Privacy Notice

This Privacy Notice explains how t2 group collects, uses, stores, and protects your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

t2 group is a data controller responsible for deciding how your personal data is used.

This privacy notice describes why and how we collect and use personal data and provides information about your rights. It applies to personal data provided to us, both by individuals themselves or by others. We may use personal data provided to us for any of the purposes described in this privacy notice or as otherwise stated at the point of collection.

What personal data we collect

We collect and process personal data necessary for providing our services, including:

Identity Data – Name, date of birth, national insurance number
Contact Details – Address, phone number, email
Employment Data – Job role, employer details, payroll information
Apprenticeship & Training Data – Course details, qualifications, assessments
Technical Data – IP addresses, cookies, and website usage

When signing an apprenticeship agreement with t2 group, you will be provided with a privacy notice at enrolment which summarises this document containing the reasons and basis for the data we capture and our obligations to retain it for the period specified by the relevant funding contract. If you enrolled before 25th May 2018, the privacy notice that you signed will be held within your enrolment paperwork.

We source personal data from a variety of places such as public sources, publicly available websites, social media, directly from businesses, third party suppliers such as Seed Data Solutions. For example, if you have a profile online, we may combine that type of information with the information you provide to us directly.

How we use your data

We process personal data for the following lawful purposes:

Contractual obligations – Managing apprenticeships and employment agreements
Legal obligations – Compliance with government, funding, and regulatory requirements
Legitimate interests – Internal analysis and improvement of services
Consent-based activities – Marketing (only where explicit consent is given)

Data sharing

We may share your data with third parties:

Government agencies (e.g., ESFA, Welsh Government, HMRC)
Awarding bodies (e.g., City & Guilds, Pearson, ILM, OCR)
Regulatory authorities (e.g., Ofsted, ICO)
Third-party service providers (for IT, compliance, payroll)

We will not share your information for marketing purposes. Access to your personal data is only provided to our staff when it is being processed. We do not sell personal data.

How long we keep your data

We retain data for no longer than is necessary to fulfil its contractual and regulatory obligations in line with our Data Retention Policy. We retain data based on legal and regulatory requirements:

Apprenticeship records: As required by funding bodies
Employee records: Up to 6 years after termination
Financial records: 6 years (per HMRC requirements)
Marketing data: Until you opt out

Your rights

Under UK GDPR, you have the right to:

Access – You have a right of access to your own personal data held by t2 group. A request to see the personal data held by t2 group can be made through a Subject Access Request by emailing or writing to us using the contact details provided below
Rectification – You have the right to have inaccurate personal data held by t2 group rectified or completed if it is incomplete. This can be done by emailing or writing to us using the contact details provided below
Erasure – Once personal data collected by t2 group is no longer necessary for the purpose for which it was collected and processed, you may have the right to have the data erased (subject to legal exceptions). t2 group manages the retention period of data held through its retention schedule
Restriction – In certain circumstances, you have the right to restrict the processing of your personal data. This is likely to arise when there is an issue concerning the accuracy or the legitimate grounds for processing of the personal data
Objection – Object to processing for marketing purposes. t2 group will stop processing the personal data unless there are compelling legitimate grounds for the processing, which override your interests, rights and freedoms
Portability – You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format. t2 group will respond to any Subject Access Requests in compliance with this

To exercise these rights, email dataprotection@t2group.co.uk

International data transfers

We do not store or transfer your data outside the UK or European Economic Area (EEA).

Automated decisions

We do not make decisions based solely on automated processing.

Marketing preferences

If you have consented to receive marketing communications, we will send you information about our apprenticeships/training and other companies in our group which may be of interest to you. You have a right at any time to stop us from contacting you for marketing purposes or giving your information to other members of t2 group. We may use licensed third parties to provide us with regulated personal data for sales and marketing purposes.

If you no longer wish to be contacted for marketing purposes, please email marketing@t2group.co.uk or use the unsubscribe link provided in all of our marketing emails.

Cookies & website tracking

t2 group uses cookies for the following purposes:

Essential Functionality: To enable smooth navigation and ensure security features work correctly
Analytics & Performance: To gather insights on website traffic and improve performance
User Experience: To remember user preferences and personalise content
Marketing & Advertising: To display relevant ads based on browsing history

For further information please visit our Cookie Policy on this website.

Our website contains links to other websites within t2 group. This privacy notice applies to all websites within t2 group.

Changes to this privacy notice

We review and update this Privacy Notice regularly. Any changes will be published on our website.