Privacy Policy

This Privacy Policy outlines how National Skills Funding ("we", "our", or "us") collects, uses, protects, and shares your information when you engage with our services, websites, and communications.

National Skills Funding is a delivery brand of M2HSE Training Ltd, a UK-registered training provider (Company No: 12804208) and CITB Approved Training Organisation (ATO).

Last updated: September 2025

1. What Information We Collect

We may collect the following personal data:

  • Full name, date of birth, gender
  • Email address, phone number, postal address
  • National Insurance number
  • Employment and education background
  • Proof of ID and residency documents
  • CSCS card details (if applicable)
  • Information submitted through forms or contact requests

We may also collect anonymised usage data through cookies and website analytics tools.

2. How We Use Your Information

We use your data to:

  • Assess your eligibility for funded training
  • Process course applications and onboarding
  • Deliver Skills Bootcamps, NVQs, and related training services
  • Book and administer CSCS tests and cards
  • Communicate with you about your application, course progress, or funding requirements
  • Fulfil our legal and reporting obligations with funding bodies (GLA, DfE & others)
  • Improve our services and ensure quality assurance

3. How We Protect Your Data

  • We follow industry-standard security protocols
  • Data stored on secure UK-based servers
  • Restricted access to learner files and documents
  • Microsoft 365 Enterprise infrastructure with encrypted communication
  • Retention policies aligned with funding and regulatory frameworks
  • Staff are trained in GDPR and data handling best practices
  • Calls are recorded for quality and training purposes

4. Sharing Your Data

We only share your information with:

  • Relevant funding authorities (GLA, DfE etc.)
  • Awarding bodies and regulators (e.g., ProQual, Pearson Edexcel, CSCS, CITB)
  • Third-party service providers strictly for course delivery or system processing (e.g., QualsDirect, Microsoft 365, Zoho CRM)
  • Law enforcement or regulators when required by law

We never sell or rent your data to third parties.

5. Legal Basis for Processing

Under the UK GDPR, our lawful bases for processing your data include:

  • Consent – where you've opted in for communications or marketing
  • Contractual obligation – to deliver your training and certification
  • Legal obligation – to comply with funding requirements and audit processes
  • Legitimate Interest – to improve our services and protect learners

6. How Long We Keep Your Data

  • We retain learner records for – 6 years or more for funded courses (in line with GLA/DfE audit policy)
  • 3 years or more for enquiries and non-funded applications
  • Or as required by law or funding agreements

7. Your Rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate information
  • Request deletion (subject to funding/legal obligations)
  • Withdraw consent for marketing at any time
  • Object to data processing in certain cases

To make a request, please email admin@nationalskillsfunding.org

8. Cookies & Website Tracking

Our website uses cookies to:

  • Track usage analytics
  • Improve site functionality and user experience
  • Enable social media features

You can adjust cookie settings in your browser or manage preferences via our Cookie Settings page

9. Marketing Communication

We may send you updates about training deadlines, enrolment dates, or course availability.

You can opt out at any time via the unsubscribe link or by contacting admin@nationalskillsfunding.org

10. Data Controller Details

M2HSE Training Ltd

Company No: 12804208

Registered in England & Wales

Email: admin@nationalskillsfunding.org

11. Updates to This Policy

We may update this Privacy Policy occasionally to reflect changes in law or services.

We encourage you to review this page regularly.

Last updated: September 2025