Privacy Policy
Privacy Policy
Last updated: 1 September 2026
Core Trade Skills is committed to protecting the privacy and personal information of the young people, parents/carers, schools, staff, volunteers, visitors and other individuals who use or work with our services.
This Privacy Notice explains what personal information we collect, why we collect it, how we use and protect it, and the rights individuals have in relation to their personal information.
---
1. Who We Are
Core Trade Skills provides practical trade skills and educational activities for young people and adults, including activities such as plumbing, joinery, construction, building and other practical skills.
For the purposes of UK data protection law, Core Trade Skills is the Data Controller for the personal information we collect and use, unless otherwise stated.
If you have any questions about how we handle personal information, please contact us using the details provided at the end of this notice.
---
2. Information We May Collect
Depending on the services being provided, we may collect the following information:
Young people
- Full name
- Date of birth or age
- School or educational establishment
- Emergency contact details
- Parent/carer contact details
- Attendance information
- Information relevant to participation in activities
- Information relating to additional support or reasonable adjustments where necessary
- Accident or incident information
- Consent records
- Photographs or video where appropriate consent has been provided
Parents and carers
- Name
- Telephone number
- Email address
- Relationship to the young person
- Emergency contact information
- Consent and communication records
Schools and organisations
- School/organisation name
- Contact person's name
- Work contact details
- Booking and attendance information
- Information required to deliver agreed services
Adult learners
- Name
- Contact details
- Booking and attendance information
- Information required to safely participate in activities
Staff and other individuals
We may collect information necessary for employment, volunteering, safeguarding, health and safety, training, DBS checks and legal or regulatory requirements.
---
3. Special Category Information
In certain circumstances, we may need to collect information that is considered special category data under UK GDPR.
This may include information concerning:
- Health or medical needs
- Allergies
- Disabilities
- Additional educational or support needs
We only collect this information where it is necessary and appropriate, for example to help us keep someone safe or provide reasonable adjustments.
We will handle such information with additional care and only use it where we have an appropriate legal basis to do so.
---
- How We Collect Information
We may collect personal information through:
- Booking forms
- Enrolment forms
- School referrals
- Parent/carer communications
- Emails
- Telephone conversations
- Our website
- Attendance registers
- Consent forms
- Incident and accident forms
- Direct communication with learners
- Information provided by schools or other organisationsWhere information about a young person is provided by a school, parent/carer or another organisation, we will use that information only for appropriate and legitimate purposes.
---
5. Why We Use Personal Information
We may use personal information to:
- Provide our practical education and training services
- Process bookings and enrolments
- Communicate with parents, carers, schools and learners
- Maintain attendance records
- Ensure the safety and wellbeing of participants
- Respond to emergencies
- Manage accidents and incidents
- Meet safeguarding responsibilities
- Make reasonable adjustments where required
- Comply with legal and regulatory obligations
- Manage payments and accounts
- Maintain appropriate records
- Evaluate and improve our services
- Respond to enquiries and complaints
- Protect our staff, learners and visitors
- Prevent fraud, misuse or unlawful activityWe will not use personal information for purposes that are incompatible with the reason it was originally collected unless permitted or required by law.
---
6. Our Legal Basis for Processing Information
Under UK GDPR, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on:
- Consent – where we have asked for and received permission.
- Contract – where processing is necessary to provide an agreed service.
- Legal obligation – where we are required to process information by law.
- Vital interests – where processing is necessary to protect someone's life or prevent serious harm.
- Legitimate interests – where processing is necessary for our legitimate business or operational interests and those interests do not override an individual's rights.
- Public task – where applicable to the services we provide.Where we rely on consent, consent can normally be withdrawn at any time.
---
7. Children and Young People
Core Trade Skills works with young people and recognises the importance of protecting children's personal information.
We take particular care when collecting and using information relating to children and young people.
Where appropriate, we will obtain consent or information from a parent/carer or educational establishment.
We may process information without consent where there is another lawful basis, for example where it is necessary to protect a young person's safety, comply with a legal obligation or meet safeguarding responsibilities.
We will only collect information that is necessary and proportionate for the service being provided.
---
8. Safeguarding
Safeguarding is a fundamental part of our work.
If we have concerns about the safety or welfare of a child or vulnerable person, we may need to share relevant information with appropriate organisations or professionals, such as a school, local authority, social services, emergency services or safeguarding professionals.
Where safeguarding information needs to be shared, we will only share information that is relevant and necessary and will do so in accordance with applicable law and our safeguarding procedures.
Where necessary to protect someone from harm, we may share information without consent.
---
9. Photographs and Video
We may wish to take photographs or videos during activities for purposes such as:
- Demonstrating activities
- Recording and Celebrating achievements
- Promoting Core Trade Skills
- Website content
- Social media
- Marketing materials
- Educational or promotional materialsWhere consent is required, we will obtain appropriate permission before using identifiable images of young people for promotional purposes.
Consent for promotional photography or video is separate from consent to participate in our activities.
Individuals can withdraw consent for future use of photographs or videos where consent is the legal basis for processing.
---
10. Who We May Share Information With
We will not sell personal information.
We may share relevant information with:
- Schools and educational establishments
- Parents/carers where appropriate
- Local authorities
- Safeguarding professionals
- Emergency services
- Healthcare professionals where necessary
- Professional advisers
- IT and software providers
- Payment providers
- Insurers
- Regulators or government bodies where legally requiredWe only share information where there is a legitimate reason to do so and, where required, an appropriate legal basis.
---
11. Keeping Information Secure
We take reasonable and appropriate measures to protect personal information from:
- Unauthorised access
- Accidental loss
- Theft
- Destruction
- Unauthorised disclosure
- Unlawful processingThis may include appropriate passwords, access controls, secure systems, restricted access to records and staff awareness of data protection responsibilities.
However, no method of storing or transmitting information can be guaranteed to be completely secure.
---
12. How Long We Keep Information
We will only keep personal information for as long as it is reasonably necessary.
Retention periods will depend on:
- The type of information
- Why it was collected
- Legal requirements
- Safeguarding requirements
- Financial and accounting requirements
- Insurance requirements
- The nature of the service providedWhen information is no longer required, we will securely delete or dispose of it where appropriate.
---
13. Your Data Protection Rights
Under UK data protection law, individuals may have the right to:
- Ask what personal information we hold about them
- Request a copy of their personal information
- Ask us to correct inaccurate or incomplete information
- Ask us to delete information in certain circumstances
- Ask us to restrict how we use information in certain circumstances
- Object to certain types of processing
- Withdraw consent where consent is the legal basis
- Request the transfer of certain information to another organisationThese rights are subject to certain legal exceptions.
If you wish to exercise any of these rights, please contact Core Trade Skills.
---
14. Complaints
We take privacy concerns seriously.
If you have concerns about how we have handled your personal information, please contact us first so that we can investigate and attempt to resolve the matter.
You also have the right to complain to the Information Commissioner's Office (ICO), which is the UK's independent regulator for data protection.
---
15. Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in our services, legal requirements or how we process personal information.
The latest version will be made available through our appropriate communication channels.
---
16. Contact Us
If you have any questions about this Privacy Notice, how we use personal information, or wish to exercise your data protection rights, please contact:
Core Trade Skills
Email: coretradeskillsltd@gmail.com
Telephone: 07921 020 302
Address: Unit 2 Thirkill Park, Thirkill Drive, Pannal, Harrogate HG31GQ
Data Protection Contact: Rachel Bullock