Privacy Policy | BEST Remote Work Training Preston

Privacy Policy Introduction

RemoteAbility CIC ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data in compliance with UK GDPR and the Data Protection Act 2018.

Data Controller: RemoteAbility CIC
Contact: andrew@remoteability.org

2. Information We Collect

Personal Information

When you apply to our programme, contact us, or use our services, we may collect:

• Name, email address, phone number, postal address
• Age range and postcode (UK participants only)
• Employment status and work history
• Information about your disability or health condition (voluntary)
• Reasonable adjustments you may need
• Motivation, goals, and skills information
• Referral source

Automatically Collected Information

• Browser type and version
• Operating system
• Pages visited and time spent on our site
• Referring website addresses
• IP address (anonymized for analytics)

3. How We Use Your Information

We use your personal information to:

• Process your application to our programme
• Communicate with you about our services
• Provide reasonable adjustments and support
• Assess eligibility for Access to Work funding
• Deliver training and mentoring services
• Monitor programme effectiveness and outcomes
• Comply with legal obligations
• Improve our website and services

4. Legal Basis for Processing

We process your data under the following legal bases:

• Consent: When you voluntarily provide information
• Contract: To fulfill our services to you
• Legal Obligation: To comply with employment law, safeguarding, and funding requirements
• Legitimate Interest: To improve our services and support participants

Special Category Data

Information about your health or disability is considered "special category data" under UK GDPR. We only process this data with your explicit consent and when necessary to:

• Provide reasonable adjustments
• Support Access to Work applications
• Ensure safeguarding and wellbeing
• Meet equality monitoring obligations

5. How We Share Your Information

We may share your information with:

• Access to Work (DWP): To support funding applications (with consent)
• Partner Organizations: Jobcentres, local councils, charities (with consent)
• Employers: When placing you in employment opportunities (with consent)
• Service Providers: Netlify (forms), analytics services (anonymized data)
• Legal Authorities: If required by law or to protect safety

We never sell your personal data to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encrypted data transmission (HTTPS/SSL)
• Secure form processing through Netlify
• Access controls and authentication
• Regular security reviews
• Staff training on data protection

7. Data Retention

We retain your data for as long as necessary to fulfill the purposes outlined in this policy:

• Active participants: Duration of programme plus 6 years (legal requirement)
• Unsuccessful applications: 12 months
• General enquiries: 24 months
• Financial records: 6 years (HMRC requirement)

8. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data (subject to legal obligations)
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, contact us at andrew@remoteability.org.

9. Cookies

We use cookies to enhance your experience. See our Cookie Policy for details. You can manage cookie preferences at any time.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. Please review their privacy policies separately.

11. Children's Privacy

Our services are intended for individuals aged 16 and over. We do not knowingly collect data from children under 16 without parental consent.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or a notice on our website. The "Last updated" date at the top indicates when changes were made.

13. Contact Us

For questions about this Privacy Policy or to exercise your rights:

• Email: andrew@remoteability.org
• Safeguarding: andrew@remoteability.org

14. Complaints

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113