Privacy Policy

The Contractor's Academy External Privacy Notice

The Contractor’s Academy (“TCA”), operating address 71-75, Shelton Street, Covent Garden, London, WC2H 9JQ, is committed to protecting the privacy and security of the personal data of our employees, contractors, and other third parties with whom we deal in the course of our business, recruitment activities, and the provision of our services. This privacy notice explains who we are, how we collect, share and use your personal information, and how you can exercise your privacy rights.

We will ensure that your personal data is:

processed lawfully, fairly, and in a transparent manner,
collected only for specified, explicit, and legitimate purposes,
adequate, relevant, and limited to what is necessary in connection with the services we provide to you,
accurate and, where necessary, kept up to date,
not kept in a form which enables it to identify you for longer than necessary,
only processed in such a way that its security is ensured by appropriate technical and organisational measures to protect it against unauthorised or unlawful processing and against accidental loss, destruction or damage.

Our Name and Contact Details

The Contractor's Academy, also known as "TCA”, 71-75, Shelton Street, Covent Garden, London, WC2H 9JQ).

Any questions about data protection at TCA Limited should be directed to our Data Protection Team data@thecontractorsacademy.com

What We Do

At TCA, we specialise in offering digital learning solutions and ready-made content designed to empower professionals across the United Kingdom. Our mission is to introduce individuals to alternative career-building avenues, equipping them with the knowledge and resources we deem necessary for professional realisation. TCA aims to support experienced and aspiring contracting professionals through our innovative digital learning platforms, curated content, and networking channels. We strive to inform and inspire, enabling individuals to unlock their full potential and thrive in the United Kingdom's dynamic professional landscape.

Processing of Your Personal Data

We process and manage your personal data in accordance with the business relationship we have with you. This business relationship helps us identify the relevant category of data subject (or group of people whose data we process similarly) and enables us to tell you the details of how we process your personal data. We interact with you and process your personal data in one or more of the following ways:

1. As a Customer

For Customer Relationship Management Purposes

We collect, store and use your personal data to manage our relationship with you based on our business contract with you. The legal basis here is Art. 6 para. 1 lit. (f) UK/EU GDPR, the legitimate interest in continuing existing contracts and acquiring new customers.

We collect: personal contact details, call details, contact information, email address, email content, first name, last name, title, city/town, mobile phone, occupation data (including job title, industry and years of experience), password, and postcode.
From: Yourself.
We share this with: Contracted and full-time TCA teams involved in the consultation process and third-party suppliers who may provide SME consultation services.
Storage Location: United Kingdom.
Storage period: Length of contract.

1.2 For Learning Content

We collect, store and use your personal data to enable you to access content on our learning platforms based on the contract we have with you. We need to process your personal data to administer the learning platforms/portal services contract we will enter into or have entered into with you. If you do not provide certain information, we may not be able to fulfil or complete the learning services access contract.

The legal basis here is Art. 6 Para. 1 lit. (f) UK/EU GDPR, the legitimate interest in fulfilling the contract with our customers.

We collect: personal contact details, call details, contact information, email address, email content, first name, last name, title, city/town, mobile phone, occupation data (including job title, industry, and years of experience), password, and postcode.
From: Yourself.
We share this with: Contracted and full-time TCA teams.
Storage Location: United Kingdom.
Storage period: Length of contract.

1.3 For SME Consultation

We collect, store, and use personal data to enable the attendance and execution of SME consultation sessions booked by the user/customer. This data is necessary for us to organise and carry out these sessions, ensuring the provision of expert consultation services to small and medium enterprises.

We collect: personal contact details, email address, first name, last name, company name, business address, and consultation details.
From: Yourself.
We share this with: Contracted and full-time TCA teams involved in the consultation process and third-party suppliers who may provide SME consultation services.
Storage Location: United Kingdom.
Storage period: Three years after the consultation.

1.4 For Customer Support

We need to process your personal data to ensure that we can provide you with the support you need when using our services and learning management platforms, and to process invoices and take payments. This is done on the basis of the contract we have with you. If you do not provide us with certain information in time, we may not be able to fulfil the contract we have with you.

We collect: personal contact details, call details, contact information, email address, email content, first name, last name, title, city/town, mobile phone, occupation data (including job title, industry and years of experience), password and postcode.
From: Yourself.
We share this with: Contracted and full-time TCA teams involved in the consultation process and third-party suppliers who may provide SME consultation services.
Storage Location: United Kingdom.
Storage period: Length of Contract.

‍1.4 Learning For Analytics‍

We collect, store and use your personal data to understand how our learning management platforms and services are used. We do this on the basis of the contract we have with you and the legitimate interest on our part in improving our products acc. Art. 6 Para. 1 lit. (f) UK/EU GDPR.

If you do not provide certain information when requested, we may not be able to fulfil the contract we have with you.

