Connect to Work Black Country Privacy Notice
- what personal information Shaw Trust (“the Trust”) collects about you,
- how and why we use your information,
- how your information is protected and shared, and
- the rights you have in relation to your personal data.
Your personal information
When you submit an Expression of Interest (EOI) or are referred to the Connect to Work programme, we may collect and process the following information about you:
- your name and contact details (such as email address, telephone number, postcode or address);
- date of birth and National Insurance number (where required);
- information about your employment status, work history, education or skills;
- information needed to assess eligibility for the programme; and
- information about barriers to work.
Further information may be collected during initial telephone contact to help us assess eligibility and understand your support needs.
Some of the information we collect may be special category data, such as information about a disability, long-term health condition, or other health-related factors that are relevant to the employment support you may receive. We only collect what is necessary and apply additional safeguards to protect this information.
Information Provided About You by a Third Party (Referrals)
In some cases, we may receive your personal information from a third party, for example:
- a Jobcentre or local authority service;
- a health or social care professional;
- a community or voluntary organisation supporting you; or
- another organisation involved in employment support.
Where this happens, we will use your information to contact you about the programme, assess eligibility, and provide support if you choose to engage. This processing is carried out in accordance with Article 14 of the UK GDPR.
Legal Basis for Processing
We rely on your consent under Article 6(1)(a) UK GDPR to collect and process your personal data at the Expression of Interest and initial engagement stage.
By submitting an Expression of Interest or agreeing to be referred, you are giving your consent for Shaw Trust to use your information to contact you, assess eligibility, and discuss participation in the programme.
Special category data
Where we process special category data (such as health or disability information), we rely on Article 9(2)(h) UK GDPR. This allows processing where it is necessary for the provision of health-related or employment support services and the assessment of appropriate support needs.
Withdrawing your consent
You can withdraw your consent at any time by contacting us using the details in this notice.
If you withdraw your consent before enrolling on the programme, we will stop processing your personal data and securely delete it unless there is a lawful reason for us to retain it (for example, audit or safeguarding requirements).
Withdrawing consent may mean that we are unable to progress your Expression of Interest or provide support through the programme.
How long we keep your data
We retain personal data only for as long as necessary:
- Expressions of Interest or referrals that do not progress are normally retained for up to six months, after which they are securely deleted.
- Individuals who go on to engage with the programme may have their data retained for up to six years following the end of their involvement, in line with funding, audit, and legal requirements.
Once retention periods expire, data is securely disposed of.
Sharing Your Information
To deliver the Connect to Work programme, we may share your information securely with:
- the programme commissioner or lead authority;
- the Department for Work and Pensions (for funding, monitoring and evaluation purposes);
- authorised delivery partners working with Shaw Trust under contract;
- employers, where relevant to your employment support and with your knowledge;
- IT and system providers supporting our secure systems; and
- auditors or regulatory bodies where required by law.
We do not sell your personal data and do not use it for automated decision-making.
Regional delivery and reporting to DWP
Connect to Work is a regional West Midlands initiative delivered by the West Midlands Combined Authority working with local authorities including Birmingham City Council, Sandwell Metropolitan Borough Council, Dudley Metropolitan Borough Council, Walsall Metropolitan Borough Council, Coventry City Council, and Solihull Metropolitan Borough Council, together with approved delivery partners.
As a delivery partner, Shaw Trust is responsible for delivering services to you and for handling your personal information while providing that support. All delivery partners are required to report information relating to Connect to Work to the Department for Work and Pensions (DWP).
This includes information about individuals enrolling onto Connect to Work for the purposes of checking and verifying eligibility and monitoring the services provided. This information is shared using a secure system owned and operated by DWP. Access to this system is limited to a small number of authorised officers.
Delivery partners work together to ensure that this reporting is carried out securely and in line with data protection requirements.
Your Rights
- You have the right to:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion or restriction of processing (where applicable);
- withdraw your consent at any time; and
- lodge a complaint with the Information Commissioner’s Office (ICO).
To exercise your rights, contact:
Data Protection Officer
data.protectionmailbox@shaw-trust.org.uk
Address: Shaw Trust, Black Country House, Rounds Green Road, Oldbury B69 2DG
When we Contact You (Referrals)
If we receive your information through an Expression of Interest or referral, we will contact you to:
- explain who we are and why we are contacting you;
- explain how we obtained your information; and
- provide you with a copy of this privacy notice.
Changes to this notice
This privacy notice may be updated from time to time to reflect changes to the programme or legal requirements. The most recent version will always be made available.