Privacy Policy

Version 5.0 – Last updated: 13/10/2025

Lifetime Training is committed to protecting your personal data. This Privacy Policy explains how and why we use your personal data, your rights, and how you remain in control of your information.

We will only process your personal data fairly, lawfully and transparently, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Contact details

If you have any questions about this policy or how we use your personal data, please contact our Data Protection Officer (DPO):

· Email: DataProtectionOfficer@Lifetimetraining.co.uk

· Post: Data Protection Officer, Lifetime Training Group, 291 Paintworks, Arnos Vale, Bristol, BS4 3AW

· Telephone: 0333 0143 669 (Mon–Fri: 9am–5.30pm)

You may also contact the Information Commissioner’s Office (ICO) if you are not satisfied with our response (see section 14).

2. About us

Lifetime Training Group Ltd is a private limited company, Company No. 03263608, registered in the UK. For the purposes of data protection law, we are the Data Controller (ICO Registration No. Z5165342).

3. What information we collect

We collect the following categories of personal data:

• Personal details: name, date of birth, email, address, telephone number, education history.
• Special category data: ethnicity, additional learning needs (only where required by law or to provide support).
• Learner records: progress, attendance, assessment outcomes, qualifications.
• Accident/incident data: where an incident occurs during training or other activity.
• Marketing preferences: opt-in/opt-out choices.

We may also receive data from other organisations (e.g., referral agencies, government departments).

4. Legal bases for processing

We only process your personal data when we have a lawful basis. The main bases we rely on are:

• Contract: to deliver apprenticeship and training agreements with you.
• Legal obligation: to meet regulatory and funding requirements (e.g., Skills England / DWP reporting).
• Consent: for optional marketing communications or processing sensitive data where required.
• Vital interests: to protect your health and safety.
• Legitimate interests: for administrative purposes, service improvement, and security (balanced against your rights).

Where we process special category data (e.g., ethnicity, learning needs), we do so under Article 9(2)(b) UK GDPR (employment, social security and social protection law) or with your explicit consent.

5. How we use your data

We use personal data to:

• Deliver apprenticeship and training services.
• Maintain learner records and track progress.
• Provide additional learning support.
• Manage funding, compliance and reporting obligations.
• Send marketing communications (only if you have opted in).
• Analyse and improve our services.
• Keep our sites and systems secure.

We do not sell your personal data.

6. Automated decision-making and AI

Some assessments may be marked using AI software. If automated decision-making is used:

• A human will review outcomes where appropriate.
• You have the right to request that decisions are reviewed by a person.
• You may also object to automated decision-making.

Please contact the DPO if you wish to exercise these rights.

7. Children and young people

As an education provider, we regularly process the personal data relating to young people who enquire about courses and training opportunities.

8. Sharing your data

We only share your data where necessary to deliver our services, with:

Funding bodies, regulators and government agencies (where legally required).

• Service providers (e.g., IT, cloud hosting, learning platforms).
• External assessors, exam boards, or awarding bodies.
• Marketing service providers (only if you have opted in).

All third-party processors are bound by contracts that require them to keep your information secure and confidential.

We share personal data with the following organisations who provide services to us:

