Privacy Notice

We use information about you to review access requests, run the programme, support learning, review evidence and keep the portal safe. We limit access according to role and purpose. We do not treat registration as permission for unrelated marketing, public case studies or unrestricted sharing with sponsors.

This notice covers website enquiries and event or newsletter requests as well as applicants, learners, tutors, reviewers, partners, sponsors and other portal participants. Your college or employer may also provide its own notice for processing it controls.

The data controller for Awaiting confirmation is Awaiting confirmation. Awaiting confirmation

For privacy enquiries, requests or complaints, contact hello@edgeaiskills.com. This shared address is the proposed interim privacy contact and is handled by the programme team. It is not a representation that a formally appointed Data Protection Officer is in place.

Where another organisation independently controls its own enrolment, employment or education records, it is responsible for explaining that processing. We will identify the relevant organisation when your information is collected or shared.

Identification and contact information, such as name, email address, organisation, role and an optional telephone number.

Eligibility and participation information, such as age band, referral organisation, selected pathway and relevant learning goals.

Account and security information, such as user ID, role, access decisions, sign-in events, IP address and relevant audit records.

Learning records, such as attendance, progress, work submitted, evidence, feedback, assessment decisions and recognition.

Communications, support requests, complaints and review requests.

Records of accepted Terms, notices provided, optional permissions and marketing preferences.

We do not ask for bank details, National Insurance numbers or identity documents through the general access form. Please do not include medical information, confidential workplace information or another person’s personal information in free-text answers or evidence.

If you need an adjustment, you can ask for a private conversation without describing a diagnosis in the registration form. Any necessary sensitive information will be collected through an approved process with an explanation of its purpose, lawful basis, recipients and retention.

Information comes from you, your use of the portal and authorised tutors or reviewers. A college, employer or referral organisation may provide limited information needed to invite or support you.

Where we receive information from another organisation, we will tell you its source and the categories received, unless a lawful exception applies. A referral does not automatically authorise every proposed use or onward disclosure.

The following is the proposed basis allocation. It must be approved for the actual contractual and controller arrangements before this notice is published.

Legitimate interests in responding to the enquiry and organising the requested activity, subject to an appropriate balancing assessment. Where objectively necessary for an individual contract, the contractual basis applies and will be identified in the event or service notice.

Assess an adult’s direct request and provide the service agreed with that individual

Steps at the individual’s request before entering a contract, and performance of that contract, limited to objectively necessary processing.

Administer provider-supported participation where the individual is not the contracting customer, and verify organisational representatives

Legitimate interests in delivering and administering an appropriate, safe programme, subject to a documented balancing assessment and the individual’s circumstances.

Contract where necessary for a direct individual service; legitimate interests for provider-supported participation as above. The applicable route will be identified in your enrolment information.

Protect accounts, investigate misuse and operate proportionate security logs

Legitimate interests in securing the programme and protecting participants, following necessity and balancing assessments.

Legal obligation, only where an applicable obligation has been identified. We will explain the relevant obligation where appropriate.

Legitimate interests in resolving disputes and protecting legal rights; a legal obligation where the processing is required by law.

Evaluate the pilot and improve delivery using limited personal information

Legitimate interests in evaluating quality and effectiveness, subject to minimisation and an assessment of participants’ interests. Reports to sponsors are anonymised or suitably aggregated.

Your separate consent. You may withdraw it at any time without affecting learning access.

A separate, specific permission process, including data-protection consent where relied on and any necessary content/image permissions.

Optional sharing of selected evidence with an external employer for an additional opportunity

A separate informed choice and consent where this is genuinely optional. Required assessment sharing is explained separately, not presented as optional consent.

We do not rely on accepting the Privacy Notice as a lawful basis. Where consent would not be freely given, such as some employment or education relationships, we will not use a tick box to disguise a compulsory activity.

We will not collect special-category information through the ordinary application process. Any separate support or safeguarding processing must have both an applicable general lawful basis and an appropriate additional condition before it begins, with a supplementary notice explaining the arrangement.

Name, a usable contact route, requested role and proportionate eligibility information are needed to review an application. Without necessary information, we may be unable to approve access, but we will explain what is missing and consider an accessible alternative.

Marketing preferences, optional publicity, optional external evidence sharing and a request for a private support discussion are separate choices. Refusing those optional activities will not disadvantage your ordinary learning participation.

We do not use a person’s NEET status, unemployment or risk of job displacement for advertising audiences or unrelated commercial targeting.

Information necessary to manage requests, accounts, support and governance. Sensitive support and safeguarding records are separately restricted.

Assigned learners’ relevant learning and assessment records, not all portal accounts.

Specific evidence and feedback needed for their assigned review, under the disclosed participation arrangements.

Agreed information needed for delivery or oversight, as explained before sharing. Not an automatic right to private reflections or all portfolio contents.

Anonymised or suitably aggregated outcomes by default. Small groups and combinations of data are checked for identification risk.

Information needed to provide their contracted functions, subject to appropriate instructions, safeguards and agreements.

Limited information where lawfully necessary for advice, legal obligations, safeguarding or legal claims.

Your portfolio is private by default. We do not sell personal information or permit sponsors to use registration details for their own marketing merely because they support the programme.

