Privacy Policy
This Privacy Policy outlines how National Skills Funding ("we", "our", or "us") collects, uses, protects, and shares your information when you engage with our services, websites, and communications.
National Skills Funding is a delivery brand of M2HSE Training Ltd, a UK-registered training provider (Company No: 12804208) and CITB Approved Training Organisation (ATO).
Last updated: September 2025
1. What Information We Collect
We may collect the following personal data:
- Full name, date of birth, gender
- Email address, phone number, postal address
- National Insurance number
- Employment and education background
- Proof of ID and residency documents
- CSCS card details (if applicable)
- Information submitted through forms or contact requests
We may also collect anonymised usage data through cookies and website analytics tools.
2. How We Use Your Information
We use your data to:
- Assess your eligibility for funded training
- Process course applications and onboarding
- Deliver Skills Bootcamps, NVQs, and related training services
- Book and administer CSCS tests and cards
- Communicate with you about your application, course progress, or funding requirements
- Fulfil our legal and reporting obligations with funding bodies (GLA, DfE & others)
- Improve our services and ensure quality assurance
3. How We Protect Your Data
- We follow industry-standard security protocols
- Data stored on secure UK-based servers
- Restricted access to learner files and documents
- Microsoft 365 Enterprise infrastructure with encrypted communication
- Retention policies aligned with funding and regulatory frameworks
- Staff are trained in GDPR and data handling best practices
- Calls are recorded for quality and training purposes
4. Sharing Your Data
We only share your information with:
- Relevant funding authorities (GLA, DfE etc.)
- Awarding bodies and regulators (e.g., ProQual, Pearson Edexcel, CSCS, CITB)
- Third-party service providers strictly for course delivery or system processing (e.g., QualsDirect, Microsoft 365, Zoho CRM)
- Law enforcement or regulators when required by law
We never sell or rent your data to third parties.
5. Legal Basis for Processing
Under the UK GDPR, our lawful bases for processing your data include:
- Consent – where you've opted in for communications or marketing
- Contractual obligation – to deliver your training and certification
- Legal obligation – to comply with funding requirements and audit processes
- Legitimate Interest – to improve our services and protect learners
6. How Long We Keep Your Data
- We retain learner records for – 6 years or more for funded courses (in line with GLA/DfE audit policy)
- 3 years or more for enquiries and non-funded applications
- Or as required by law or funding agreements
7. Your Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate information
- Request deletion (subject to funding/legal obligations)
- Withdraw consent for marketing at any time
- Object to data processing in certain cases
To make a request, please email admin@nationalskillsfunding.org
8. Cookies & Website Tracking
Our website uses cookies to:
- Track usage analytics
- Improve site functionality and user experience
- Enable social media features
You can adjust cookie settings in your browser or manage preferences via our Cookie Settings page
9. Marketing Communication
We may send you updates about training deadlines, enrolment dates, or course availability.
You can opt out at any time via the unsubscribe link or by contacting admin@nationalskillsfunding.org
10. Data Controller Details
M2HSE Training Ltd
Company No: 12804208
Registered in England & Wales
11. Updates to This Policy
We may update this Privacy Policy occasionally to reflect changes in law or services.
We encourage you to review this page regularly.
Last updated: September 2025