Privacy Notice
This Privacy Notice explains how t2 group collects, uses, stores, and protects your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
t2 group is a data controller responsible for deciding how your personal data is used.
This privacy notice describes why and how we collect and use personal data and provides information about your rights. It applies to personal data provided to us, both by individuals themselves or by others. We may use personal data provided to us for any of the purposes described in this privacy notice or as otherwise stated at the point of collection.
What personal data we collect
We collect and process personal data necessary for providing our services, including:
- Identity Data – Name, date of birth, national insurance number
- Contact Details – Address, phone number, email
- Employment Data – Job role, employer details, payroll information
- Apprenticeship & Training Data – Course details, qualifications, assessments
- Technical Data – IP addresses, cookies, and website usage
When signing an apprenticeship agreement with t2 group, you will be provided with a privacy notice at enrolment which summarises this document containing the reasons and basis for the data we capture and our obligations to retain it for the period specified by the relevant funding contract. If you enrolled before 25th May 2018, the privacy notice that you signed will be held within your enrolment paperwork.
We source personal data from a variety of places such as public sources, publicly available websites, social media, directly from businesses, third party suppliers such as Seed Data Solutions. For example, if you have a profile online, we may combine that type of information with the information you provide to us directly.
How we use your data
We process personal data for the following lawful purposes:
- Contractual obligations – Managing apprenticeships and employment agreements
- Legal obligations – Compliance with government, funding, and regulatory requirements
- Legitimate interests – Internal analysis and improvement of services
- Consent-based activities – Marketing (only where explicit consent is given)
Data sharing
We may share your data with third parties:
- Government agencies (e.g., ESFA, Welsh Government, HMRC)
- Awarding bodies (e.g., City & Guilds, Pearson, ILM, OCR)
- Regulatory authorities (e.g., Ofsted, ICO)
- Third-party service providers (for IT, compliance, payroll)
We will not share your information for marketing purposes. Access to your personal data is only provided to our staff when it is being processed. We do not sell personal data.
How long we keep your data
We retain data for no longer than is necessary to fulfil its contractual and regulatory obligations in line with our Data Retention Policy. We retain data based on legal and regulatory requirements:
- Apprenticeship records: As required by funding bodies
- Employee records: Up to 6 years after termination
- Financial records: 6 years (per HMRC requirements)
- Marketing data: Until you opt out
Your rights
Under UK GDPR, you have the right to:
- Access – You have a right of access to your own personal data held by t2 group. A request to see the personal data held by t2 group can be made through a Subject Access Request by emailing or writing to us using the contact details provided below
- Rectification – You have the right to have inaccurate personal data held by t2 group rectified or completed if it is incomplete. This can be done by emailing or writing to us using the contact details provided below
- Erasure – Once personal data collected by t2 group is no longer necessary for the purpose for which it was collected and processed, you may have the right to have the data erased (subject to legal exceptions). t2 group manages the retention period of data held through its retention schedule
- Restriction – In certain circumstances, you have the right to restrict the processing of your personal data. This is likely to arise when there is an issue concerning the accuracy or the legitimate grounds for processing of the personal data
- Objection – Object to processing for marketing purposes. t2 group will stop processing the personal data unless there are compelling legitimate grounds for the processing, which override your interests, rights and freedoms
- Portability – You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format. t2 group will respond to any Subject Access Requests in compliance with this
To exercise these rights, email dataprotection@t2group.co.uk
International data transfers
We do not store or transfer your data outside the UK or European Economic Area (EEA).
Automated decisions
We do not make decisions based solely on automated processing.
Marketing preferences
If you have consented to receive marketing communications, we will send you information about our apprenticeships/training and other companies in our group which may be of interest to you. You have a right at any time to stop us from contacting you for marketing purposes or giving your information to other members of t2 group. We may use licensed third parties to provide us with regulated personal data for sales and marketing purposes.
If you no longer wish to be contacted for marketing purposes, please email marketing@t2group.co.uk or use the unsubscribe link provided in all of our marketing emails.
Cookies & website tracking
- Essential Functionality: To enable smooth navigation and ensure security features work correctly
- Analytics & Performance: To gather insights on website traffic and improve performance
- User Experience: To remember user preferences and personalise content
- Marketing & Advertising: To display relevant ads based on browsing history
For further information please visit our Cookie Policy on this website.
Our website contains links to other websites within t2 group. This privacy notice applies to all websites within t2 group.
Changes to this privacy notice
We review and update this Privacy Notice regularly. Any changes will be published on our website.
Contact us
If you have questions or concerns about this Privacy Notice, contact our Data Protection Officer: dataprotection@t2group.co.uk
Address: t2 group, Fern House, Unit 1, Links Court, Fortran Road, St. Mellons, Cardiff CF3 0LT.
This Privacy Notice complies with the UK GDPR and Data Protection Act 2018 requirements.