360 Recruitment Limited are committed to ensuring that your privacy is protected. This Privacy

Notice describes how we use the personal information that we collect from you, or that you provide,

when you:

• visit any of our websites, portals or online learning environments (the "Website");

• use the educational services, testing, certification, products, and consultancy services (together

the "Services") that we provide; or

• communicate with us.

360 Recruitment may act as a Data Controller or a Data Processor within our relationship depending

on the nature of services that we are providing to you.

Information we collect.

We collect personal information from you:

• through the use of forms, which may be on paper or on our Websites, such as when you login to

access our Services, signup to receive our newsletters, register for information, make a purchase

or commence a course of study;

• when you create an account on our Websites and provide us with information about any special

requirements, such as dietary requirements, that you may have; and

• if you choose to provide us with information when you use any of our Website or access our

Services;

• when you communicate with us for any reason, including by email, postal mail or telephone, and

when you use our Services.

Some of the personal information that you provide may include sensitive personal information, such

as health-related information to ensure that we can provide the necessary duty of care or

information about your race or ethnicity, which we need for statutory registration/reporting

purposes.

Information that we collect automatically.

When you visit our Websites, we may collect certain information automatically from your device.

The information we collect automatically may include information like your IP address, device type,

unique device identification numbers, browser-type, broad geographic location (e.g. country or city-

level location) and other technical information. We may also collect information about how your

device has interacted with our Website, including the pages accessed and links clicked.

Collecting this information enables us to better understand the visitors who come to our Website,

where they come from, and what content on our Website is of interest to them. We use this

information for our internal analytics purposes and to improve the quality and relevance of our

Website to our visitors.

Some of this information may be collected using cookies and similar tracking technology, as

explained further under the heading 'Cookies', below.

Authorised: Greg Tyler

Issued: G Tyler

Date of issue: 01/05/2024

Review Date: 30/04/2025

Information we obtain from third party sources.

We may receive personal information about you from third party sources (such as your employer if

they enrol you on a course), or agencies if you apply for study or employment, but only where we

believe that these third parties either have your consent or are otherwise legally permitted or

required to disclose your personal information to us. We collect only the minimum amount of

information required from these third parties to enable us to provide the requested service or

process any application you send to us (for example, your educational or employment history). We

only use the information we receive from these third parties as set out in this Privacy Notice.

Use of your information.

We may use the information for the following purposes:

• to provide you with information or Services you request from us;

• to provide information on other 360 Recruitment products and Services which we feel may be of

interest to you, in accordance with your communications and consent preferences;

• to meet our contractual commitments to you;

• to act on your behalf where third-party involvement is available and appropriate – for example

through a third party specialist training provider or certification/awarding body;

• to obtain additional personal information to secure funding or satisfy statutory legal or

Government scheme requirements – for example through an Apprenticeship scheme;

• to monitor and analyse trends, usage and activities in connection with our Websites/Services;

and as necessary to prevent or detect crime.

We may also monitor or record telephone calls for training, customer service and quality assurance

purposes, and to detect or prevent crime and will inform you that we do so when you call us. These

recordings will be retained for a maximum of 6 months.

In general, we will use any of the information we collect from you only for the purposes described in

this Privacy Notice or for purposes that we explain to you at the time we collect such information.

However, we may also use your personal information for other purposes that are not incompatible

with the purposes we have disclosed to you (such as statistical purposes) if and where this is

permitted by applicable data protection laws.

If you do not want us to use your data for any marketing purposes, you will have the opportunity to

withhold your consent to this when you provide your details to us.

Storing and Retaining your personal data.

The personal information you provided to us is stored within secure servers. We use appropriate

technical and organisational measures to protect the personal information that we collect and

process about you. The measures we use are designed to provide a level of security appropriate to

the risk of processing your personal information.

All 360 Recruitment email addresses support TLS email encryption, so it is advised that if you are

concerned about the contents of any email to use this encryption.

Where we have given you (or where you have chosen) a password so that you can access certain

parts of our sites and portals, you are responsible for keeping these passwords confidential.

Ref: 360Rec-11

Issue Number: 4

Authorised: Greg Tyler

Issued: G Tyler

Date of issue: 01/05/2024

Review Date: 30/04/2025

Please note that the transmission of information via the internet (including email) is not completely

secure and therefore, although we endeavour to protect the personal information you provide to us,

we cannot guarantee the security of data sent to us electronically and the transmission of such data

is therefore entirely at your own risk. We retain personal information we collect from you where we

have an ongoing legitimate business need to do so (for example, to provide you with a service you

have requested or to comply with applicable legal, tax or accounting requirements).

When we have no ongoing legitimate business or statutory need to process your personal

information, we will either delete or anonymise it.

Disclosing your information.

We may disclose your personal information to any company within our corporate group. This

includes, where applicable, our subsidiaries, our holding company and its subsidiaries. This will only

be done where lawful bases exists.

We will also disclose, where required, your personal information with:

• third party service providers and partners who provide data processing services to us (for

example, to support the delivery of Services), or who otherwise process personal information for

purposes that are described in this Privacy Notice;

• third party funders, where required within Apprenticeships or further/higher education;

• your employer, where they have instructed us or funded the goods or services provided to you.

This may include progression, assessment, attainment or exam results as well as other personal

data as and when required.

