Introduction
This Privacy Statement explains how Burton and South Derbyshire College (BSDC) collects, uses, and protects your personal information. It outlines your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and how you can exercise them.
- Who We Are
Burton and South Derbyshire College (BSDC) is the Data Controller for the personal data you provide. Our contact details are:
Data Protection Officer
Burton and South Derbyshire College
Lichfield Street
Burton upon Trent
Staffordshire
DE14 3RL
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
- What Information We Collect
We collect personal data relevant to your relationship with the College, including:
- Name, date of birth, contact details
- National Insurance number and learner reference numbers
- Educational history and qualifications
- Attendance, progress, and assessment data
- Financial and funding information
- Health, wellbeing, and support needs
- Employment status and benefit information
- CCTV footage and digital access logs
- How We Collect Your Data
We collect data through:
- Application and enrolment forms
- Online portals and websites
- Government agencies (e.g., DfE, ESFA, HESA)
- Other Education Providers (e.g., schools, colleges and universities)
- Local Authorities (e.g., District and County Councils)
- Employers
- Why We Collect Your Data
We process your data to:
- Deliver education, training, and support services (Public Task)
- Monitor academic progress and attendance (Public Task)
- Provide safeguarding and pastoral care (Vital Interests, Legal Obligation)
- Fulfil legal and funding obligations (Legal Obligation)
- Improve our services and facilities (Legitimate Interests)
- Communicate with you about courses, events, and opportunities (Consent)
- Ensure the safety and security of our community (Public Task, Legitimate Interests)
- Legal Bases for Processing
We rely on the following legal bases:
- Public task – Delivering education and training
- Legal obligation – Compliance with statutory and regulatory duties
- Contract – Managing enrolment and services for learners and apprentices
- Consent – For optional communications and marketing purposes
- Vital interests – For Safeguarding and in the event of emergencies
- Legitimate interests – For improving services and engagement
- Special Category Data
Where we process personal identifiable sensitive data, we do so under Article 9 of UK GDPR, including:
- Explicit consent
- Substantial public interest
- Vital interests
- Occupational health
- Equality monitoring
- Who We Share Your Data With
We may share your data with:
- Government departments and/or agencies
(e.g. DfE, Ofsted, OfS, HESA, Learner Record Service (LRS), and Skills England)
- Awarding bodies and exam boards for registration and certification purposes
- Local authorities and safeguarding partners
- Employers (for apprenticeships or placements)
- Statutory Enforcement (where legally required)
We do not sell or trade your personal data.
- International TransfersIf your data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.
- How Long We Keep Your Data
We retain personal data in line with our Record/Data Management & Retention Policy, which complies with legal and regulatory requirements. Retention periods vary depending on the type of data and purpose for which it is held. We regularly review retention periods and securely delete personal data that is no longer required or in which we have a legal and legitimate basis to hold it.
- Your Rights
Under data protection legislation, you have the right to request access to information about you that BSDC hold and/or processes. These rights include the right to:
- Be informed about how BSDC uses your data
- Access the personal data BSDC holds
- Rectify inaccurate or incomplete data BSDC holds
- Erase data where appropriate (excluding any statutory restrictions that apply)
- Restrict or object to processing of your data (excluding any statutory restrictions that apply)
- Data portability
- Not be subject to automated decision-making without safeguards
To exercise your rights, please contact our Data Protection Officer.
Burton & South Derbyshire College (BSDC)
Lichfield Street
Burton upon Trent
DE14 3RL
This email address is being protected from spambots. You need JavaScript enabled to view it.
We aim to respond to all requests within one calendar month.
- Automated Decision-Making and ProfilingBSDC does not currently use automated decision-making or profiling that produces legal or similarly significant effects on individuals. If this changes, we will update this statement accordingly.
- Third-Party Websites and Social Media
Our website may contain links to external websites not controlled by BSDC. These sites have their own privacy policies, and we are not responsible for their data practices.
Information you post on BSDC’s social media platforms (e.g. third-party services such as Facebook, Twitter, Instagram, YouTube and TikTok) is publicly viewable and subject to the privacy policies of those platforms. Please consult their policies before sharing personal data.
- Data Protection Impact Assessments (DPIAs)BSDC conducts Data Protection Impact Assessments (DPIAs) where processing is likely to result in high risk to individuals’ rights and freedoms.
- How We Protect Your Data
BSDC adopts a rigorous approach to safeguarding the information it holds. This includes implementing technical controls such as firewalls, intrusion detection and prevention systems, and conducting regular assessments of system security.
In addition to these technical safeguards, BSDC has established comprehensive policies and procedures to ensure that all users understand their responsibilities and obligations regarding the data they access.
BSDC implements robust security measures, including:
- Certified comply with Cyber Essentials scheme
- Restricted and monitors access to personal data it holds and processes
- Has encrypted data storage and secure backups services
- Regularly audits and reviews the data its holds and processes
- Regularly training staff on data protection and security
- Concerns or Complaints
If you would like to discuss anything in this privacy notice, please contact the Data Protection Officer at This email address is being protected from spambots. You need JavaScript enabled to view it.
If you wish to make a complaint in line with our Feedback Policy regarding the way in which your data has been handled and/or processed this can be submitted to This email address is being protected from spambots. You need JavaScript enabled to view it.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk/concerns
- Definition of a cookie
To ensure this website functions properly, we occasionally store small data files called cookies. This is a common practice among websites. A cookie is a message sent to your web browser by a website, which the browser then saves in a text file named cookie.txt. Every time you request a new webpage, the message is sent back to the site.
A cookie's main purpose is to identify users and customise their experience, like greeting individuals by name upon return to the same website.
Our sites use cookies to provide a personalised experience. You can choose to reject or delete cookies in your web browser, but doing so may cause this website’s functions to fail to work correctly.