Data Processor	Purpose of Processing	Location of Data
Aptem Ltd	Saas Provider for Learner Management System	Hosted in Microsoft Azure Data Centres
Babble Cloud Limited	Cloud telephony contact system	Hosted in the UK
Backupify	Back-up solution for Lifetime’s Microsoft 365 data	Data is hosted in the UK.
Booking Live Software Ltd	Booking Platforms for virtual classrooms	Amazon Web Services (AWS), hosted in London
Century Tech	AI-driven platform which provides initial assessments and self-directed learning functions	Data processed within the UK, EEA and the USA
Click Dimensions	Contact system for integrations with Dynamics 365 CRM	Hosted in Microsoft Azure, Amsterdam (EU)
Commify UK Ltd (Text Marketer)	Processes telephone numbers and message content for communicating with learners	Hosted in UK data centres
Contact Systems	Provider of cloud telephony systems to Lifetime Training	Hosted in UK data centres.
Delaware	Provider of advanced ICT solutions and services to Lifetime with access to Lifetime's personal data.	Data is hosted in Microsoft CRM in UK based data centres.
Forsta	Surveying of learners on programme for quality purposes	Data is processed mainly in the UK and EU but may also be processed in Bosnia, Australia and Singapore.
J2 Research	Telephone survey platfom, used for assessing learners for quality purposes	Hosted in the UK
Lockhart Hawkins	To conduct compliance reviews in relation to ESFA funding rules and provide quality improvement for Lifetime	Hosted in the UK
Logic Melon	Job applications platforms for apprenticeships	Microsoft Azure, London
Mercury XRM Limited	Job applications platform integrations with Dynamics 365 CRM	Hosted in the EEA
Microsoft	Data analysis, business intelligence and data forecasting; cloud computing environment.	UK hosted Microsoft Azure.
Microsoft	Microsoft 365, including Office and Copilot.	Microsoft Data Centres in London, Durham and Cardiff; data may be replicated to Data Centres in the EU (e.g. Amsterdam) for resilience.
SCC Ltd	Managed service provider and UK Hosted Data Centre for Lifetime Training	Hosted in Birmingham, UK. Some processing takes place in Romania (EU).
Thinkology	Third-party IT website support for Lifetime Training	Does not routinely process personal data but will have access to personal data in the course of its role supporting Lifetime Training.
Twilio / SendGrid	Cloud-based email distribution server for learner contact	Hosted in the USA in Amazon Web Services
ZenDesk	Helpdesk SaaS service for learner support	Hosted in Amazon Web Services in Dublin, Ireland

 

Data Controller	Purpose of organisation	Location of Data
City & Guilds	Training organisation	Please see City & Guild's Privacy Policy for details.
Innovate Awarding	End-point awarding organisation and part of the Lifetime Group	Please see Innovate's Privacy Policy.

International transfers: Some providers store data outside the UK/EEA (e.g., USA). Where this occurs, we use the UK International Data Transfer Agreement (IDTA) or other approved safeguards to protect your data.

9. How long we keep your data

We keep personal data only for as long as necessary. Typical retention periods are:

• Learner records: 6 years after completion of training (to comply with funding regulations).
• Accident/incident records: 3 years (or longer if involving a minor).
• Marketing contact details: Until you withdraw consent*.

After retention periods, data is securely deleted or anonymised.

*If you withdraw consent for marketing, we will retain minimal details on file for the purposes of ensuring that unwanted marketing communications are not sent to you and for associated reporting purposes. This information will be retained for 6 years.

10. Marketing

We will only send you marketing communications if you have opted in.

You can change your preferences or withdraw consent at any time by contacting us or using the preference management option in our communications.

You can unsubscribe from marketing communications by emailing hello@lifetimetraining.co.uk.

11. Cookies and online tracking

We use cookies and similar technologies to:

• Ensure our website functions properly.
• Analyse usage (Google Analytics).
• Provide personalised advertising (Google Ads, LinkedIn).

You can manage your cookie preferences on our Privacy Preferences page.

12. Security

We use appropriate technical and organisational measures to keep your data safe, including:

• Encryption, access controls, and secure hosting.
• Regular staff training on data protection.
• Physical security measures in our centres.

13. Your rights

You have the following rights under UK GDPR:

• Access – to request a copy of the data we hold about you.
• Rectification – to correct inaccurate or incomplete data.
• Erasure – to request deletion of your data (subject to legal obligations).
• Restriction – to limit how we use your data.
• Data portability – to receive your data in a portable format.
• Objection – to object to processing based on legitimate interests or marketing.
• Rights in relation to automated decision-making – to request human review.

To exercise any of these rights, please contact our DPO.

14. Complaints

If you are unhappy with how we handle your personal data, please contact our DPO in the first instance.

If you remain dissatisfied, you can complain to the ICO:

Website: www.ico.org.uk

Telephone: 0303 123 1113

Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

15. Changes to this policy

We may update this Privacy Policy from time to time. The most recent version will always be available on our website.