Contact us
Login

Privacy and GDPR policy

  1. Purpose of the Policy

Armonia is committed to safeguarding the personal data of learners and ensuring compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This policy outlines how we collect, process, store, and protect learners’ personal data while ensuring transparency and accountability.

 

  1. Scope

This policy applies to all personal data collected from learners enrolled on Armonia programmes, including:

  • Names, addresses, and contact details.
  • Identification documents and demographic information.
  • Training records, assessments, and qualifications.
  • Health and safety information, including medical details where necessary.
  • Employment details
  • Prior attainment (Personal Learning Record – PLR)

 

  1. Key Principles

Armonia adheres to the following data protection principles:

  1. Lawfulness, Fairness, and Transparency
  • We process personal data lawfully, fairly, and in a transparent manner.
  1. Purpose Limitation
  • Data is collected for specific, legitimate purposes and not processed in a manner incompatible with those purposes.
  1. Data Minimization
  • Only the data necessary for the intended purpose is collected and retained.
  1. Accuracy
  • Personal data is kept accurate and up to date.
  1. Storage Limitation
  • Data is retained only for as long as necessary to fulfil its purpose and comply with legal requirements.
  1. Integrity and Confidentiality
  • Data is stored securely to prevent unauthorized access, loss, or damage.



  1. How We Use Learners’ Data

Personal data collected by Armonia is used for:

  • Enrolling learners onto training programmes.
  • Delivering and assessing training.
  • Communicating with learners regarding their programme.
  • Meeting legal and regulatory requirements.
  • Monitoring and improving the quality of training.

We will never sell, rent, or trade learners’ personal data to third parties.

 

  1. Learners’ Rights Under GDPR

Learners have the following rights regarding their personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
  • Right to Erasure: You can request the deletion of your personal data in certain circumstances.
  • Right to Restrict Processing: You can ask us to limit how your data is processed.
  • Right to Data Portability: You can request that your data be transferred to another organization.
  • Right to Object: You can object to the processing of your data for specific purposes.
  • Right to Withdraw Consent: If processing is based on your consent, you can withdraw it at any time.

 

  1. Sharing Personal Data

Armonia may share learners’ personal data with:

  • Accrediting bodies and awarding organisations.
  • Placement providers and employers (where relevant to training).
  • Regulatory authorities, such as the Department for Education (DfE)
  • Other third parties, where legally required (e.g., HMRC or law enforcement).

We ensure that third parties comply with GDPR when handling your data.

 

  1. Data Security

We take appropriate technical and organisational measures to protect personal data, including:

  • Secure storage systems with restricted access.
  • Encryption of sensitive information.
  • Regular staff training on data protection principles.
  • Periodic audits to ensure compliance with GDPR.

 

  1. Data Retention

We retain personal data only for as long as necessary to fulfil its purpose or comply with legal and regulatory requirements. Once the retention period expires, data is securely deleted or anonymized.

 

  1. Reporting Data Breaches

In the event of a data breach:

  • Armonia will investigate and take immediate steps to mitigate risks.
  • Significant breaches will be reported to the Information Commissioner’s Office (ICO) within 72 hours.
  • Affected individuals will be informed if the breach poses a high risk to their rights and freedoms.

 

  1. How to Exercise Your Rights or Raise Concerns

If you wish to exercise your data protection rights or have concerns about how your data is handled, contact our Designated Safeguarding Lead:

Designated Safeguarding Lead

Armonia Training Academy

10 Park Street

Selby

YO8 4PW

 

Alternatively, contact should be made to our Deputy Designated Safeguarding lead:

Deputy Designated Safeguarding Lead

Armonia Training Academy

10 Park Street

Selby

YO8 4PW

  • You also have the right to lodge a complaint with the ICO if you believe your data has been mishandled:
  • Website: www.ico.org.uk
  • Phone: 0303 123 1113

 

  1. Monitoring and Review

This policy will be reviewed annually or in response to significant changes in data protection laws or Armonia’s operations.

Armonia Training Academy is committed to protecting your personal data and ensuring that your rights under GDPR are respected.




© Armonia Health & Beauty GDPR

Date of Policy: July 2019

Reviewed: January 2025

Next review: January 2026