Privacy Notice & Data Handling Policy

1. Purpose

This policy outlines how Paving Paths Recruiters (PPR) collects, processes, stores, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are committed to handling personal data with transparency, integrity, and respect.

2. Scope

This policy applies to:

• Candidates enrolled in training courses
• Website users and subscribers
• Employers and business partners
• Staff, contractors, and trainers

3. Data We Collect

We may collect the following personal information:

• Full name, address, contact number, and email address
• Employment history or educational background (for course enrolment)
• Attendance and assessment records
• Payment information (processed securely via third-party gateways)
• Website usage data via cookies and analytics tools

4. Lawful Basis for Processing

We process personal data on the following lawful grounds:

• Consent: When users opt in to receive marketing or updates
• Contractual necessity: To deliver training services and issue certifications
• Legal obligation: For record-keeping, tax, and compliance
• Legitimate interests: To improve our services and understand user behaviour

5. Use of Data

Personal data is used for:

• Enrolling learners into courses and managing course delivery
• Contacting users regarding bookings, feedback, or certification
• Issuing invoices, receipts, and certification documents
• Marketing communications (if consented)
• Internal reporting, analytics, and service improvement

6. Sharing Your Information

We do not sell or share your data with third parties for marketing. We may share your information with:

• Education and Services Hub (where joint delivery applies)
• Trainers or assessors working on your course
• Accreditation or certification bodies, where required

All third parties are bound by confidentiality and data processing agreements.

7. Data Storage and Retention

• Digital records are stored securely using encrypted platforms and backed up regularly.
• Personal data is retained for up to 6 years for legal and administrative purposes.
• Assessment and attendance records are stored for 2–3 years depending on course type.

8. Your Rights

Under the UK GDPR, you have the right to:

• Access your data
• Request correction or deletion
• Withdraw consent (where applicable)
• Object to processing or request restriction
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact: 📧 data@pavingpathsrecruiters.com

9. Cookies and Website Tracking

We use cookies for analytics and site functionality. Please refer to our Cookie Policy for full details and opt-out options.

10. Data Security

• All data is stored on password-protected and encrypted systems.
• Staff and contractors receive regular data protection and privacy training.
• Any suspected data breach is reported immediately and addressed in line with our Data Breach Policy.

11. Contact Information

If you have questions or requests regarding this policy, please contact:

Data Protection Officer
Paving Paths Recruiters
📧 data@pavingpathsrecruiters.com
🌐 www.pavingpathsrecruiters.co.uk