we’re planning to change the way we use or hold it
  • train our staff to ensure we use and protect it properly.

In return, we ask you to:

  • give us accurate information
  • tell us as soon as possible if there are any changes

We may process the following types of personal data about you:

  • your personal contact details
  • your date of birth
  • your nationality and ethnicity
  • equality, diversity and inclusion information
  • information about your career, workplace, employer
  • data and information about your learning, including courses and qualifications you are taking or have taken

We may also process images and recordings for the purposes of engaging and communicating with the general public. This is done in accordance with codes of practice and guidelines laid down by the Information Commissioner’s Office.

More information about how the DfE handles personal data is available.

How and why we get personal information

We collect your personal data where the law allows, or we have a legal duty to do so. We may also receive your personal data from third parties including other government departments. Your personal data is collected to enable us to carry out our functions.

The lawful basis we often rely on for processing your personal data is to perform our public task. We may also rely on the following lawful bases:

  • your consent – where this is relied upon, you can ask to remove your consent at any time – you can do this by using our contact form
  • a contractual obligation
  • a legal obligation
  • to protect a person’s vital interest
  • legitimate interest

Personal data collected from you directly

We may collect information from you:

  • face to face like when you fill in a form or survey at our careers fairs.
  • over the telephone like when you contact our helpdesks
  • in correspondence that you send to us, like emails, letters and social media posts

We may use personal data we collect directly from you to:

  • send you information about our work
  • improve the services we offer to you
  • operate our complaints policy
  • contact you for feedback on services we provide to you
  • ensure the protection of public funds
  • prevent and detect fraud

Personal data collected from DfE and ESFA websites and social media channels

We may collect and process the following information:

  • details of your visits to our website including the resources that you access, weblogs and other communication data
  • subscriptions to our mailing lists

We may use personal data we collect from DfE and ESFA websites and social media channels to:

  • ensure that our website content is presented in the best way for you
  • provide you with information, products or services that you request from us or which we feel may interest you, where you have given us your consent
  • allow you to participate in interactive features of our service, when you choose to do so
  • notify you about changes to our website or services

Personal data about learners and apprentices

We collect personal data about learners from you, and third parties, including other government departments and agencies and from organisations funded by DfE and ESFA to provide learning. We collect information about you and what you are studying.

This includes:

  • information on enrolment and achievements which is collected from learning providers following their funding terms and conditions (learning providers include further education colleges and private training companies where you undertake learning)
  • information about you and what you are studying is collected by the Individualised Learner Record (ILR) – see the ILR privacy notice for more details
  • information from the Learning Records Service (LRS) to issue you with a Unique Learner Number (ULN), and to create and keep your Personal Learning Record – see the LRS privacy notice for more details
  • the National Careers Service – see the National Careers Service privacy notice for more details
  • the Bursary for Vulnerable Group Scheme which uses the information you give to your educational institution (for example. your college) to decide if you are eligible for a bursary under the scheme eligibility criteria
  • if you start an apprenticeship, your information is supplied to us by your employer – we collect information about you and what you are studying, see the manage apprenticeship service privacy notice and apprenticeship website privacy notice for more details

Information is collected from and shared by third parties so DfE and ESFA can deliver their obligations to safeguard children and young people

Sharing your personal data

We share your personal data with other parts of DfE and ESFA, and third parties, including other government departments, agencies, local authorities and organisations, where the law allows it or we have a legal duty to do this.

These organisations can include:

  • an organisation who is working for ESFA or DfE under contract
  • organisations who provide:
    • administration services
    • careers and other guidance
    • statistics and research about education, training, employment and well-being, this includes the Higher Education Statistics Agency (HESA) so that you can take part in the graduate outcomes survey
  • organisations that request information to help prevent and detect crime, including sharing personal information for law enforcement purposes to prevent fraud and to assist organisations involved in the prevention of fraud where it is necessary and proportionate

We may share your personal data with other organisations where:

We may share your personal data with other organisations where learning is funded by another public authority. This information is shared to help those organisations do their work. These include Department for Work and Pensions managing the European Social Fund, and combined authorities in city regions and the Greater London Authority managing devolved adult education budget funding.

We may also share your personal data with other organisations where a further education college or other training provider can no longer deliver your training funded by DfE or ESFA. This may be where a training provider has stopped trading. To help you continue learning, DfE will arrange to securely transfer your information from your last training provider to your next training provider or to DfE if your learning does not continue straight away. To do this:

  • the DfE and training providers share data to make sure information held about you and your funded learning is accurate
  • DfE and your training provider may need to share your information with another training provider (for example, to confirm a claim for funding from ESFA) and with an awarding organisation (for example, to confirm what stage your learning has reached)

We may also share your personal data with other organisations where DfE and ESFA are notified of an issue regarding safeguarding of children and young people.

