Data Privacy Notice
Data Privacy Notice
1. INTRODUCTION
This statement sets out Adalta Development Ltd (hereafter Adalta) roles and responsibilities as to why and how we process your personal data. It explains the rights you have, including amongst others, the right to access your data, and to object to the way it is processed.
Adalta is committed to protecting your privacy. We process your personal data lawfully, fairly and in accordance with applicable data protection regulations. Other than relevant regulatory/ governing authorities and awarding bodies as stated above, we will not share your personal information with any other third parties.
This privacy statement:
- Applies to our use of all data collected by us or provided by you.
- Applies in relation to your use of the website owned and provided by Adalta.
- Explains why and how we process your personal data, and the rights you have, including the right to access your data, and to object to the way it is processed.
2. DEFINITIONS
Data: all information submitted to Adalta including via the website. This definition incorporates, where applicable, the definitions provided in the Data Protection Act 1998 and the General Data Protection Regulation.
Data Controller: Adalta, are the ‘data controllers’ of the information (‘personal data’) that we collect about you, our ‘data subjects’. We are responsible for how your data is processed, in other words what can be done with personal data, including collection, storage, use, sharing and deletion.
Adalta’s Data Controller’s contact details are:
Adalta Development Ltd
9 Riverside
Waters Meeting Road
Bolton
BL1 8TU
Data subject: any individual person who can be identified, directly or indirectly, via an identifier e.g. a name, an ID number, location data, or via factors specific to the person’s identity.
Data processor: a data processor is a person who processes data on behalf of a data controller.
Personal data is any information that relates to a living, identifiable person such as your name, address, contact details, and other information we collect as part of our working relationship with you.
Cookies – a small text file placed on your computer by the Adalta Website when you visit certain parts of the Website and/or when you use certain features of the Website. Details of the cookies used by our Website are set out in the clause below.
3. PRIVACY STATEMENT
3.1 Why do we collect data?
We collect and use your personal information to support your participation in specified programmes of development, e.g. Apprenticeships, CMI qualifications and Functional Skills. This includes:
- Registering you on learning programmes and/ or regulated qualifications.
- Monitoring and reporting: Tracking your progress and monitoring equality, diversity and inclusion data.
- Compliance: Sharing information with relevant regulatory/ governing authorities and awarding bodies to meet legal and quality requirements.
- Communication: Informing you about our products, services and opportunities relevant to your development.
We will only process personal sensitive information about you, including testimonials and photography / videos if one of the conditions below applies:
- You have given your consent
- For the quality of your development
- If there is a legal obligation
- Or, in certain circumstances, if it is in our legitimate interest to do so.
3.2 How do we collect information?
We will obtain personal information from you when you enquire about our services and/or register with us for a programme of development. We may also receive information about you from regulatory and awarding bodies when registered for an Apprenticeship or regulated qualification.
3.3 What information do we collect?
Adalta collect basic contact information at the point of enquiry. Personal information is also collected during programme registration for CMI qualifications, management Apprenticeships and in-house management programmes. Personal information includes:
- Personal information (i.e., name, contact details, date of birth, gender)
- Educational history, qualifications and skills
- Job history (including information relating to current position)
- Passport, visa or other right to work identity information
- National Insurance number
- Ethnicity and nationality (for monitoring purposes only)
- Health problems, disabilities and/or learning difficulties (for the purpose of monitoring and agreeing/ reviewing reasonable adjustments to support the learner experience)
3.4 Will we disclose the information we collect to outside parties?
Other than relevant regulatory/ governing authorities and awarding bodies as stated above, we will not share your personal information with any other third parties.
3.6 How we keep your data safe and how long we will keep your data for?
Data security is of great importance to Adalta Development Ltd, and to protect your information we have put in place robust technical and organisational measures to safeguard and secure all data collected, including via our website.
- All company data is stored securely within Microsoft 365, which is hosted in UK-based data centres operated by Microsoft and certified to internationally recognised standards including ISO 27001, ISO 27018, and SOC 1 / 2 / 3.
