PeoplePlus Group Limited

Privacy Notice for our Customers and Learners

PeoplePlus takes the security of your personal data very seriously. This privacy statement sets out why we need your information, what we need and how we will use it.

Why do we need data about you?

PeoplePlus, and the supply chain partners we work with to deliver our services, need to collect, and use information about you (data) to deliver our range of services including employability support, skills training, independent living support and Carers Hub Services.

PeoplePlus works as a data processor for several public bodies including the Department for Work and Pensions (DWP), The Education and Skills Funding Agency (ESFA), devolved administrations in Scotland, Wales and Northern Ireland and local authorities. As the “Data Controller” these bodies are able to lawfully process data in line with the following lawful basis and PeoplePlus as a “Data Processor” for these bodies can lawfully process your data on the same basis under the contracts we have with these bodies.

Learning Plus, part of PeoplePlus, works as a data processor for your organisation. As the “Data Controller” your organisation are able to lawfully process data in line with the following lawful basis and PeoplePlus as a “Data Processor” for your organisation are able to lawfully process your data on the same basis under the contracts we have with these bodies

Lawful Basis for Processing

We can gather, use and share (process) your data as a “public task in the public interest” under relevant laws, including the General Data Protection Regulation (article 6(1)(e)). We can process your sensitive personal (special category) data by ensuring that this processing is proportionate and is necessary for statistical research purposes under the General Data Protection Regulation (article 9 Sections (2)(g) and (j)).

For Learning Plus we are able to gather, use and share (process) your data as a “legitimate interest for their organisation” under relevant laws, including the General Data Protection Regulation (article 6(1)(e)). We are able to process your data by ensuring that this processing is proportionate, and is necessary for statistical research purposes under the General Data Protection Regulation (article 9 Sections (2)(g) and (j))

For the purposes of the General Data Protection Regulation, the various supply chain partners that PeoplePlus use to support delivery of the contracts we have with the various “Data Controllers” are also able to process this information in line with the contractual requirements we have with them.

For Sales and Marketing purposes we may contact you on the basis set out under GDPR Article 6 (f) that processing is necessary for the purpose of the legitimate interest we are pursuing to inform you of the products and services we offer. In all cases where we use this lawful basis you will have the right to immediately unsubscribe from further contact if you are not interested in the product or service offered.

Where processing your data is not fully covered by the above lawful basis, we will request your specific consent to process your data relevant to the particular service we are providing.

How will your data be used?

PeoplePlus and our supply chain partners will use your data to:

Help us agree with you the appropriate type of service we can provide to support you in your training or support you into employment and independent living or other service we provide to you.
Monitor and report on our performance in supporting you, including producing statistics and equalities monitoring reports.
Enable supply chain partners to claim payment from PeoplePlus as per contract.
Better understand how our services work, what difference they make to the people involved and how to improve future services for people like yourself.

What information about you is needed?

To deliver, monitor and evaluate our services, we will ask you for:

Your contact details.
Other personal data (for example, DOB, your age, gender, National Insurance Number)
Sensitive / personal data (for example, about your health, religion, ethnicity)

We will also ask you about your relevant background / historical information that supports the service we offer to you and will hold information on the support you receive as a participant in the programmes we offer through these public bodies.

How will we store your data?

Your data will not be transferred to, stored at, or processed in a destination outside the European Economic Area (EEA). We will store your information on databases held in locations that have been tested for electronic and physical security and access will be permitted only to those with a need to know. We will not store your personal information for longer than is necessary to deliver and evaluate the services we offer.

Data Security

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.

To deliver our services, PeoplePlus and our supply chain partners may need to share the minimum necessary of your personal and sensitive details with:

potential employers.
specialist training and other organisations necessary for your full participation in the services we offer, where these organisations are covered by a contract held with PeoplePlus and therefore incorporated into our contract(s) held with the data controller.
third party contractors acting on behalf of PeoplePlus to provide support services necessary for the delivery of our service to you; and
other parties, as is necessary for the purpose of, or in connection with, any legal proceedings (including prospective legal proceedings).

To evaluate our services, we may also contact you to invite you to take part in the evaluation of our services. The feedback you give will help shape future employability and other services we offer. The information collected will be used for research, evaluation, and statistical purposes only. You do not have to take part in evaluation activities if you do not want to.

