Leadership and Development Foundation Privacy Notice
Institute of Leadership and Management (ILM)
The Leadership and Development Foundation (LDF) is an accredited ILM centre providing learners’ leadership, management, and coaching qualifications. As a centre, we collect necessary personal data concerning a specific qualification or programme at the point of learners’ registering for the ILM accreditation. For the purposes of the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 (DPA), ILM, as part of the City and Guilds of London Institute and the centre, are independent controllers of personal data and must comply with their respective obligations under the data protection legislation.
Information you need to know:
The Leadership and Development Foundation is part of Liverpool John Moores University. See further information on the institution.
Liverpool John Moores University is the Data Controller.
Our Data Protection Officer can be contacted at DPO@ljmu.ac.uk
LJMU takes your privacy very seriously. This privacy notice explains how we use your personal information and your rights regarding that information. We are committed to being transparent about how we collect and use your data and to meeting our data protection obligations.
For information about how the wider university uses personal data please see the Privacy Notice section of our website.
What information are we collecting?
For the Institute for Leadership development, we collect the following information:
- Full name
- Date of birth
- Email address
- Information required concerning a specific qualification or programme
- Information required as part of ILM’s quality assurance processes, an investigation, appeal or complaint
- Information needed to determine and/or provide reasonable adjustments to a learner
Why are we collecting your data and what is the legal basis for this?
LJMU will collect personal data from you for several reasons and will at all times do so in compliance with the principles of the GDPR and for one of the legal basis set out in Article 6 of the Regulation.
The LDF will use your data because it is necessary to complete its contract with you under the provisions of GDPR Article 6 (1)(b). This means we will collect your name, gender, date of birth, and any other personal data necessary concerning a specific qualification or programme. We may also collect personal data to administer our quality assurance processes, investigations, complaints, and appeals if required. It will be necessary to provide personal data to ILM/The City and Guilds of London Institute for learners to receive learning, training, assessment, and certification products or services.
In exceptional circumstances, we may also collect and provide special category data, such as data about your physical or mental health or condition, to enable us to administer requests for reasonable adjustments or about an investigation, complaint, or appeal. It may be shared with the ILM where required. This data will only be collected if you have provided your explicit consent or if we are otherwise permitted to receive and process it under the GDPR and DPA.
Should you wish to withdraw this explicit consent at any time, you can do so by emailing LDF@ljmu.ac.uk. We will then stop using any of that information and inform ILM of this decision.
ILM assigns a unique learner number to each learner at the point of enrolment or registration, also used with your learning, training, assessment, and certification.
Who has access to this data?
Your personal data will be used only by relevant LJMU staff where the data is necessary for them to undertake their designated role.
Examples of relevant staff may include:
- LDF Advisors
- LDF Administrators
Examples of external parties we may lawfully share information with include:
- The City and Guilds Group
How does the university protect your data?
The university takes Data Protection very seriously, and at all times, your data will be handled in line with the university’s Information Security Policy.
Electronic documents are held on a password protected departmental drive.
Paper documents are locked in departmental filing cabinets.
For how long does the university keep your data?
The data is held for four years after you have finished your learning.
As a data subject, you have a number of rights. You can:
- Access and obtain a copy of your data on request, this could be in a portable electronic format
- Require the university to change incorrect or incomplete data if you think that it is inaccurate or out of date
- Require the university to delete or stop processing your data, for example where the data is no longer necessary or legally required for the purposes of processing
If your personal data has been provided by consent, you have a right to withdraw that consent at any time.
If you would like to exercise any of these rights, please contact the Data Protection Officer at firstname.lastname@example.org.
Transfers of data outside the UK
Generally, we do not send your personal data outside the UK. However, in some specific cases we may transfer the personal data we collect to countries outside the UK in order to perform our contract with you/or a contract with another organisation that requires your personal data i.e. a collaboration agreement with a university based outside of the UK. Where we do this, we will ensure that your personal information is protected by way of an ‘adequacy regulation’ with the UK or by putting alternative appropriate measures in place to ensure that your personal information is treated by those third parties in a way that is consistent with and which respects the UK laws on data protection, for example model contractual clauses, data sharing/data processing agreement and binding corporate rules (where applicable).
Automated decision making
We will not make any decisions about you automatically using a computer, based on your personal data. All decisions affecting you will be taken by a human.
How to complain to the Information Commissioner’s Office?
You have the right to complain to The Information Commissioner if you believe that our processing of your personal data does not meet our data protection obligations. The Information Commissioner can be contacted:
By post: Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK95AF.
By phone: 0303 123 1113.
By email: contact can be made by accessing www.ico.org.uk.