Privacy Policy
Policy Overview
Co-Cal Training LTD is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 to safeguard the personal data of learners, staff, and stakeholders. This policy outlines our responsibilities, data protection principles, and procedures to ensure personal data is processed securely, fairly, and lawfully.
Protecting Personal Data
Commitment: Co-Cal Training takes its responsibilities for protecting personal data seriously and ensures compliance with data protection regulations.
Individual Responsibility: All staff, learners, and stakeholders must handle personal data responsibly and in line with this policy.
Data Protection Officer (DPO): A designated DPO oversees data protection compliance and provides guidance on processing personal data. For concerns, contact the DPO (the Head of Operations).
Data Protection Principles
Co-Cal Training adheres to the following principles for processing personal data:
Lawfulness, Fairness, and Transparency: Process data lawfully, fairly, and transparently.
Purpose Limitation: Collect data for specified, explicit, and legitimate purposes only.
Data Minimisation: Ensure data collected is adequate, relevant, and limited to what is necessary
Accuracy: Keep personal data accurate and up-to-date.
Storage Limitation: Retain data no longer than necessary for processing purposes.
Integrity and Confidentiality: Protect personal data against unauthorised access, loss, or damage.
Accountability: Demonstrate compliance with these principles.
Lawful Basis for Processing Personal Data
We process personal data under one or more of the following lawful bases:
Consent: Explicit consent obtained from the individual.
Contractual Obligation: Necessary for the performance of a contract.
Legal Obligation: Compliance with legal or regulatory requirements.
Legitimate Interests: Pursued by Co-Cal Training or a third party, balanced against individual rights
Sensitive personal data, such as health or diversity information, requires additional conditions for processing, including explicit consent or necessity under legal obligations.
Your Rights
Individuals have the following rights concerning their personal data:
Access: Request access to personal data held by Co-Cal Training.
Rectification: Correct inaccuracies or incomplete data.
Erasure: Request deletion of data under specific circumstances.
Restriction: Restrict processing of data in certain situations.
Objection: Object to data processing based on legitimate interests.
Data Portability: Receive data in a machine-readable format for reuse.
To exercise these rights, submit a written request to the DPO. Verification of identity will be required for processing requests.
Retention of Personal Data
Personal data will be retained only as long as necessary for processing purposes. Upon completion of its purpose, data will be securely deleted or anonymised, in line with our retention schedule.
Data Security
We employ robust security measures to safeguard personal data, including:
Encryption of sensitive information.
Secure storage solutions with restricted access.
Regular audits to ensure compliance with data retention policies.
Training staff to recognize and address data protection risks.
In case of a data breach, individuals must report it immediately to the DPO. Breaches will be addressed in line with our incident management procedure, and affected parties will be notified when required.
Policy Non-Compliance
Review and Updates
This policy is reviewed annually or when legislative changes occur to ensure continued compliance with data protection laws.
By engaging with Co-Cal Training LTD, all staff and learners acknowledge their responsibility to protect personal data in accordance with this policy.