We will not share your contact information for any marketing purposes.

Your Responsibilities

You are reminded that it is your responsibility to ensure the security of your own data (always including printed material such as CVs), including when on PeoplePlus or supply chain partner premises.

PeoplePlus cannot accept responsibility for the loss or theft of your personal data if caused by your own negligence.

Your Rights

The right to be informed. The right to be informed encompasses our obligation to provide ‘fair processing information’. This emphasises the need for the Company to be transparent about how your personal data is used.
You have the right to access the personal data we process about you. To access the personal data we process about you, submit a request in writing (by post or email) to the PeoplePlus Data Protection Officer (address below). PeoplePlus will treat this as a Subject Access Request and will respond within one month of receipt of the request. PeoplePlus as the “Data Processor” will need to contact the relevant public body to obtain their authority as “Data Controller” to release your data but we will provide the “Data Controller” with all the assistance they require to meet your demands for access to your personal data on a timely basis.
You have the right to object to processing that is or is likely to cause substantial damage or distress to you or another. To exercise this right, please write stating what processing you object to and why it is causing or is likely to cause you damage or distress. PeoplePlus will consider the request and respond within 21 days to confirm whether the objection is accepted. PeoplePlus as the “Data Processor” will need to contact the relevant public body to obtain their authority as “Data Controller” to respond to your request but we will provide them with all the assistance they require to respond to your request on a timely basis.
We seek to ensure that personal data processed is accurate and up to date. You have the right to request to rectify, block, erase, delete or destroy inaccurate information. To exercise this right, you can write to PeoplePlus setting out the information and the reasons you wish it to be changed etc. We will consider the request and respond within 21 days to confirm whether the request is accepted. In cases where the inaccurate data is the result of processing by PeoplePlus we will respond to you directly without reference to the public bodies who are our “Data Controllers”. However, in some cases the inaccurate data may relate to information we have received about you from the various public bodies we process data for. In these cases, we will need to confirm details with the public body, but we will work with them to provide you with an appropriate resolution on a timely basis.
You have a right to erasure and deletion, also known as ‘the right to be forgotten’ of all data held about you. The broad principle underpinning this right is to enable you to request the deletion or removal of personal data where there is no compelling reason for its continued processing. We will consider the request and respond within 21 days to confirm whether the request is accepted. PeoplePlus as the “Data Processor” will need to contact the relevant public body to obtain their authority as “Data Controller” to respond to your request but we will provide them with all the assistance they require to respond to your request on a timely basis.
You have the right to be confident that we will handle your personal information responsibly and in line with good practice. If you have a concern about the way, we are handling your information you can write using the details below.

More detailed information on each of the rights can be found here.

Processing as Data Controller

Most of the data processing carried out by PeoplePlus is under contracts with public bodies and we process your data as a “Data Processor” in line with the lawful basis outlined above.

In a minority of cases the lawful basis of processing may be contractual or by consent or by another lawful basis. In these circumstances we will confirm the specific legal basis to you via additional documentation. Where PeoplePlus requests additional personal data from you beyond the data required to act as a Data Processor or in circumstances where PeoplePlus are the Data Controller we will also specifically ask for your consent to process your data. In any circumstances where the lawful basis of processing is your consent you will be able to withdraw your consent at any time.

To exercise these rights, you can write to the PeoplePlus Data Protection Officer:

Postal Address: Data Protection Officer, Edmund House, 12-22 Newhall Street, Birmingham, B3 3AS.

Email Address: [email protected].

Complaints

Please note that PeoplePlus have a Complaints procedure and if you need to complain about the way any request you have made in relation to your personal data has not been handled appropriately you can use our Complaints procedure to help resolve this issue. Please ask for a copy of our complaint's procedure.

If you feel we have been unable, or unwilling, to resolve your information rights concern, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). The ICO are the supervisory authority responsible for data protection in the UK.

For further information, including independent data protection advice and information in relation to your rights, you can contact the Information Commissioner at:

Telephone the ICO helpline (0303 123 1113)
Visit the ICO website
Write to the ICO at the following postal address:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

You can also report a concern here.

Privacy Notice for our Customers and Learners

PP-078 | V01.8 | August 2023