This notice provides a summary of the full learndirect Privacy Statement. Both the notice and the learndirect Privacy Statement apply to information collected by learndirect Limited via the website and in any manner described in the learndirect Privacy Statement.

Personal Information

We collect personal data about you when you enrol as a learner. (Further Information). At enrolment, we may ask you for sensitive personal data and for your consent to use it for a specific purpose. If you do not wish to provide this information, you may select the Not Known/Not Provided or Prefer not to say option.

We share some of your personal data with the Skills Funding Agency. The SFA through their Learner Registration Service allocates Unique Learner Numbers (ULNs) which enable individuals to access their participation and achievement data. The SFA will share your learndirect Ltd participation and achievement data with other organisations if you tell learndirect Ltd that you are happy for the SFA to do so. (Further information).

We use cookies and other technologies to keep track of how you interact with our website and to target advertising. For further information about this please see our Cookies Statement.

Purposes and Disclosures

We use your personal information to deal with your queries, to provide you with the services you request, to determine whether you are eligible for government funding (if available), customer feedback and for general statistics and research.

Depending on the preferences indicated by you, we may use your personal data to contact you about learndirect developments and offers.

We may disclose your personal data to your sponsor, if you are being sponsored by your employer or by a trade organisation or other group.

We may disclose your information to third parties who may take over some or all of the learndirect business in the future.

We may disclose your information to certain government agencies in connection with the funding of your course.

If you enrol in a learndirect centre we will disclose your personal data to the approved service provider that will be delivering and supporting your learning (who may use it for any of the above purposes) Following registration and enrolment, either in a learndirect centre or online, all of our approved service providers will have access to your name, date of birth, address, username, learner reference number and details of which learndirect courses you have enrolled on in the past.

Your Rights and Choices

You can request that:

  • your details not be used for marketing purposes;
  • we provide you with a copy of the information we hold about you
  • we correct inaccuracies in your information.

The General Data Protection Regulation (GDPR) strengthens your rights over how companies use your data.

We ensure Data Subjects rights under the GDPR are protected by ensuring a data subject can request:

The right to be informed

The right to be informed encompasses our obligation to provide ‘fair processing information’, typically through a privacy notice. It emphasises the need for transparency over how we use personal data of individuals.

The information we supply about the processing of personal data must be:

  • concise, transparent, intelligible and easily accessible;
  • written in clear and plain language, particularly if addressed to a child; and
  • free of charge.
The right of access

Individuals have the right to access their personal data and supplementary information. This is known as a Subject Access Request (SAR).

The right of access allows individuals to be aware of and verify the lawfulness of the processing.

Under the GDPR, individuals will have the right to obtain:

  • confirmation that their data is being processed;
  • access to their personal data; and
  • other supplementary information – this largely corresponds to the information that should be provided in a privacy notice.

We must provide a copy of the information free of charge. However, we can charge a ‘reasonable fee’ when a request is manifestly unfounded or excessive, particularly if it is repetitive.

Information must be provided without delay and at the latest within one month of receipt. We will be able to extend the period of compliance by a further two months where requests are complex or numerous.

Certain data may not be disclosed where a relevant exemption applies. We will provide an explanation and a right of appeal in these circumstances.

Where we are not the Data Controller, we will forward the request to the Data Controller and otherwise assist in answering the request, where appropriate. For example, where we are a Data Processor we will provide information we hold on behalf of the Data Controller to the Data Controller within a reasonable amount of time to allow them to respond to the request within the statutory time limits.

For more information about SAR process, please refer to learndirect Subject Access Request process.

The right to rectification

The GDPR gives individuals the right to have personal data rectified.

Personal data can be rectified if it is inaccurate or incomplete.

We must respond within one month. This can be extended by two months where the request for rectification is complex.

If we cannot take any action in response to a request for rectification, we must explain why to the individual, informing them of their right to complain to the supervisory authority (ICO) and to a judicial remedy.

The right to erasure

The right to erasure is also known as ‘the right to be forgotten’.

The broad principle behind this right is to enable an individual to request the deletion or removal of personal data where there is no compelling reason for its continued processing.

Individuals have a right to have personal data erased and to prevent processing in specific circumstances:

  • Where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed;
  • When the individual withdraws consent;
  • When the individual objects to the processing and there is no overriding legitimate interest for continuing the processing;
  • The personal data was unlawfully processed (i.e. otherwise in breach of the GDPR);
  • The personal data has to be erased in order to comply with a legal obligation.

