Data Protection & GDPR Policy

Skills Funding Group Ltd

Last updated: March 2026

Skills Funding Group Ltd is committed to protecting personal data and ensuring transparency in how information is collected, processed and stored.

This policy explains how we process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

The Data Controller responsible for personal data is:

Skills Funding Group Ltd
Website: https://www.skillsfundinggroup.com
Email: info@skillsfundinggroup.com

Purpose of Data Processing

Skills Funding Group processes personal and business data for the purpose of:

  • Responding to enquiries
  • Connecting employers with training providers
  • Assessing eligibility for funded training programmes
  • Supporting apprenticeship and professional development programmes
  • Communicating with employers, professionals and prospective learners
  • Providing information about government-funded training opportunities
  • Marketing relevant services where appropriate

 

Types of Data We Process

The types of personal data we may process include:

  • Name
  • Job title
  • Company name
  • Business email address
  • Telephone number
  • Employment sector
  • Training interests
  • Communication preferences

 

We generally process business-related contact data rather than sensitive personal data.

Sources of Personal Data

We may collect personal data from the following sources:

  • Information submitted via our website
  • Direct contact by email, phone or messaging platforms
  • Employer or learner nominations
  • Professional networking platforms
  • Publicly available business information
  • Trusted data suppliers that provide business contact information

 

Where data is obtained from third-party providers, we take reasonable steps to ensure the supplier complies with data protection legislation.

Marketing Communications

Skills Funding Group may contact employers, professionals and prospective learners using a range of communication channels, including:

  • Email
  • Telephone
  • SMS
  • WhatsApp
  • LinkedIn
  • Facebook
  • Instagram
  • TikTok
  • Snapchat

 

These communications are used to provide information about training opportunities, apprenticeships, funding eligibility and workforce development programmes.

Where appropriate, marketing communications are sent under the lawful basis of Legitimate Interest, particularly where communications relate to business services that may reasonably benefit the recipient’s organisation.

Recipients always have the right to opt out of communications at any time.

Lawful Basis for Processing

We rely on the following lawful bases under UK GDPR:

Legitimate Interests
To contact businesses and professionals about training opportunities that may be relevant to their organisation.

Consent
Where individuals have opted in to receive marketing communications.

Contractual Necessity
Where data is required to support enrolment, nominations or programme delivery.

Legal Obligation
Where information is required for funding compliance or regulatory purposes.

Data Sharing

Personal data may be shared with trusted third parties where necessary, including:

  • Training providers delivering programmes
  • Technology and CRM providers
  • Marketing and communication platforms
  • Government or funding bodies
  • Professional advisers

 

We ensure appropriate safeguards are in place when sharing data.

Data Security

Skills Funding Group takes appropriate technical and organisational measures to protect personal data from unauthorised access, misuse or disclosure.

Security measures may include:

  • Secure CRM systems
  • Controlled user access
  • Encrypted communication platforms
  • Secure data storage practices

Data Retention

We retain personal data only for as long as necessary for the purposes it was collected.

Typical retention periods include:

  • Business contact records: up to 3 years
  • Employer engagement records: up to 7 years

Learner and funding records: in accordance with funding body requirements

Individual Rights

Under UK GDPR, individuals have the right to:

  • Access their personal data
  • Request correction of inaccurate information
  • Request erasure of personal data
  • Restrict or object to processing
  • Withdraw consent where applicable
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

 

ICO Website:
https://ico.org.uk

Changes to This Policy

We may update this policy from time to time to reflect changes in legal requirements or business operations.

Updates will be published on this page.

Let’s get the conversation started!