Privacy notice for ENID collection tool
This privacy notice explains how we will collect and use your personal information for the ENID collection tool.
Who we are
The ENID collection tool is operated by Ofsted ('we' or 'us'). For the purpose of data protection legislation, Ofsted is the data controller for the personal data processed as part of the ENID collection tool.
This privacy policy sets out how we collect and process your personal data on the ENID collection tool website. This policy applies to all authorised users of the ENID collection tool website ('you').
What data we collect
We collect certain information or data about you when you use the ENID collection tool website. This includes personal information such as:
- your email address
- your internet protocol address (IP address), and details of which version of web browser you used
- your place of work
- contact details of those responsible for the delivery of ECF and NPQ
Our legal basis for processing your data
The legal basis for processing personal data in relation to site security is our legitimate interests, and the legitimate interests of our users, in ensuring the security and integrity of the ENID collection tool website.
We collect this data in order to support our inspections of ECF and NPQ delivery.
What we do with your data
The data we collect may be shared with other government departments, agencies and public bodies. It may also be shared with our technology suppliers, for example our hosting provider.
We will not:
- sell or rent your data to third parties
- share your data with third parties for marketing purposes
- use your data in analytics
We will share your data if we are required to do so by law - for example, by court order, or to prevent fraud or other crime.
How long we keep your data
We will only retain your personal data for as long as:
- it is needed for the purposes set out in this document
- the law requires us to
Where your data is processed and stored
We design, build and run our systems to make sure that your data is as safe as possible at all stages, both while it's processed and when it's stored.
All personal data is stored in a secured Microsoft SQL server database, access to which is restricted and regularly reviewed.
How we protect your data and keep it secure
We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data - for example, we protect your data using varying levels of encryption.
We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.
What are your rights?
You have the right to request:
- information about how your personal data is processed
- a copy of that personal data
- that anything inaccurate in your personal data is corrected immediately
You can also:
- raise an objection about how your personal data is processed
- request that your personal data is erased if there is no longer a justification for it
- ask that the processing of your personal data is restricted in certain circumstances
If you have any concerns about this site, please contact FEandSkillsData@ofsted.gov.uk in the first instance. Contact Ofsted’s Data Protection Officer with any concerns about how we handle your personal information here: informationrequest@ofsted.gov.uk or post to:
Information management team
Ofsted
2 Rivergate
Temple Quay
Bristol
BS1 6EH
For more about your rights and how to get in touch with us about the information we hold, view the Ofsted personal information charter.
You have the right to ask to see any of the data we hold about you, through the exercise of your subject access rights. If you wish to exercise this right, you can submit a request via: informationrequest@ofsted.gov.uk
You have a right to complain to the Information Commissioner's Office (ICO) about the way in which we process your personal data. You can make a complaint on the ICO's website.
Comments and questions
We may pass your enquiries to another government department so they can fulfil your information request.
Links to other websites
The ENID collection tool website contains links to other websites, such as the Information Commissioner's Office website.
This privacy notice only applies to the ENID collection tool website, and does not cover other websites that we link to.
Last updated
We may need to update this privacy notice periodically so we recommend that you revisit this page from time to time. This version was last updated on 03 November 2023.