We can refuse to comply with a request for erasure where the personal data is processed for the following reasons:

  • to exercise the right of freedom of expression and information;
  • to comply with a legal obligation for the performance of a public interest task or exercise of official authority;
  • for public health purposes in the public interest;
  • archiving purposes in the public interest, scientific research historical research or statistical purposes; or
  • the exercise or defence of legal claims.
The right to restrict processing

Individuals have a right to ‘block’ or suppress processing of personal data.

When processing is restricted, we are permitted to store the personal data to comply with legal or contractual obligations, but not further process it.

We can retain just enough information about the individual to ensure that the restriction is respected in future.

We will be required to restrict the processing of personal data in the following circumstances:

  • Where an individual contests the accuracy of the personal data, we should restrict the processing until we have verified the accuracy of the personal data;
  • Where an individual has objected to the processing (where it was necessary for the performance of a public interest task or purpose of legitimate interests), and we are considering whether our organisation’s legitimate grounds override those of the individual;
  • When processing is unlawful and the individual opposes erasure and requests restriction instead;
  • If we no longer need the personal data but the individual requires the data to establish, exercise or defend a legal claim;

We must inform individuals when we decide to lift a restriction on processing.

The right to data portability

The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services.

It allows them to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability.

The right to data portability only applies:

  • to personal data an individual has provided to a controller;
  • where the processing is based on the individual’s consent or for the performance of a contract; and
  • when processing is carried out by automated means;

We must provide the personal data in a structured, commonly used and machine readable form. Open formats include CSV files. Machine readable means that the information is structured so that software can extract specific elements of the data. This enables other organisations to use the data.

We must respond without undue delay, and within one month. This can be extended by two months where the request is complex or we receive a number of requests. We must inform the individual within one month of the receipt of the request and explain why the extension is necessary.

The information must be provided free of charge.

The right to object

If a data subject believes that the processing of personal information about them is causing, or is likely to cause, substantial and unwarranted damage or distress to them or another person, they may notify the organisation in writing to request learndirect to put a stop to the processing of that information.

Individuals have the right to object to:

  • processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);
  • direct marketing (including profiling); and
  • processing for purposes of scientific/ historical research and statistics.

We must stop processing the personal data unless:

  • we can demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the individual; or
  • the processing is for the establishment, exercise or defence of legal claims.

We must inform individuals of their right to object “at the point of first communication” and in our privacy notice. This must be “explicitly brought to the attention of the data subject and shall be presented clearly and separately from any other information”.

Rights in relation to automated decision making and profiling

The GDPR applies to all automated individual decision-making and profiling. This may be not applicable to learndirect if we are not using any automated means to process personal data.

Automated individual decision-making (making a decision solely by automated means without any human involvement)

Profiling (automated processing of personal data to evaluate certain things about an individual). Profiling can be part of an automated decision-making process.

We can only carry out this type of decision-making where the decision is:

  • necessary for the entry into or performance of a contract; or
  • authorised by Union or Member state law applicable to the controller; or
  • based on the individual’s explicit consent.

You may also turn cookies off in your browser. However if you do so, you may not be able to use certain features on the website.

Important Information

Your personal data is protected by UK data protection law. You can find the details for the UK Information Commissioner at

How to contact us

To obtain a copy of your personal data, to correct inaccuracies or if you have any queries or concerns about how we handle your personal data, please contact: learndirect Limited, Dearing House, 1 Young Street, Sheffield, S1, call freephone number: 0800 101 901, or email:

Full Privacy Statement

By using this website you accept the terms of this privacy statement, the copyright statement and the terms and conditions on this website.

Our commitment to privacy

This privacy statement explains how learndirect Limited (referred to as "we", "us" or "learndirect") collects information from you via the website or in any manner expressly described in the privacy statement and how this information is then used. When you provide us with your personal data you consent to us processing all such personal data as set out in the privacy statement. Please read this privacy statement carefully and revisit this page from time to time to review any changes that we may have made. If you have any questions, comments or concerns about how we handle your personal information, please ring us on 0800 101 901 or email us.

To access your course materials. Your user name is your email address and you can either choose your own password or we will give you one which you must change when you first log in. If you are already registered on the learndirect community you will use the same user name and password to access your learning.

Please note that when you enrol on a learndirect course that leads to a qualification such as an NVQ, we send non sensitive personal information to the relevant awarding bodies so that they can undertake the administration associated with your qualification.

Learner File

When you start your learning we or your Service Provider will create a Learner File to hold the documents which relate to your learning and evidence of proof of identity and funding eligibility. As you progress through your learning other documents, including some of your course work, may be held on this file.

The information we collect when you access course materials

We collect information about how you use course materials to monitor your learning and improve our users’ learning experience.

