CEC Privacy Notice & Cookies

The Careers & Enterprise Company (“CEC”) is committed to building your confidence and trust by complying with data protection legislation and best practices that protect your privacy and safeguards your personal information. This Privacy Notice explains how we collect, use, store, share and protect your personal information and sets out your rights and choices relating to that information. We are registered with the UK Information Commissioner's Office. Our data protection registration number is ZA128193.

1. Who this notice covers

Visitors to the CEC's websites and online tools including but not limited to those who request information, register an interest in any of our activities or register to use our online tools or services including Career Leaders, Volunteers, Enterprise Advisers, Enterprise Co-ordinators, Cornerstone Employers contacts, Delivery Providers, Partners, Head Teachers, School Leaders, Governors, Community of Practice participants, Independent Training Providers.

2. How does The Careers & Enterprise Company collect your personal data?

a) Directly from you when you;

• Subscribe to our newsletters and email notifications.
• Register to join our Network, Programmes and Activities.
• Register with us on our website via our ‘Register Your Interest’ form e.g. to subscribe to our ‘Give an Hour’ campaign.
• Respond to our surveys or qualitative research.
• Sign up to use our digital tools such as Compass, Tracker and Compass + and Digital Hub.
• Sign up to attend our events, conferences, seminars and participate in the programmes that we offer.
• Information necessary to deliver customer service or technical support.
• When you visit and use our website.

 

b) From other sources;

• Partnerships we have with trusted third parties and stakeholders such as schools, colleges, local enterprise partners, employers or delivery providers.
• Individuals and organisations whom you have confirmed consent with.
• Website and system management tools that help deliver our digital platforms/services.
• Publicly available information.
• Government (DfE), tax or law enforcement agencies.

 

3. What personal data does The Careers & Enterprise Company collect?

The information that we collect may include;

• Personal identifiers such as your name, date of birth, title and contact details including postal address, post-code, email address, telephone number and organisations name.
• Survey or qualitative data that are identifiable (although we do not reveal names of individuals or organisations in published reports unless explicit consent is given).
• Occasionally, as part of the functions described in this policy, we may need to process special category of data. We endeavour to do so only when necessary and we will treat and process such data with great care and in accordance with the applicable data protection laws.

 

4. Why does the Careers and Enterprise Company collect your personal data?

• To enable us to supply services and information to our stakeholders, subscribers, network and digital tool users.
• To enable us to provide appropriate digital tools for our stakeholders and network and provide you with customer and technical support.
• To comply with employment laws and other statutory requirements.
• To keep you informed about our work. You can unsubscribe at any time to our communications by clicking the unsubscribe link at the bottom of emails you receive or by contacting us directly at dpo@careersandenterprise.co.uk
• To administer our website and business.
• To deal with enquiries and complaints made by or about you relating to our website, services, digital tools and programmes.
• To provide you with customer and technical support.
• Manage your participation in events that you have registered for with us or those organized by third parties on our behalf and capture your interests in related services and events.
• To carry out research and evaluation relating to careers and enterprise.

 

5. What does The Careers and Enterprise Company use your personal data for?

We process your personal information for our legitimate business interests- that is, in order to facilitate the management of our business. This includes the following purposes:

• To enhance, modify, personalise or improve our services to the benefit of clients and prospective customers.
• To provide postal and/or email communications which we think will be of interest to you.
• To better understand how individuals, interact with our website. Please see our Cookie Policy for more information.
• To enhance the security of our information systems or identify and prevent fraud.
• To conduct research (to generate national insight on the careers system, measure impact and build evidence on effective practice), statistical analysis and administration, including analysis of trends, carrying out actuarial work, tailoring products and services, risk assessment and analysis of costs in relation to our services. We will always ensure that such data is de-personalised or aggregated and can therefore not be personally identifiable to you.

 

6. The legal basis on which we rely to process your information

• We process third party service providers data and partner data for the purpose of fulfilling a contract.
• We process personal data under data sharing arrangements and agreements with our partners and schools that is necessary for the performance of the task carried out in the public interest.
• We process personal data to enable us to pursue our legitimate interests.
• We process staff data to support our contractual relationship.
• Whenever we process data for these purposes, we will ensure that we always keep your information rights in high regard and take account of these rights.

 

7. What are your information rights and choices?

In the UK by law, you have the following rights with regard to your personal information:

• Access. You have the right to obtain confirmation as to whether your personal information is being processed, and, if it is, request access to that personal information (commonly known as a “data subject access request”). We will need you to prove your identity before we release any personal information to you.
• Correction or deletion. You have the right to ask us to correct or delete any personal information that we hold about you (unless we have the legal right to retain it). You also have the right to ask us to delete your information where you have exercised your right to object to processing (see below).
• Objection. You have the right to object to processing of your information where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground.  You also have the right to object where we are processing your information for direct marketing purposes.
• Restriction. You also have the right to restrict us from processing your personal information. You can ask us to temporarily stop processing information about you, for example if you want us to establish that it is accurate or the reason for processing it.
• Change of preferences. You can change your information processing preferences at any time. For example, if you have given your consent to us to make suggestions and recommendations to you about educational courses, volunteer opportunities, events, etc, but have changed your mind, you can contact us using the details provided below or clicking the relevant link in any communication you receive (where this specifically relates to marketing messages see marketing section below).
• Data portability. In some circumstances, you have the right to ask us to provide a copy of the personal information we hold about you in a machine-readable format. 

If you would like to exercise any of the rights mentioned above, please contact us.

The above rights do not apply to anonymised personal information.