We may collect: Behavioural data, browser details, personal contact details, call details, contact information, email address, email content, first name, last name, title, city/town, mobile phone, occupation data (including job title, industry and years of experience), password and postcode.
From: Yourself.
We share this with:Contracted and full-time TCA teams involved in the consultation process and third-party suppliers who may provide SME consultation services.
Storage Location: United Kingdom.
Storage period: Length of contract.‍

1.5 Conducting the Customer Satisfaction Survey‍

We collect, store and use your personal data to obtain feedback on the services we provide. We contact you based on our legitimate interests acc. Art. 6 para. 1 lit. (f) UK/EU GDPR to ensure that we provide you with the best customer experience when accessing our services. The evaluation of your responses is also based on this. The participation is voluntary on the basis of Art. 6 para. 1 lit. (a) UK/EU GDPR.

We collect: personal contact details, call details, contact information, email address, email content, first name, last name, title, city/town, mobile phone, occupation data (including job title, industry and years of experience), password and postcode.
From: Yourself.
We share this with: Contracted and full-time TCA teams involved in the consultation process and third-party suppliers who may provide SME consultation services.
Storage location: United Kingdom.
Storage period: Three years.‍

1.6 To Provide System Development‍

We collect, store and use your personal data to improve our internal production systems and enterprise resource planning systems and to enhance our platforms.

We do this based on our legitimate interests acc. Art. 6 para. 1 lit. (f) UK/EU GDPR in improving the efficiency and usability of the services we provide to you.

We collect: personal contact details, call details, contact information, email address, email content, first name, last name, title, city/town, mobile phone, occupation data (including job title, industry and years of experience), password and postcode.
From: Yourself.
We share this with: Contracted and full-time TCA teams involved in the consultation process and third-party suppliers who may provide SME consultation services.process and third-party suppliers who may provide SME consultation services.
Storage location: United Kingdom.
Storage period: Three years.‍

‍2. As a Learner

2.1 To Resolve Login/Technology Issues.‍

We collect, store and use your personal data to support access to our learning management platform and services based on our contract with you. This is necessary to support your access to our learning management platforms and to ensure the security of these systems.

We collect: personal contact details, call details, contact information, email address, email content, first name, last name, title, city/town, mobile phone, occupation data (including job title, industry and years of experience), password and postcode.
From: Yourself.
We share this with: Contracted and full-time TCA teams involved in the consultation process and third-party suppliers who may provide SME consultation services.
Storage Location: United Kingdom.
Storage period: Contract period plus 6 years.‍

3. As a Potential Customer or User

3.1 For Email Marketing.

We need to process your personal data to send you newsletters, promote our services and invite you to business events that we believe will be of benefit to you.

We do this based on our legitimate interests acc. Art. 6 Para. 1 lit. (f) UK/EU GDPR, which are to facilitate engagement with potential new clients, increase external awareness of the TCA brand, understand external business issues and develop appropriate solutions.

We collect: personal contact details, call details, contact information, email address, email content, first name, last name, title, city/town, mobile phone, occupation data (including job title, industry and years of experience), password and postcode.
From: Potential company, research, website visitors, conference/webinar attendee lists.
We share this with: Contracted and full-time TCA teams involved in the consultation process and third-party suppliers who may provide SME consultation services.
Storage Location: United Kingdom.
Storage period: Three Years.

3.2 For Data Cleansing for Marketing Purposes.

We need to process your personal data to ensure that we have accurate, up-to-date and appropriate information about you to support our marketing. We do this based on our legitimate interest acc. Art. 6 Para. 1 lit. (f) UK/EU GDPR in building and maintaining a business relationship with our customers.

We collect: personal contact details, call details, contact information, email address, email content, first name, last name, title, city/town, mobile phone, occupation data (including job title, industry and years of experience), password and postcode.
From: Potential company, research, website visitors, conference attendees.
We share this with: Contracted and full-time TCA teams involved in the consultation process and third-party suppliers who may provide SME consultation services.
Storage Location: United Kingdom.
Storage period: Three years.

4. As a Website Visitor

4.1 To Manage Your Cookie Preferences.

We collect, store and use your personal data to make our website more intuitive and user-friendly and to protect the security and effective functioning of our websites based on your consent. This is necessary to monitor how our website is used so that we can (a) improve the layout and information on our website and provide a better service to our website users and (b) monitor how our website is used to detect and prevent fraud, other crimes and misuse of our website. The basis for this is Art. 6 para. 1 lit. (f) UK/EU GDPR is the secure operation of our website.

We collect: Cookies, country, email address, IP address, name, occupation.
From: Yourself.
We share this with: Contracted and full-time TCA teams involved in the consultation process and third-party suppliers who may provide SME consultation services.
Storage Location: United Kingdom.
Storage period: The duration of your browsing session.

5. As a Potential Supplier

5.1 To Select Candidates for Employment.‍

We collect, store and use your personal data to assess your skills, qualifications and suitability for the job or role during this process based on our legitimate interest.

It is in our legitimate interest to carry out background checks, communicate with you about the recruitment process and keep records in relation to our recruitment process.

