PRIVACY POLICY
Rebel Training Group Ltd is dedicated to safeguarding the privacy and security of your personal data. This privacy notice explains how we collect, process, and use your personal information during and after your relationship with us, in compliance with data protection laws, including the General Data Protection Regulation (GDPR). It applies to all employees, workers, and contractors. As a "data controller," Rebel Training Group Ltd is responsible for determining how your personal information is handled and used. We are legally required to inform you of the details outlined in this privacy notice.
​
This notice is relevant to current and former Participants, Customers, and School Providers. It does not form part of any employment contract or other service agreements. This notice may be updated at any time, and we will notify you of any changes. It is crucial that you read this notice along with any other privacy notices provided at specific times when we collect or process your personal information, ensuring you understand how and why we use your data.
​
DATA PROTECTION PRINCIPLES
-
We will comply with data protection law. This says that the personal information we hold about you must be:
-
Used lawfully, fairly, and transparently.
-
Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
-
Relevant to the purposes we have told you about and limited only to those purposes.
-
Accurate and kept up to date.
-
Kept only as long as necessary for the purposes we have told you about.
-
Kept securely.
THE KIND OF INFORMATION WE HOLD ABOUT YOU
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). There are "special categories" of more sensitive personal data that require a higher level of protection.
We collect, store, and use the following categories of personal information about you:
-
Personal contact details such as name, title, addresses, telephone numbers, and personal email addresses.
-
Dates of birth, marriage and divorce.
-
Gender.
-
Marital status.
-
Dependent information including on roll school name and year group.
-
Emergency contact.
-
Bank account details and payment history.
-
Customer start date, leaving date.
-
Accident book, first aid records, injury at work and third party accident information.
We will also collect, store and use the following "special categories" of more sensitive personal information:
-
Information about your/ your student’s race or ethnicity, religious beliefs, sexual orientation and political opinions.
-
Information about your/ your student’s learning needs, special educational needs, higher needs, disabilities or health conditions
-
Information about your/ your student’s safeguarding history including requesting a copy of any student Protection or Early Help Plan.
-
Information about your/ your student’s academic progress and other progress as detailed in Lesson Plans and Reports.
WHY IS YOUR PERSONAL INFO COLLECTED?
We collect personal information for one or more of the following reasons:
-
Safeguarding young people and vulnerable adults
-
An ‘in case of an emergency’ situation
-
Payment for tuition
-
Marketing and promotion
-
Educational records for planning and improvement
-
Maintaining our records
-
To keep you informed
The situations in which we will process your personal information are listed below:
-
Having relevant information is required to book a student into an after-school program or in-school/ off-site intervention.
-
Determining the level of participation support and supervision ratio is necessary.
-
Understanding a student’s history to make planning decisions when creating education packages.
-
Understanding a student’s safeguarding history for student protection best practice.
-
Liaising with the student’s school or college.
-
Implementing individual risk assessments.
-
Using availability information for timetabling in-school mindfulness courses.
-
Creating risk assessments and care plans for students with disabilities or health needs
-
Charging the customer or school provider for the services delivered.
-
Business management and planning, including accounting and auditing.
-
General administration of the Service Level Agreement or Terms of Conditions we have entered into with you.
-
Gathering feedback data and making decisions about improvement initiatives
-
Gathering evidence and any other steps relating to possible grievance or disciplinary matters for an employee.
-
Education, training and development requirements.
-
Dealing with legal disputes.
-
Complying with health and safety obligations.
-
To make customers aware of new offers and for other marketing reasons
-
To send booking confirmations and other email campaigns
-
To conduct data analytics studies to review and better understand customer retention and attrition rates.
-
​Equal opportunities monitoring.
-
To process payments, set up and monitor direct debits.
We will collect additional personal information to abide by student protection and safeguarding legislation - this includes recording concerns and passing these on to student and Family Services sometimes without prior consent from the parent/carer.
Additional safeguarding
Please note that safeguarding concerns and reports may not be disclosed if it is felt that doing so may increase the risk of harm to the student.
Cookies
Our website uses ‘operational cookies’ but none of them are connected with personal data collection.
HOW IS YOUR PERSONAL INFO COLLECTED?
We typically collect personal information about Participants, Customers and Commissoners directly from themselves via:
-
General Contact Form (via Wix website)
-
AP Referral Form (via Wix website)
-
Other forms on Wix​
-
An email from the customer/partners
-
A telephone call from the customer
-
Microsoft Forms - surveys and evaluation
-
Call/meeting with schools
-
Review meetings
-
Market analysis
-
Investigation meetings
-
Complaint forms
LAWFUL BASIS
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
(a) Your consent. You can remove your consent at any time. You can do this by contacting our Data Protection Officer Joanne Vertannes at: jo@rebeltraining.co OR DPO@rebeltraining.co
(b) We have a contractual obligation.
(c) We have a legal obligation.
HOW WE STORE YOUR PERSONAL INFO
We have implemented robust security measures to protect your personal data from accidental loss, unauthorized access, misuse, alteration, or disclosure. Access to your personal data is restricted to third parties who have a legitimate business need to know and will only process your information according to our instructions, under strict confidentiality obligations. Your data is securely stored using our Microsoft School Management Software.
WHO WE SHARE YOUR PERSONAL DETAILS WITH
We will only share your personal data with internal third parties i.e. staff and volunteers or external third parties as required by law. We do not pass on either identity or contact data of either participants or staff to any party until each has confirmed that this is acceptable in furtherance of tuition arrangements.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third party service providers i.e. staff to use your personal data for their own purposes and only permit them to process your personal data for the specified purpose of tuition and in accordance with our instructions.
DATA RETENTION
We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including the purpose of any legal or accounting requirements. We keep all contact information for the duration of the student's enrollment with us and three years after. We will then dispose of your information by deleting any stored information.
Safeguarding concerns and historical student protection data will be kept until the student/ young person turns 26 years old (7 years after reaching school leaving age) - at this point, it will be reviewed as to whether the profile should stay open or be deleted.
YOUR DATA PROTECTION RIGHTS
Under data protection law, you have rights including:
-
Your right of access - You have the right to ask us for copies of your personal information.
-
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
-
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
-
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
-
Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
-
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
-
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at jo@rebeltraining.co, if you wish to make a request.