1. What we collect, and why
1.1 If you visit our website
| Data | Why we use it | Lawful basis |
|---|---|---|
| Pages visited, device and browser type, approximate location from IP | To keep the site working and understand which pages help people decide | Consent for analytics cookies; legitimate interests for security and basic operation |
| Cookie preferences | To honour your choices | Legal obligation |
1.2 If you enquire or book a call
| Data | Why we use it | Lawful basis |
|---|---|---|
| Name, email, phone, country, background and goals | To answer your enquiry and advise which programme suits you | Steps prior to entering a contract |
| Call recordings, where you have consented | To check our advisers describe each programme accurately, and to resolve any later dispute about what was said | Consent for the recording; legitimate interests in accurate sales practice |
We record admissions calls because what our advisers say to you can become a binding term of your contract under section 50 of the Consumer Rights Act 2015. The recording protects you as much as us. You may decline and we will take the call without recording it.
1.3 If you enrol
| Data | Why we use it | Lawful basis |
|---|---|---|
| Name, date of birth, address, email, phone | To administer your enrolment and contract | Contract |
| Programme chosen (Interview Ready or Employer Ready) and upgrade history | To apply the correct terms to you | Contract |
| Right-to-work status | To advise realistically on placement and apply the Learner Agreement | Contract |
| Payment details, instalment or finance arrangements | To take payment and process refunds | Contract; legal obligation for financial records |
| Signed Enrolment Form, Key Facts Statement and programme selection | To evidence what you agreed to and when | Contract; legitimate interests in defending claims |
| Digital content choice (Option A or B) with timestamp | To evidence your cancellation rights correctly | Legal obligation |
1.4 While you are learning
| Data | Why we use it | Lawful basis |
|---|---|---|
| Attendance at live sessions, with dates | To calculate the standards in your Agreement and produce your progress reports | Contract |
| Assignment and assessment submissions, timestamps, marks, Flex Passes used | To assess you and determine refund eligibility | Contract |
| Core Milestone results and re-attempts | To determine Programme-Ready status, on the Employer Ready programme | Contract |
| LMS activity logs | To support you and keep the platform secure | Legitimate interests |
| Session recordings in which you may appear or speak | To provide catch-up content to your cohort | Legitimate interests — you may keep your camera off and ask us to edit you out |
| Your CV, LinkedIn profile, portfolio and project work | To review and improve them, and to share with employers with your permission | Contract |
1.5 Placement and career support
| Data | Why we use it | Lawful basis |
|---|---|---|
| Your CV and profile shared with employers | To arrange interviews and introductions | Contract — but we ask you before each specific employer |
| Interviews arranged, employer, date, outcome | To evidence our obligations and determine refund entitlement (Employer Ready) | Contract |
| Job offers received, salary and role | To assess whether an offer is relevant, and for anonymised outcome reporting | Contract |
We will not send your CV to an employer without telling you
We ask before each specific introduction. You may decline any employer for any reason, and declining does not affect your rights under your Learner Agreement — although on the Employer Ready programme, an interview you decline after it has been arranged still counts towards the five we owe you.
1.6 If you sit a Certiport exam
| Data | Why we use it | Lawful basis |
|---|---|---|
| Name, email, identification, exam registration and results | To register you for the exam and administer it as an authorised testing centre | Contract; legal obligation for exam-integrity records |
| Exam session records and proctoring logs | To meet the requirements of Certiport and Pearson VUE | Legitimate interests in exam integrity |
1.7 Health and other special category data
If you ask us to take account of illness, disability, pregnancy, bereavement or a mental health crisis under the Exceptional Circumstances provisions of your Agreement, you may give us health information, sometimes with a medical certificate.
This is special category data. We process it on the basis of your explicit consent, and where relevant our substantial public interest obligations in making reasonable adjustments. We keep it separately, restrict access to the small team who need it, and delete it 12 months after your Programme ends unless you ask us to keep it longer. You never have to tell us a diagnosis — confirmation from a registered practitioner that a certified circumstance applies is enough.
2. Marketing
We only send marketing emails if you have opted in. Enrolment does not opt you in — the marketing consent box on the Enrolment Form is separate and optional, and leaving it blank has no effect on your place, your price or your rights.
Every marketing email has an unsubscribe link. Unsubscribing does not affect service messages about your programme, timetable, progress reports or refunds — we still have to send you those.