If you do not provide us with the information we need to consider your application, we will not be able to process your application. The basis for this is Art. 6 para. 1 lit. (b) UK/EU GDPR, the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

We collect: CV, education, email address, employment, first name, interview notes, surname, location.
From: Yourself and, wherever necessary, recruitment agencies.
We share this with: Recruitment agencies, contracted and full-time TCA teams involved in the consultation process and third-party suppliers who may provide SME consultation services.
Storage Location: United Kingdom.
Storage period: One year.

Breaches

We have procedures in place to deal with suspected data breaches and will notify you and any relevant supervisory authorities of a suspected breach where we are required to do so by law.

Dealing with Your Requests

We will deal with any requests as soon as possible, but it may take up to one month (possibly extended to 3 months if the law allows). There is usually no charge for processing, but we may charge a reasonable fee if your request is manifestly unfounded, repetitive or excessive, or we may refuse to comply with your request in these circumstances.

We may need to request certain information from you to confirm your identity and ensure your right to access your personal data (or exercise your other rights). This is a security measure to ensure that your personal data is not disclosed to anyone who does not have the right to receive it. We may also contact you to ask for more information about your request to speed up our response.

Notice This notice does not form part of any service contract.

Changes to This Privacy Notice

We may update this notice from time to time. Any changes we make to our policy in the future will be either posted on our website, networking channels, and, where appropriate, notified to you by email. Please visit our website regularly to check for any updates or changes to our policy.

Your Data

May be shared with other third parties such as Tax authorities or other regulatory or law enforcement agencies in certain circumstances, but only in accordance with the law and where strictly necessary.

Automated Decision Making and Profiling

You will not be subject to decisions that have a significant impact on you and are based solely on automated decision-making, including profiling unless you have given us your consent to do so or it is necessary for the formation or performance of a contract.

Your Rights

Access. You have the right to ask us for copies of your personal data. This right always applies. There are some exceptions, which means you may not always receive all the personal data we process.

Rectification. You have the right to ask us to rectify personal data that you believe is inaccurate or incomplete. This right always applies.

Supplementary Information

Erasure. You have the right to request that we erase your personal data if it is no longer necessary for the purpose for which it was collected, or if you withdraw your prior consent to its processing and we have no other legal basis for processing it, or if it is processed unlawfully, or if it must be erased to comply with a legal obligation, or if it is used for direct marketing purposes for which we have no legitimate grounds.

Restriction. You have the right to ask us to restrict the processing of your personal data if it is inaccurate (so that we can verify its accuracy) or if it is processed unlawfully (and you want us to stop the processing rather than erase it), or if you have objected to the processing while we verify that we have legitimate grounds for processing, or if the data is no longer needed for the purpose for which it was collected and you want us to retain it for the establishment, exercise or defence of legal claims.

Portability. This only applies to personal data that you have provided to us. You have the right to ask us to transfer or share the data you have provided to us from one organisation to another. This only applies if we are processing personal data on the basis of your consent or as part of a contract or in discussions with you about entering into a contract and the processing is automated.

Object. You have the right to object to the processing of your personal data where we claim legitimate interests as the legal basis for the processing or where the data is used for direct marketing.

Withdrawal of consent. You may withdraw consent you have previously given us to process your personal data for one or more specific purposes. This will not affect the lawfulness of the processing that took place before you withdrew your consent. This may mean that we can no longer offer you certain products or services, and we will inform you if this is the case.

You have the right to complain to a supervisory authority, in the UK this is the Information Commissioner's Office

Direct Marketing

Our direct marketing activities comply with the Privacy and Electronic Communications (EC Directive) Regulations 2003 (SI 2003/2426), which means that you may receive direct marketing communications from us if you have requested them or if you have purchased one of our services and have not opted out of receiving them, or if the communications are necessary for the performance of a contract between us.

Cookies

Cookies are small files that we store on the device (computer, mobile phone, tablet or other mobile device) that you use to access our website or portal.

We use the term "cookies" to refer not only to cookies but also to other technologies such as pixels, web beacons and page tags. Our website may use "first-party cookies" (set by our own website) and "third-party cookies" (set by other websites).

Informing you about the use of cookies and managing them is required under the Privacy and Electronic Communications (EC Directive) Regulations 2003 (SI 2003/2426).

What Cookies Do

We may use the following types of cookies:

Required. These are essential for the proper functioning of our website. This category only includes cookies that provide basic website functionality and security features. No peronal data is stored in these cookies.

Not necessary. These cookies are not essential for the website to function properly. They are used to collect personal data from users about analytics, ads and other embedded content, and help us analyse and understand how you use our website. We always ask for your consent before using these types of cookies.

Blocking cookies. You can also disable cookies by changing your browser settings to refuse all or some cookies. The settings and steps for managing cookies vary from browser to browser, so we recommend that you consult your browser's documentation.

If you set your browser to block all cookies (including "necessary" cookies), you may not be able to access all or parts of our website.