E-commerce Privacy Policy

Data protection

Data Protection Act 2018

North Hertfordshire College collects personal data and information about all our staff and learners. We do this in order to fulfil our statutory powers to provide education and training services to you, to ensure the safety and welfare of our students and staff, to carry out our employment obligations, or to meet statutory and regulatory reporting requirements.

Personal data includes obvious things such as your name, age, gender, address and other contact details, and information about your previous education and learning, but it also covers information such as CCTV images or biometric data.

Some of your personal data is defined as ‘special category’ or ‘sensitive’. This covers data about your health, race and ethnicity, politics, sexuality, trade union membership or religion. This information is kept more securely and is only available if people need to know about it – for example, to protect your health and well-being.

In general, we do not need your consent to process your personal data, as we cannot fulfil our statutory powers or meet our statutory obligations without doing so.

Where consent is needed, for example, in relation to the processing of some photographic images, any consent you give in section 13 below may be withdrawn at any time by contacting the data team, enrol@nhc.ac.uk.

How we use your personal information

Education and Skills Funding Agency

This privacy notice is issued by the Education and Skills Funding Agency (ESFA) on behalf of the Secretary of State for the Department of Education (DfE) to inform learners about the Individualised Learner Record (ILR) and how their personal information is used in the ILR. Your personal information is used by the DfE to exercise our functions under article 6(1)(e) of the UK GDPR and to meet our statutory responsibilities, including under the Apprenticeships, Skills, Children and Learning Act 2009.

The ILR collects data about learners and learning undertaken. Publicly funded colleges, training organisations, local authorities, and employers (FE providers) must collect and return the data to the ESFA each year under the terms of a funding agreement, contract or grant agreement. It helps ensure that public money distributed through the ESFA is being spent in line with government targets. It is also used for education, training, employment, and well being purposes, including research. We retain ILR learner data for 3 years for operational purposes and 66 years for research purposes. For more information about the ILR and the data collected, please see the ILR specification at https://www.gov.uk/government/collections/individualised-learner-record-ilr

ILR data is shared with third parties where it complies with DfE data sharing procedures and where the law allows it. The DfE and the English European Social Fund (ESF) Managing Authority (or agents acting on their behalf) may contact learners to carry out research and evaluation to inform the effectiveness of training. In these cases, it is part of our statutory duties and we do not need your consent.

For more information about how your personal data is used and your individual rights, please see the DfE Personal Information Charter (https://www.gov.uk/government/organisations/department-for-education/about/personal-information-charter) and the ESFA Privacy Notice (https://www.gov.uk/government/publications/esfa-privacy-notice)

If you would like to get in touch with us or request a copy of the personal information DfE holds about you, you can contact the DfE in the following ways:

If you are unhappy with how we have used your personal data, you can complain to the Information Commissioner’s Office (ICO) at – Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. You can also call their helpline on 0303 123 1113 or visit https://www.ico.org.uk


I agree to North Hertfordshire College collecting, recording and processing my personal data as contained in this form, or other data or images which North Hertfordshire College may obtain from me or other relevant agencies whilst I am a learner. I agree that the College will process such data only for purposes connected to my studies or my health and safety while on the premises or for other statutory purposes.

The information to be recorded and processed (at the date of this agreement) has been completed by me and I confirm that it is correct. I also note that you may need to process sensitive personal data on me in respect of any special needs I may have, to enable you to deliver the agreed course properly and to have proper regard for my health, safety and well-being whilst I am a learner with you. This will enable you to fulfil your obligations to me under this learner agreement and as required by law, and I consent to such use.

Further information about use of and access to your personal data, and details of organisations with whom we regularly share data are available at: www.gov.uk/government/publications/esfa-privacy-notice.

For further information relating to our funding partners, data protection and fair processing policies, please visit our website http://www.nhc.ac.uk/engage/how-we-use-your-personal-data/

Please be aware that this provision has either been directly or indirectly part funded by the European Social Fund – helping develop employment by promoting employability, business spirit and equal opportunities and investing in human resources.