1. Home
  2. ESFA Online Documentation Privacy Notice

ESFA Online Documentation Privacy Notice

Who we are

This service is operated by the Education and Skills Funding Agency (ESFA) which is a part of the Department for Education (DfE). For the purpose of data protection legislation, the DfE is the data controller for the personal data processed as part of ESFA online documentation.

How we will use your information

We receive your personal data directly from you if you sign up for our notifications service. The aim of our notifications service is to keep you updated with important changes to ESFA online documentation

The nature of your personal data we will be using

The categories of your personal data that we will be using for this project are:

if you have subscribed to updates but no longer wish to receive these reminders, you should follow the instructions in the text message or click the unsubscribe link in the email you’ve been sent. If you’ve subscribed to receive information by both text and email, you’ll need to unsubscribe to both separately to stop receiving reminders.

The user, on account creation, gives all personal data entered for the purpose of ESFA Online Documentation updates and if not registered, will not receive the services.

Why our use of your personal data is lawful

In order for our use of your personal data to be lawful, we need to meet one (or more) conditions in the data protection legislation. For the purpose of this project, the relevant condition is:

Article 6(1)(a) that you have given your consent

Who we will make your personal data available to

We sometimes need to make personal data available to other organisations. These might include contracted partners (who we have employed to process your personal data on our behalf) and/or other organisations (with whom we need to share your personal data for specific purposes).

Where we need to share your personal data with others, we ensure that this data sharing complies with data protection legislation.

This may include the need to transfer your information outside of the UK and the EEA in order for our notification service to work; When we do so we’ll make sure that we’ll meet our obligations under the UK GDPR and Data Protection Act 2018.

We use GOV.UK Notify to send you emails, text messages or both about important updates to ESFA Online Documentation. This is a service provided by the Government Digital Service, which is part of the Cabinet Office. We are the data controller for your data within that service. The Cabinet Office is the data processor.

How long we will keep your personal data

The Department for Education will keep your personal data as part of ESFA online documentation until you unsubscribe from the service.

Your data protection rights

More information about how the DfE handles personal information is published here: https://www.gov.uk/government/organisations/department-for-education/about/personal-information-charter


Under the Data Protection Act 2018, you are entitled to ask if we hold information relating to you and ask for a copy, by making a ‘subject access request’.

For further information and how to request your data, please use the ‘ contact form ’ in the Personal Information Charter at https://www.gov.uk/government/organisations/department-for-education/about/personal-information-charter under the ‘How to find out what personal information we hold about you’ section.

Further information about your data protection rights appears on the Information Commissioner’s website at Individual rights | ICO .

Last updated

We may need to update this privacy notice periodically, so we recommend that you revisit this information from time to time. This version was last updated in December 2021