If you consent to giving a testimonial, we will use your name, photograph and words only as you agreed. You may withdraw that consent at any time and we will remove the testimonial from our marketing.
3. Who we share your data with
| Recipient | What they receive | Why |
|---|---|---|
| Learning platform provider | Name, email, course activity | To deliver the LMS |
| Payment processors | Payment and transaction data | To take payment and issue refunds |
| Third-party lenders | Name, contact, fee and refund amounts | Only if you chose finance, and only as needed to administer it |
| Video conferencing provider | Name, email, session attendance | To run live sessions |
| Email and CRM providers | Contact details, communications history | To communicate with you |
| Certiport / Pearson VUE | Name, email, ID, exam registration and result | To register and administer certification exams |
| Employers and hiring partners | Your CV, portfolio and profile | Only with your permission, for a specific opportunity |
| Instructors and mentors | Your work, progress and feedback | To teach and assess you |
| Professional advisers | Only what is necessary | Legal, accounting and audit |
| Regulators, courts, law enforcement | Only what is legally required | Where we must comply with law |
We use processors under written contracts requiring them to protect your data and act only on our instructions. We do not sell your personal data, and we do not share it with advertisers.
4. How long we keep it
| Data | Retention period |
|---|---|
| Enquiry data where you did not enrol | 12 months from last contact |
| Enrolment records, signed Agreement, Key Facts Statement, programme selection | 6 years from the end of your Programme |
| Attendance, submissions, marks, Milestone results, Flex Passes | 6 years from the end of your Programme |
| Progress reports, notices and written feedback we sent you | 6 years from the end of your Programme |
| Interview and introduction records | 6 years from the end of your Programme |
| Certiport exam registration and result records | 6 years, or longer where Certiport requires |
| Payment and refund records | 6 years from the end of the relevant tax year |
| Admissions call recordings | 24 months, or longer if a dispute is live |
| Health and special category data | 12 months after your Programme ends |
| Marketing consent records | Until you withdraw consent, plus 2 years |
| Session recordings | 24 months |
The six-year periods reflect the limitation period for contract claims in England and Wales. They also protect you: your Learner Agreement provides that if we cannot produce a record we were required to keep, the point it would have evidenced is decided in your favour. Retaining these records is how that promise is kept.
After the retention period we delete the data or anonymise it irreversibly. Anonymised outcome statistics — interview rates, placement rates, median salaries — are kept indefinitely, but cannot be traced back to you.
5. Your rights
Under UK GDPR you have the right to:
- Be informed — this policy.
- Access your data — a copy of what we hold, free of charge, within one month.
- Rectification — have inaccurate data corrected.
- Erasure — have data deleted, where we have no continuing lawful reason to keep it. We may need to retain enrolment and assessment records for the six-year limitation period.
- Restrict processing — ask us to pause processing while a dispute is resolved.
- Data portability — receive the data you gave us in a machine-readable format.
- Object — to processing based on legitimate interests, and absolutely to direct marketing.
- Withdraw consent at any time, where consent is the basis — including for call recording, testimonials and marketing.
- Not be subject to solely automated decision-making with legal or similarly significant effects. We do not make refund, readiness or placement decisions by automated means alone; a person always reviews them.
To exercise any right, email privacy@skillversed.com. We respond within one month. We will not charge you, and exercising a right will never affect your place, your price, your refund entitlement or how we treat you.
6. Security
We protect your data with encryption in transit and at rest, access controls limiting staff access to what their role requires, multi-factor authentication on administrative systems, regular backups, and written contracts with our processors.
If a breach occurs that is likely to result in a risk to your rights, we will notify the ICO within 72 hours and tell you directly without undue delay where the risk is high.
7. Cookies
We use strictly necessary cookies to make the site work, and analytics and marketing cookies only with your consent. Our cookie banner lets you accept or reject non-essential cookies, and rejecting is exactly as easy as accepting. You can change your preferences at any time from the link in our footer. Full detail is in our Cookie Policy.
8. Children
Our programmes are for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, email privacy@skillversed.com and we will delete it.
9. Changes to this policy
We may update this policy. The current version is always published at skillversed.com/privacy with the date it was last updated. If we make a change that materially affects how we use your data, we will email you before it takes effect.
10. Contact
privacy@skillversed.com for anything about your data.
Skill Versed Ltd, 5th Floor, Office 167, 169 Great Portland Street, London W1W 5PF, United Kingdom.