Other people and organisations may also share personal data with DfE and ESFA, for example when they make a complaint or raise a concern with us. This can include information shared in accordance with the statutory guidance keeping children safe in education and working together to safeguard children. This information will be used to investigate complaints and to ensure trusts and academies comply with the regulations (Education (Independent School Standards) Regulations 2014) and their funding agreement.

How long we will keep your personal data

We will only keep your personal data for as long as we need it. DfE has a disposal schedule for personal data based on the needs of the department and the law. We may need to keep some of your personal data for 66 years for research and producing statistics.

We will take the necessary steps to keep your information safe. It will then be securely destroyed when it is no longer needed.

If you want to know how long we keep your information, please write to DfE Departmental Records Officer using our secure contact form.

Storing personal data outside the UK

When DfE stores personal data outside the UK, we will make sure we comply with the data protection law and take additional steps to keep your personal data safe, which can include additional technical and security arrangements, contractual agreements and data sharing agreements.

Your data protection rights

Under data protection law, you have rights including:

  • your right of access – you have the right to ask us for copies of your personal information
  • your right to rectification – you have the right to ask us to rectify personal information you think is inaccurate, you also have the right to ask us to complete information you think is incomplete
  • your right to erasure – you have the right to ask us to erase your personal information in certain circumstances
  • your right to restriction of processing – you have the right to ask us to restrict the processing of your personal information in certain circumstances
  • your right to object to processing – you have the right to object to the processing of your personal information in certain circumstances
  • your right to data portability – you have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances

You are not required to pay any charge for exercising your rights. If you make a request we have 1 month to respond to you.

How to make a subject access request

You have the right to ask for access to your personal information, known as a subject access request. See the DfE Personal Information Charter for further details

To make a subject access request you can use the DfE contact form.

Alternatively, you can make a subject access request in writing. Post your request to:

Data Protection Officer
Department for Education (B2.28)
7 & 8 Wellington Place
Wellington Street

Include as much information as you can about what information you need and the years you need the information for. If possible tell us which part of the department holds the information. You’ll also need to tell us your telephone number and address.

We may need to check your identity and your right to access the information you’re requesting. This means we might ask for a copy of the identification pages of your passport or photo driving licence and proof of your current address.

We’ll try to respond to your request within 1 month. However, if your request is complex we may extend the period by a further 2 months, but we’ll tell you if this is the case.

How to complain

If you have any concerns about our use of your personal information you can make a complaint to the Data Protection Officer at:

Data Protection Officer
Department for Education (B2.28)
7 & 8 Wellington Place
Wellington Street

You can also complain to the Information Commissioner’s Office if you are unhappy with how we have used your data by writing to:

Information Commissioner’s Office
Wycliffe House
Water Lane

Helpline number: 0303 123 1113

Information Commissioner’s Office website

Personal information collected via online forms

Personal information will only be used for the purpose indicated and will be held securely.  It will not be used for any other purpose without your permission and will not be kept for longer than necessary. If you are concerned about providing your personal information online please contact us and we will arrange alternative means for you to provide this information. If you would like to request to have your data removed from our database, please email or call 01296 382403.

IP addresses

We collect IP addresses only for the purposes of system administration and to audit the use of our site. We do not link IP addresses to anything personally identifiable, which means that while your user session will be logged you will remain anonymous to us. This information tells us which areas of the website are used most and helps us improve the service we offer you.


Cookies are used on this website. Cookies are small pieces of information stored by your browser on your computer’s hard drive. They are used give us information about what customers look at when visiting this website. They do not identify you but provide us with really useful information that helps us improve the website.  By modifying your browser preferences, you have the choice to accept all cookies, to be notified when a cookie is set or to reject all cookies.


This website has security measures in place to protect the loss, misuse and alteration of the information under our control.


We are serious about guarding the security any transactions you make. Our online credit and debit card processing is undertaken by who is compliant with the payment industry’s highest standards for data protection and transaction security.

External links

This website contains links to other sites. We are not responsible for the privacy practices or the content of these sites nor do we endorse any externally linked sites.


While every care has been taken to ensure the accuracy of information on this site Buckinghamshire Council  accepts no responsibility for any errors, omissions, or misleading statements on these pages. In line with this, Buckinghamshire Council is not liable for any action you may take as a result of relying on such information or advice or for any loss or damage suffered by you as a result of taking this action. If you believe there is information on the website relating to yourself that is inaccurate, please contact the Council and we will then investigate further and where possible correct this information.