We use your personal information and your Learner File:

  • to answer your queries or complaints;
  • to deliver our services, for example on-line tools to test your skills;
  • to provide the learndirect "Community" facility;
  • to support your learning;
  • to provide course materials;
  • to carry out administration;
  • to improve the quality of services;
  • to support your application for government funding;
  • to obtain customer feedback;
  • for general statistics and research;
  • for obtaining any relevant professional advice;

as may be required by law or in connection with legal proceedings (including where we intend to take legal proceedings), or as may be necessary to establish, exercise or defend our legal rights.

Third parties and sponsors

To achieve the purposes set out in this privacy statement we may need to share your information and Learner File with our service providers (including our approved learning providers), agents, professional advisors and auditors and to your assessor(s). When you enrol on a course with a service provider in a learndirect centre, the service provider will be delivering and supporting your learning. Following enrolment via a centre or online, all of our approved service providers will have access to your name, date of birth, address, username, learner reference number and which learndirect courses you have enrolled on in the past as well as details relating to these learndirect courses to help us deliver our services to you. In a limited number of circumstances it may be necessary to allow a new Service Provider access to all your personal information for example if your existing Service Provider no longer provides learndirect services.

We may also give your information to third parties who may take over part or all of the learndirect business in the future, but only for the purposes outlined in this privacy statement. If your employer, trade organisation or other organisation is sponsoring or supporting you, we may give the personal information we have collected to your sponsor to monitor your learning.

Communications between you and your assessor using any of the tools or functions we make available to you (including unopened messages sent via our messaging system) may be monitored by learndirect staff for quality purposes. learndirect staff and auditors may also access these communications when we want to investigate or audit learner funding arrangements.

Referral Partners

If we have received your details as a referral from one of our partners we may be required by the referral partner to provide them with updates on the following areas:

Attendance, Progress, Achievement/completion, Outcome/destination or Withdrawal

Keeping you informed

We, and our approved service providers, will use your information to send you regular updates about: our services and materials; additions to the website; and specific activities such as customer feedback surveys and competitions.

If you enrol on a learndirect course you will periodically be sent customer feedback surveys. If you do not wish to be contacted for marketing purposes untick the relevant boxes on the ’contact permissions’ page. If at any time, you change your mind about receiving updates, you can change your preferences using "edit your details" on your learner home page.

If you are simply requesting a free information pack, you can invite us to send you updates by ticking the appropriate boxes on the "request more information" page. If you change your mind about us contacting you for this purpose, please ring us on 0800 101 901 or email us.

We will never use your sensitive personal data for marketing purposes without your express consent.


We, and our approved service providers, may use your personal data to process or to support any application made for funding associated with your learning. For these purposes we, or our approved service providers, will share the information you supply with the Skills Funding Agency in England. The Skills Funding Agency may in turn share it with the European Social Fund, or other government agencies that may provide funding for your course, including the Welsh Assembly Government for learners who enrol in Welsh centres. We may use a third party service to verify your identity for funding eligibility. If you are a learner between the ages of 16-19 years of age (or up to 25 years of age for learners with learning difficulties or disabilities), we are required by the Skills Funding Agency to notify Connexions when you leave, or intend to leave learning. We, or our approved service providers, may also share it with the Office for Standards in Education, Children’s Services and Skills (Ofsted) so that it can check our use of public monies. If you do not want us to use your personal data for these purposes, we will not be able to offer you the course at the reduced price.

At the point this information is collected you will be asked to indicate if you do not wish to be contacted by the Skills Funding Agency or its partners in respect of courses, surveys and research. You can change your choices at any time by talking to your assessor. Please read the SFA Privacy Notice below.

We, or the government agency providing funding for your course, may use your personal data and Learner File to investigate a suspected misuse of public monies or other fraudulent activity by any person relating to your learning activity. In doing so, we, or the government agency providing funding for your course, may disclose your information to other government agencies (e.g. the Department for Work and Pensions) to establish whether there has been any duplication of funding for your course. We may also contact you for the purposes of any such investigation.

SFA Privacy Notice 2016 to 2017

This privacy notice is issued by the Skills Funding Agency (SFA) on behalf of the Secretary of State for Business Innovation and Skills to inform learners of how their personal information will be used for statutory and other legitimate purposes by:

  1. The SFA, an executive agency of the Department of Business Innovation and Skills (BIS)
  2. BIS
  3. The Department for Education (DfE), including the Education Funding Agency
  4. Any successor bodies to these organisations
  5. By other bodies with whom data is shared by the SFA

BIS and the Department for Education (DfE) (largely for learners age 16-18) are data controllers of this information.