- Access to data is controlled through secure user authentication, role-based permissions, and multi-factor authentication (MFA) to prevent unauthorised access.
- All transmissions over the internet are encrypted using industry-standard TLS (SSL) encryption. Devices used to access company data are encrypted and protected by up-to-date security software and centrally managed patching.
- Additional protection and ongoing security monitoring are provided by 101 Digital Solutions Ltd, our managed IT service provider. They oversee system updates, vulnerability scanning, and threat detection to ensure that our data always remains secure.
- Outside of Adalta, only 101 Digital Solutions Ltd have administrative access to systems for maintenance and support purposes. All data remains stored within the UK.
- In line with DfE guidance, your information and data will be kept for 7 years. After this time, we will delete/ destroy your data and information.
4. YOUR RIGHTS
Under the UK General Data Protection Regulation (UK GDPR) and the Data (Use and Access) Act 2025, you have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you, along with details about how and why we process it. To make a request, please contact us at [email protected].
- Right to Be Informed: You have the right to be informed about the collection and use of your personal data, including the purposes of processing, retention periods, and who it may be shared with.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
- Right to Erasure (“Right to Be Forgotten”): In certain circumstances, such as when data is no longer necessary for the purposes for which it was collected, you may request that we delete your personal data.
- Right to Data Portability: You can request that we provide your personal data in a structured, commonly used, and machine-readable format, and that we transfer it to another data controller where technically feasible.
- Right to Restrict Processing: You may request that we limit the way we use your personal data, for example, while a correction is being made or if you object to processing.
- Right to Object: You have the right to object to the processing of your personal data in certain circumstances, including direct marketing or processing based on legitimate interests.
- Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects.
We are committed to upholding your rights and ensuring transparency in how we handle your data. For more information or to exercise any of these rights, please contact us at the email address above
6. COOKIES
6.1 Our website may place and access certain cookies on your device. Adalta Development Ltd. uses cookies to improve your experience of using our website and to provide and improve our services. All cookies used by our website are used in accordance with the UK Privacy and Electronic Communications Regulations 2003 (as amended) (“PECR”) and the UK General Data Protection Regulation (“UK GDPR”).
6.2 Before non-essential cookies are placed on your device, you will be presented with a cookie banner requesting your consent. By giving your consent, you enable Adalta Development Ltd. to provide a better experience and service. You may refuse consent to non-essential cookies; however, some parts of the site may not function properly.
6.3 The following types of cookies may be used on our website:
Strictly necessary cookies – Required for the operation of our website (e.g., to log into secure areas or use e-billing services).
Analytical/performance cookies – Help us understand how visitors use our website, allowing us to improve its performance and usability.
Targeting cookies – Record your visit to our website, including pages viewed and links followed, to help us deliver more relevant content.
6.4 You can manage your cookie preferences at any time through your browser settings. Most browsers allow you to refuse or delete cookies. For details, please see your browser’s help documentation.
6.5 We recommend ensuring your browser is up to date and reviewing guidance from your browser developer on managing cookies.
6.6 Our website may contain links to external sites. Please note that we are not responsible for the content or privacy practices of those sites, and we encourage you to review their privacy notices.
7. COMPLAINTS
7.1 Anyone is able to make a complaint about the service that they have received in relation to this statement and this is managed under our complaints and feedback policy or whistleblowing policy.
7.2 For more information about these rights, please see the ICO’s website https://ico.org.uk/. If you are dissatisfied with how Adalta has used your personal information you have a right to complain to the Information Commissioner’s Office at [email protected]
8. MONITORING & ACCOUNTABILITY
8.1 Monitoring of reports received will be reviewed by Company Directors to ensure that procedures have been followed, that any learning is shared and that any changes required to Adalta’s notice are made.
9. Review
9.1 We will carry out a fundamental review of this policy every year or sooner subject to legal, regulatory changes or if internal changes require. If we make any changes to our statement, we will make these available on our website.