• government agencies, where required by the scheme or education path you elect to follow;

• partners with whom we work to provide Services (such as course vendors, examination bodies

and trainers);

• other commercial organisations with regards to potential work placements or provision of, or

attendance at, employment fairs;

• any third party in connection with, or during negotiations of, any merger, sales of company

assets, financing or acquisition of all or a portion of our business by another company;

• any law enforcement agency, court, regulator, government authority or other third party where

we believe this is necessary to comply with a legal or regulatory obligation (and may not be able

to inform you so as not to compromise any investigation or other proceedings), or otherwise to

protect our rights or the rights of any third party; and to

• any other person with your consent to the disclosure.

Third party links.

You might find links to third party websites on our Websites or within documentation we provide. If

you access other websites using the links provided, the operators of these sites may collect

information from you which will be used by them in accordance with their own Privacy Notices

which you should review.

We do not accept any responsibility or liability for their policies whatsoever as we have no control

over them.

Ref: 360Rec-11

Issue Number: 4

Authorised: Greg Tyler

Issued: G Tyler

Date of issue: 01/05/2024

Review Date: 30/04/2025

Social Networking.

The Website may offer you the opportunity to share or follow information about us (or the Website

or our Services) using third party social networking functionality (such as through "share this", "like"

or "follow" buttons).

We offer this functionality in order to generate interest in us, the Website and our Services among

the members of your social networks, and to permit you to share and follow opinions, news and

recommendations about us with your friends. However, you should be aware that sharing personal

or non-personal information with a social network may result in that information being collected by

the social network provider or result in that information being made publicly-available, including

through Internet search engines.

Please note that we do not exercise, endorse, secure or control the policies or practices of any third

party social network whose functionality you may access through the Website.

You should always carefully read the Privacy Notice of any social network through which you share

information in order to understand their specific privacy and information usage practices.

International data transfers.

For some of our Services, your personal information may be transferred to, and processed in,

countries outside of the EEA. However, we have taken appropriate safeguards to require that your

personal information will remain protected in accordance with this Privacy Notice. These measures

include transferring your personal data to third parties who are located in a country which the

European Commission has determined has data protection laws that are at least as protective as

those in Europe, and transferring your personal data to third parties who have entered into

standard contractual clauses with us. For more information about these safeguards please contact

us using the contact details provided below.

Cookies.

We use cookies and similar tracking technology (collectively, "Cookies") to collect and use personal

information about you. For further information about the types of Cookies we use, why we use

them and how you can control Cookies please see our Cookie Notice at: www.360rec.co.uk/cookie-

notice

Lawful basis (EEA visitors only)

Our lawful bases for collecting and using personal information will depend on the personal

information being collected and the specific context in which we collect it.

However, we will normally collect personal information from you only:

• where we need the personal information to perform a contract with you (for example, to enrol

you into a course or provide you with learning materials);

• where the processing is undertaken on the grounds of legitimate interest and is not overridden

by your rights; or

• where we have your consent to do so;

Ref: 360Rec-11

Issue Number: 4

Authorised: Greg Tyler

Issued: G Tyler

Date of issue: 01/05/2024

Review Date: 30/04/2025

In some cases, we may also have a legal obligation to collect personal information from you.

If we ask you to provide personal information to comply with a legal requirement or to perform a

contact with you, we will make this clear at the relevant time and advise you whether the provision

of your personal information is mandatory or not (as well as of the possible consequences if you do

not provide your personal information).

If we collect and use your personal information in reliance on our legitimate interests (or those of

any third party), this interest will normally be to operate our platform and communicating with you

as necessary to provide our services to you and for our legitimate commercial interest, for instance,

when responding to your queries, improving our platform, undertaking marketing, or for the

purposes of detecting or preventing illegal activities. We may have other legitimate interests and if

appropriate we will make clear to you at the relevant time what those legitimate interests are.

If you have questions about or need further information concerning the lawful bases on which we

collect and use your personal information, please contact us using the contact details provided

below.

Data protection rights

You have the following data protection rights:

• If you wish to access, correct, update or request deletion of your personal information, you can

do so at any time by contacting us using the contact details provided below.

• In addition, you can object to processing of your personal information, ask us to restrict

processing of your personal information or request portability of your personal information.

Again, you can exercise these rights by contacting us using the contact details provided below.

• You have the right to opt-out of marketing and telemarketing communications we send you at

any time.

• Similarly, if we have collected and process your personal information with your consent, then

you can withdraw your consent at any time. Withdrawing your consent will not affect the

lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing

of your personal information conducted in reliance on lawful processing grounds other than

consent.

• You have the right to complain to a data protection authority about our collection and use of

your personal information. For more information, please contact your local data protection

authority.

We respond to all requests we receive from individuals wishing to exercise their data protection

rights in accordance with applicable data protection laws.

Contacting us

The data controller of your personal information is Greg Tyler – greg@360rec.co.uk

We welcome any queries, comments or requests you may have regarding this Privacy Notice. Please

do not hesitate to contact us, or our DPO, via email at: greg@360rec.co.uk

Changes to the Privacy Notice

We may change this Privacy Notice from time to time by updating this document. The online

version is available at: https://360rec.co.uk/privacy-policy/

You should check this page from time to time to ensure that you are happy with any changes.

If material changes are made to this Privacy Notice, we will notify you by placing a prominent notice

on the Website or by contacting you to let you know via the contact details you have provided us

with.