Last updated: 15 January 2024
Privacy Policy
London Vesta College privacy policy - how we collect, use, and protect your personal information.
Privacy Policy
Last updated: 15 January 2024
1. Introduction
London Vesta College ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
2. Information We Collect
Personal Information
We may collect personal information that you provide to us, including but not limited to:
- Name and contact details (email, phone number, address)
- Date of birth
- Educational background and qualifications
- Employment history
- National Insurance number (for apprenticeships)
- Equal opportunities monitoring data (optional)
Automatically Collected Information
When you visit our website, we automatically collect certain information about your device, including:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent
- Referring website
3. How We Use Your Information
We use the information we collect to:
- Process your applications for our programmes
- Communicate with you about your application or enrolment
- Provide educational services and support
- Send marketing communications (with your consent)
- Improve our website and services
- Comply with legal obligations
- Safeguarding and prevent fraud
4. Legal Basis for Processing
We process your personal data based on:
- Consent: For marketing communications and optional data
- Contract: To provide educational services
- Legal obligation: For regulatory compliance
- Legitimate interests: For business operations and improvements
5. Data Sharing
We may share your information with:
- Government bodies (e.g., Education and Skills Funding Agency)
- Awarding organisations for qualifications
- Employer partners (for apprenticeships and work placements)
- Service providers (e.g., email platforms, CRM systems)
- Professional advisors when required
We do not sell your personal information to third parties.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal information, including:
- Encryption of sensitive data
- Regular security assessments
- Access controls and authentication
- Staff training on data protection
7. Data Retention
We retain your personal information for:
- Active learners: Duration of programme plus 6 years
- Applicants (not enrolled): 2 years
- Marketing contacts: Until consent withdrawn
- Website analytics: 26 months
8. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data (in certain circumstances)
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent
To exercise these rights, contact our Data Protection Officer at dpo@vestacollege.co.uk.
9. Cookies
Our website uses cookies to enhance your experience. For detailed information, please see our Cookie Policy.
10. Children's Privacy
Our services are not directed to individuals under 16 without parental consent. If you're under 16, please ensure you have permission from a parent or guardian before providing any personal information.
11. International Transfers
We store and process your data in the UK. If we transfer data outside the UK, we ensure appropriate safeguards are in place.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Data Protection Officer
London Vesta College
123 Education Street
London, EC1A 1AA
Email: dpo@vestacollege.co.uk
Phone: 0207 377 0731
14. Complaints
If you're not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.