Data Protection and Privacy Policy

How Span Training & Development Ltd collects, uses and protects your personal information.

About Us

Span Training & Development Ltd is registered in England & Wales under company number 4231156.

Registered office:
Mercury House, 19–21 Chapel Lane, Marlow, Bucks SL7 3HN

We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This policy outlines how we collect, use, store and share your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Data Controller

Span Training & Development Ltd is the data controller for the personal information we collect and process. This means we are responsible for deciding how and why your personal data is used.

If you have any questions about this privacy policy or our data protection practices, please contact our Data Protection Officer at:

enquiries@spantraining.co.uk

Personal Information We Collect

Learner Information

We collect personal information from learners as part of the enrolment and training process. This may include your name, date of birth, contact details, national insurance number, educational history, employment details, and any relevant additional learning needs. We require this information to register you with awarding bodies, submit data to the Education and Skills Funding Agency (ESFA), and deliver and assess your training programme.

Employer Information

We collect information from employers to set up and manage apprenticeship agreements. This may include the business name, address, contact details, PAYE reference, and details of the apprentice's role. This information is necessary for the administration of apprenticeship funding and to fulfil our contractual obligations to you and the ESFA.

Legal Basis for Processing

Consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. We will seek your explicit consent before processing any data for purposes beyond those strictly necessary for the delivery of your training programme, such as marketing communications or sharing your testimonial.

Contractual Necessity

We process personal data where it is necessary for the performance of a contract with you, such as an apprenticeship agreement. Without this information, we would not be able to deliver your training programme, register you with awarding bodies, or claim funding from the ESFA on your behalf.

Legitimate Interest

In some cases, we process personal data on the basis of our legitimate interests, provided that those interests are not overridden by your rights and freedoms. This may include analysing learner data to improve our training programmes, maintaining records for quality assurance purposes, and ensuring the security of our systems and data.

Data Sharing

We may share your personal data with the following third parties where it is necessary for the purposes described in this policy:

  • The Education and Skills Funding Agency (ESFA)
  • Awarding bodies (such as VTCT, iTec)
  • Ofsted (for inspection purposes)
  • Your employer (where relevant to your apprenticeship)
  • External auditors and regulatory bodies as required by law

We will never sell your personal data to third parties or share it for marketing purposes without your explicit consent.

Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law or regulation. Learner records are retained in accordance with ESFA funding rules, which typically require records to be kept for a minimum of six years after the end of the funding year.

When personal data is no longer required, it is securely deleted or anonymised. We review our data retention practices regularly to ensure compliance with current legal and regulatory requirements.

Your Rights Under GDPR

Access and Rectification

You have the right to request a copy of the personal data we hold about you (a subject access request). You also have the right to ask us to correct any inaccurate or incomplete data we hold about you.

Erasure and Restriction

In certain circumstances, you have the right to request the deletion of your personal data or to ask us to restrict the processing of your data. This right is subject to any legal or regulatory obligations that require us to retain the data.

Portability and Objection

You have the right to request that your personal data be transferred to another organisation in a structured, commonly used format. You also have the right to object to the processing of your personal data in certain circumstances.

Contact Our Data Protection Officer

If you have any questions about this privacy policy, wish to exercise any of your rights, or have a concern about how your data is being handled, please contact us.

Data Protection Officer
Span Training & Development Ltd
Mercury House, 19–21 Chapel Lane
Marlow, Bucks SL7 3HN

enquiries@spantraining.co.uk
0345 548 5100

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.