For the initial manual approval process, authorised registration administrators may work through the strategy and programme partner and the delivery and go-to-market partner programme arrangements described above. Review notifications are sent to the authorised review addresses held in the portal's server configuration, which are not published here. Only the minimum necessary application information should be included, and sensitive support details and evidence must not be sent through these notifications.

The preferred arrangement is a generic notification linking to a secure administrator dashboard. If a mobile alert is used, it should say only that a request awaits review, without learner names or sensitive details. The destinations and each recipient’s authority must be verified before this paragraph is published.

We use approved suppliers for the functions actually enabled, such as hosting, authentication, communications and technical support. We assess their access, security, retention and contractual terms before entrusting personal information to them.

Awaiting confirmation

We will not describe the service as UK-hosted, UK-only or free from overseas access without verification. A supplier’s product name or development platform does not establish where production data is stored or accessed.

The proposed PoC model uses human approval of applications and human accountability for assessment. Learning recommendations are advisory and can be queried or corrected. We do not use the PoC portal to make solely automated decisions producing legal or similarly significant effects about admission, employment or access to opportunities.

Before introducing an AI feature that processes personal information, we will assess its purpose, inputs, suppliers, risks and safeguards and update the notice as necessary. We will not use identifiable learner submissions to train general-purpose AI models or allow suppliers to do so as part of the proposed PoC arrangement.

External AI websites opened through a link operate under their own notices. Any future integration that sends portal information to a supplier must be separately assessed and explained before use.

We keep personal information only for as long as necessary for its stated purpose. Retention depends on whether a request is approved, whether a learner remains active, the need to provide evidence and resolve reviews, contractual record requirements and any applicable legal obligations.

Our retention schedule covers applications, accounts, learning evidence, security records, communications and permission records separately. When a purpose ends, we delete or anonymise the information unless a justified legal hold or record requirement applies.

We will explain the cohort-specific evidence access and retention period before enrolment. Closing an account stops normal access, but some limited records may be retained to address complaints, establish permissions or comply with law. Backup copies are removed through controlled expiry and are not used for ordinary access.

You may ask for the applicable period for your information. Awaiting confirmation

Depending on the circumstances and the lawful basis, you may have rights to access your information, correct it, request erasure, restrict processing, object to processing or receive certain information in a portable format. Where processing relies on consent, you may withdraw consent without affecting the lawfulness of earlier processing.

You can object at any time to direct marketing. Other rights, including erasure and portability, have legal conditions and exceptions; we will explain any limitation rather than promise that every request can always be fulfilled.

Contact hello@edgeaiskills.com. We may ask for proportionate information to establish your identity or authority, but will not routinely demand identity documents.

We respond without undue delay and normally within one calendar month, subject to legally permitted timing adjustments or extensions. We will explain an extension or a lawful refusal and your options for challenging it (ICO subject-access guidance).

Younger learners receive age-appropriate information and a supported participation route. High privacy settings apply by default, and we do not make children’s profiles or evidence public by default.

We do not assume parental access to every learner record. Requests by parents, guardians, colleges or other representatives are assessed against authority, the learner’s rights, safeguarding and the circumstances. The service must complete its children’s privacy and safeguarding assessment before admitting under-18 learners.

The initial under-18 route does not enrol learners in optional marketing. We do not use behavioural advertising or session replay on their learning journey. External sharing and publicity require the approved review and permissions process, and support records are kept apart from ordinary learning and sponsorship reporting.

Safeguarding concerns are handled by designated people, not automatically circulated to every administrator or both general registration mailboxes. We cannot promise absolute confidentiality where information needs to be shared appropriately to protect someone. Any sharing must be limited, justified and recorded.

We need some information to help you join and learn safely. This includes your name, a way to contact you, the learning route you take and the work you choose to submit.

Your work is not public automatically. Your assigned tutor or reviewer can see what they need to support and assess you. Sponsors do not receive your private learning record simply because they fund the programme.

You do not need to describe a diagnosis in the registration form. Ask for a private support conversation if you would like help. You can also ask who can see your information, ask us to correct something or raise a concern.

Sometimes we may need to tell an appropriate person about a safety concern. We will explain what happens where it is safe and appropriate to do so. You will not be required to agree to publicity or marketing to take part in ordinary learning.

If a tool or activity worries you, stop and speak to your tutor or use “Get help or report a concern”. Ask us to explain any part of this notice in a way that works for you.

We use access controls and proportionate organisational and technical safeguards to protect information. No online service can guarantee absolute security. Tell us promptly if you believe information has been accessed improperly or shared by mistake.

Do not include sensitive evidence or identity documents in an initial email report. We will arrange a suitable route if further information is needed.

You can make a data-protection complaint to hello@edgeaiskills.com, including through an authorised representative. Ask if you need an accessible alternative.

We will acknowledge your complaint within 30 days, investigate appropriately, keep you informed and explain the outcome without undue delay. This complaints process is distinct from the time limit for responding to information-rights requests (ICO complaints requirements).

You may also raise concerns with the Information Commissioner’s Office. Our process does not remove your right to approach the regulator or seek another legal remedy (ICO data-protection complaints information).

We will publish the version and effective date and explain material changes through an appropriate channel. Publishing a new notice does not by itself authorise an incompatible new purpose. Where a new use needs consent or another legal step, we will complete that separately.