What we may need from you

We may need to request specific information from you to confirm your identity and verify your right to access the information (or to exercise any of your other rights).  This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

Right to withdraw consent

Where you have consented to the collection, use or transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.  To withdraw your consent, please contact us. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

 

8. How long does the company retain your personal data?

We will only retain your personal information for as long as is necessary to fulfil the purposes we collected it for, including for the execution of a contract or for other essential purposes such as, complying with our legal obligations, resolving disputes, investigating disciplinary matters and enforcing our agreements.

To decide how long we keep your information, we consider the type of information you give to us or which we collect, and how sensitive that information is.  We also consider the risk of harm that might occur if the information went missing or if somebody used it in a way they were not supposed to, for example, and the reasons why we are using your information in the first place.

In some circumstances, we may anonymise your information, which means that it is no longer connected to, or about, you.  If we do this, we may use this information without any further permission from you.  Even if you ask us to delete your information, we may still need to keep it in a form that does not identify you.

 

9. Sharing your personal information

Where necessary and in limited circumstances, we may share your personal information with third parties to the extent permitted by or required by law including to a)  meet our legal obligations; b)  provide reasonable voluntary cooperation with a relevant police or regulatory investigation or any ongoing or prospective legal proceedings;  c) in order to establish, exercise or defend our legal rights, including providing information to others for the purposes of fraud prevention and reducing credit risk.

In addition, we make use of expert third party service providers to help us to provide relevant services, such as expert IT providers helping us with our IT systems, or to undertake surveys, or professional auditors, evaluators, training providers, contractors and analytic providers. These third-party service providers may process your personal information in order to provide the agreed service to us, or to you on our behalf. We have contractual agreements in place with third party providers and we ensure that they are compliant with data protection laws.

Your personal information may be held by us in one or more customer relationship management (CRM) database(s), consolidating details of your dealings with us across various services, to ensure we have clear and accurate records about your use of our services/programmes/activities, to better understand your requirements and how we might provide other services/programmes to you.

We may share personal information within our advisory boards, panels and stakeholders, as needed for reasonable management, analysis, planning and decision making, including in relation to taking decisions regarding our service/programme offering.

10. International transfers

No special category data is transferred to third countries outside the UK/EEA.

Compass, Tracker, Compass+ and EANR data is hosted on servers within the EEA/UK and the personal information hosted on them is never transferred to third parties or third countries outside the UK/EEA.

In some cases, on other systems, personal data may be transferred to countries outside the UK either by us or by our third-party service providers acting on our behalf. The Careers & Enterprise Company always put

• the necessary organisational and technical measures in place to ensure those transfers are protected.
• Safeguards (GDPR Article 46) in place to preserve the security, privacy, lawful processing and your rights when personal information is transferred to third countries outside of the UK/EEA

 

11. Security

The Careers & Enterprise Company takes reasonable technical and organisational measures to protect the security of your personal information, in accordance with our legal obligations. We check your identity when you get in touch with us, and we follow our security procedures and apply suitable technical measures, such as encryption, to protect your information.

 

12. Your marketing and contact preferences

The Careers & Enterprise Company is committed to respecting your preference to receive communications from us. We may contact you with information about our products, programmes, events, courses or other resources that may be of interest to you. You can change or update your communication preference by clicking the ‘Unsubscribe’ link included in every email communication we send to you or by contacting us on the contact details provided in this Privacy Notice.

• Email & Text Marketing- The Careers & Enterprise Company will ask for your permission to contact you by email or text for marketing purposes.
• Telephone Marketing- We may call to update you on our services and programmes. If you have registered your number with the Telephone Preference Service (TPS) or Corporate Telephone Service Preference (CTPS), we will only make marketing calls if you have expressly granted us permission to do so.

If you tell us that you no longer wish to receive our direct marketing communications, we will take steps to respect your modified direct marketing preferences and will keep a record of your request so as to avoid contacting you again in the future with direct marketing content.

 

13. Complaints or queries

At The Careers & Enterprise Company we do our best to meet the highest standards when handling personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection, use or storage of personal information is unfair, misleading or inappropriate. We also welcome any suggestions for improving our procedures. Any correspondence should be sent to the address provided below. If you are not satisfied with our response, you may report to the Information Commissioner’s Office (ICO). Details on how to do so can be found on the ICO’s website.

 

14. Cookies

A cookie is a text file containing small amounts of information which are downloaded to your computer or mobile device when you visit a website. Cookies do lots of different jobs, such as letting you navigate between pages efficiently, remembering your preferences, and providing you with content that is relevant to you. Our website uses cookies. The Careers & Enterprise Company uses cookies to estimate our audience size and usage pattern, to store information about your preferences, to customise our website according to your individual interests, to speed up your searches and recognise you when you return to our website. You can control the use of cookies at your individual browser level. View our Cookie Policy.

 

15. What is not covered by our privacy policy?

You can link to other organisations’ websites, apps, products, services and social media from our websites. This privacy policy doesn’t apply to how those other organisations use your personal information.
You should review their privacy policies before giving them your personal information.

 

16. How to contact us

If you have any questions about this Privacy Policy, you can contact us:
Email: dpo@careersandenterprise.co.uk  
Address: The Careers and Enterprise Company Limited. 1st Floor, Work.Life, 120 Aldersgate St, Barbican, London EC1A 4JQ

 

17. Changes to this Privacy Notice

We keep our privacy notice under regular review in order to reflect the changes in law and/or our privacy practices. Do check our website from time to time. In the occasion of significant changes in the way we process your personal data, we will provide a prominent notice on our website or send you a notification. This Privacy Notice was last updated in May 2022.