Our commitment to your data protection
Our policy is to respect and protect the privacy of anyone who visits this website.
How we will use your data
We have written a policy around the ways we will use the information we collect about you. Find more out about this policy.
The Education and Skills Funding Agency (ESFA) is an executive agency of the Department for Education (DfE).
This privacy notice explains how they use (process) any personal data you give to us, or any that we may collect about you.
This notice is layered. So, if you wish, you can easily select the reason we process your personal information and see what they do with it.
For the purposes of relevant data protection legislation, the DfE is the data controller for personal data processed by the ESFA.
- is accountable for funding for the education and training sector, providing assurance that public funds are properly spent, achieves value for money for the tax payer and delivers the policies and priorities set by the Secretary of State
- regulates academies, further education and sixth-form colleges, and training providers, intervening where there is risk of failure or where there is evidence of mismanagement of public funds
- delivers major projects and operates key services in the education and skills sector, such as the National Careers Service, the National Apprenticeship Service and the Learning Records Service
If you would like:
- more information about how we process your personal data or your data protection rights
- to make a request about your information – for example to request a copy of your information or to ask for your information to be changed
- to contact our Data Protection Officer
You can contact us in the following ways:
- using our secure online contact form
- or in writing to:
Data Protection Officer
Ministerial and Public Communications Division
Department for Education
The kinds of personal data we process about you
The ESFA collects personal data from you and from organisations funded by ESFA to provide learning. We collect information about you and what you are studying.
We collect and process the following information:
- Enrolment and achievements – this is collected from learning providers following their funding terms and conditions. Learning providers include further education colleges and private training companies where you undertake learning.
- Individualised Learner Record (ILR) – information about you and what you are studying is collected by the ILR. See the ILR privacy notice for more details.
- Learning Records Service (LRS) – information about you is used by ESFA to issue you with a Unique Learner Number (ULN), and to create and keep your Personal Learning Record. See the LRS privacy notice for more details.
- National Careers Service – ESFA encourages participation in further education and learning by providing careers information and advice services. See the National Careers Service privacy notice for more details.
- Bursary for Vulnerable Group Scheme – uses the information you give to your educational institution (e.g. your college) to decide if you are eligible for a bursary under the scheme eligibility criteria.
- If you start an apprenticeship – your information is supplied to us by your employer to enable DfE to carry out its functions. We collect information about you and what you are studying. See the Manage Apprenticeship service privacy notice and Apprenticeship website privacy notice for more details.
- Information is collected from and shared by third parties so ESFA can deliver its obligations to safeguard children and young people.
We share your personal data with other parts of ESFA and DfE, and third parties, including other government departments, agencies, local authorities and organisations, where the law allows it or we have a legal duty to do this.
These organisations can include:
- an organisation who is working for ESFA/DfE under contract
- organisations who provide:
- administration services
- careers and other guidance
- statistics and research about education, training, employment and well-being
- organisations that request information to help prevent and detect crime
i) learning is funded by another public authority. This information is shared to help those organisations do their work. These include Department for Work and Pensions managing the European Social Fund, and combined authorities in city regions and the Greater London Authority managing devolved adult education budget funding.
ii) a further education college or other training provider can no longer deliver your training funded by ESFA.
This may be where a training provider has stopped trading. To help you continue learning, ESFA will arrange to securely transfer your information from your last training provider to your next training provider or to ESFA if your learning does not continue straight away. To do this:
- the ESFA and training providers share data to make sure information held about you and your funded learning is accurate.
- ESFA and your training provider may need to share your information with another training provider (e.g. to confirm a claim for funding from ESFA) and with an Awarding Organisation (e.g. to confirm what stage your learning has reached).
iii) ESFA are notified of an issue regarding safeguarding of children and young people.
Other people and organisations may also share personal data with ESFA, for example, when they make a complaint or raise a concern with us. This can include information shared in accordance with the statutory guidance ‘Working together to safeguard children’. This information will be used to investigate complaints and to ensure trusts and academies comply with the regulations (Education (Independent School Standards Regulations 2014)) and their Funding Agreement.
Your personal information is used by the DfE to exercise its functions and to meet its statutory responsibilities, including under the Apprenticeships, Skills, Children and Learning Act 2009 and to create and maintain a unique learner number (ULN) and a personal learning record (PLR). Your information will be securely destroyed after it is no longer required for these purposes.
How long we will keep your personal data
We will only keep your personal data for as long as we need it. ESFA has a disposal schedule for personal data based on the needs of the agency and the law. We may need to keep some of your personal data for 66 years for research and producing statistics.
We will take necessary steps to keep your information safe. It will then be securely destroyed when it is no longer needed.
If you want to know how long we keep your information, please write to ESFA Departmental Records Officer using our secure online contact form.
Further information about use of and access to your personal data, details of organisations with whom we regularly share data, information about how long we retain your data, and how to change your consent to being contacted, please visit: ESFA Privacy Notice
At no time will your personal information be passed to other organisations for marketing or sales purposes.
Personal information collected via online forms
Personal information will only be used for the purpose indicated and will be held securely. It will not be used for any other purpose without your permission and will not be kept for longer than necessary. If you are concerned about providing your personal information online please contact us and we will arrange alternative means for you to provide this information. If you would like to request to have your data removed from our database, please email firstname.lastname@example.org or call 01296 382403.
We collect IP addresses only for the purposes of system administration and to audit the use of our site. We do not link IP addresses to anything personally identifiable, which means that while your user session will be logged you will remain anonymous to us. This information tells us which areas of the website are used most and helps us improve the service we offer you.
Cookies are used on this website. Cookies are small pieces of information stored by your browser on your computer’s hard drive. They are used give us information about what customers look at when visiting this website. They do not identify you but provide us with really useful information that helps us improve the website. By modifying your browser preferences, you have the choice to accept all cookies, to be notified when a cookie is set or to reject all cookies.
This website has security measures in place to protect the loss, misuse and alteration of the information under our control.
We are serious about guarding the security any transactions you make. Our online credit and debit card processing is undertaken by Netbanx.com who is compliant with the payment industry’s highest standards for data protection and transaction security.
This website contains links to other sites. We are not responsible for the privacy practices or the content of these sites nor do we endorse any externally linked sites.
While every care has been taken to ensure the accuracy of information on this site Buckinghamshire Council accepts no responsibility for any errors, omissions, or misleading statements on these pages. In line with this, Buckinghamshire Council is not liable for any action you may take as a result of relying on such information or advice or for any loss or damage suffered by you as a result of taking this action. If you believe there is information on the website relating to yourself that is inaccurate, please contact the Council and we will then investigate further and where possible correct this information.