How We Use Your Personal Information

The personal information you provide is passed to the Skills Funding Agency, and the Department for Business, Innovation and Skills. Where necessary it is also shared with the Department for Education, including the Education Funding Agency. The information is used for the exercise of functions of these government departments and to meet statutory responsibilities, including under the Apprenticeships, Skills, Children and Learning Act 2009, and to create and maintain a unique learner number (ULN) and a personal learning record (PLR). The information you provide may be shared with other organisations for education, training, employment and well-being related purposes, including for research.

You may be contacted after you have completed your programme of learning to establish whether you have entered employment or gone onto further training or education.

You may be contacted by the English European Social Fund (ESF) Managing Authority, or its agents, to carry out research and evaluation to inform the effectiveness of the programme.

You can opt out from being contacted for other purposes by choosing a relevant option in the 'SFA Contract Restrictions' field which will be discussed with you when you register with learndirect.

Further information about use of and access to your personal data, and details of organisations with whom we regularly share data are available at:


We and/or the approved service providers delivering and supporting your learning are also required to provide statistics to all of the government agencies mentioned under the heading ‘Funding’ and to the Department for Business, Innovation and Skills, in order that they can carry out checks on our funding arrangements and our performance and for research and statistical purposes. This helps us, and our approved service providers, to maintain our funding. Where such information is supplied, it is provided in an aggregated manner so that whilst such authorities may be aware of, for example, the number, geographic location and sex of persons using learndirect, you cannot be personally identified from this information.

However, we may provide information that identifies you (your name, date of birth, address and postcode) to the Department of Work and Pensions so that they can check whether learndirect learners have progressed into employment and compile statistical information about such progression. You will not be identifiable from the statistical information compiled.

The information collected on Welsh speakers is passed in an aggregate manner to the Welsh Assembly. You cannot be personally identified from this information.

Requests for information

If you have not registered as a learner but are simply making an enquiry or request for information, we will use your personal information to reply to your enquiry or request. We will not use this information for marketing purposes without your permission or unless you invite us to do so.

Protecting your personal information

We are registered as a data controller (in our registered company name of learndirect Limited) in line with the UK Data Protection Act, 1998. As a registered data controller, we are required to take appropriate technical measures to protect your personal information including making a regular backup of our system and data. We have security measures in place to make sure any personal information we collect is secure. Your account is password protected and all information including your password is on a secure server, which only a limited number of employees and sub-contractors can access. All parties with access to your information are subject to confidentiality obligations. If you think someone else knows your password, or is using it, tell us immediately and change your password using the "change my password" option under "your details" on your learner home page.

Even though we take appropriate technical steps to protect your security, you should remember that data transmission over the internet cannot always be guaranteed as 100% secure so you use the website at your own risk.

Please look at the terms and conditions on this website for our policy on purging emails and webspace. The terms and conditions tell you when we may close your account and delete all your records, files and information.

Keeping your personal data

We keep personal data and Learner Files: for as long as is necessary to fulfil the purposes we collected it for; as required by law; or to enforce or defend legal claims.

Sometimes we will keep information that you have deleted, for example messages sent by you to your assessor, as a record of your learning experience. We will keep this information for a reasonable time.

If you are an Assessor

When you are registered as a assessor by a Service Provider you accept that all activity is undertaken by you for the provision of learndirect learning. Any comments or assessor notes placed by you on the learndirect system will be retained, are visible to the relevant learner and authorised personnel within learndirect Ltd and may be used as evidence of learner support.

Your rights

You have the right to:-

  • ask for a copy of all the information we hold about you (we will charge you a small fee for this) and to correct any inaccuracies. To obtain a copy of this information, please ring us on 0800 101 901 or email us;
  • challenge the accuracy of data held about you. You can amend your details on the website at any time using "your details" on your learner home page. If you are unable to amend the details please ring us on 0800 101 901 or email us to request a change
  • take steps to prevent your personal data being processed if the processing is likely to cause you substantial damage or substantial distress which is unjustified. If you want to exercise this right you must put your objection in writing by emailing us, specifying why the processing has this effect and state what you require learndirect to do to avoid causing damage or distress.

If you wish to make a data protection complaint go to: and-complaints/ and select Make a Complaint from the options provided.


Our website contains links to other websites. We are not responsible for the privacy policies of other sites and we advise you to read the privacy statement of every website that collects personal information from you.

Other information

You should note that if our business (or any part of it) is sold or transferred at any time, the information we hold may form part of the assets transferred although will still only be used in accordance with this privacy statement.