Select Page

Privacy Statement

This privacy statement explains how Together Enabled Ltd collects, uses, and shares personal data.

1 Purpose of Processing and Legal Basis

We collect, hold, and process your personal data based on legitimate interests, as outlined in the UK Data Protection Act 2018. We may contact you regarding requested services and to verify your identity. This is essential for managing your registration, coordinating awarded support, and invoicing funding organisations.

Additionally, we process your data to meet legal requirements, such as record-keeping for the Student Loans Company [SLC]. In some cases, we may ask for sensitive information about health or disability so as to provide you with appropriate support.

2 Categories of Personal Data

We collect and process personal data by various means, including phone calls, emails, online forms and feedback from customer surveys, so that we can enhance our services.

We gather personal identification details and support-related information from staff, support workers, and service users. With your permission, we may also collect disability information and obtain the Needs Assessment Report [NAR] from the student or your university.

3 How We Keep Your Information Secure

We prioritise the privacy and security of your information. Your personal data are stored securely, with access limited to authorised individuals, and are only kept as long as necessary to meet our legal obligations.

To protect your information, we adhere to appropriate security measures. However, online transmissions are known to carry inherent risks. In the event of a security breach, we will notify you as necessary, either electronically or by means of a notice on our website.

When sharing your data with third parties, we take the precautions of ensuring they have adequate security measures in place. Your information may be shared with your support worker, your university or institution in order to facilitate your support and also with funding organisations for invoicing purposes.

4 Retention Period

We retain personal data only as long as necessary for the intended purpose. Individuals can request the deletion of their data at any time. Retention periods are determined by factors such as legal obligations, potential disputes, and guidance from data protection authorities. Data will be securely erased once they are no longer needed.

Individuals have the right to access, inquire about, and update their personal information. They also have the right to understand how Together Enabled Ltd meets its obligations under data protection legislation.

We aim to process Subject Access Requests for personal information within one calendar month of receiving a request, subject to verification of identity. If exceptional circumstances prevent meeting this timeline, the individual will be contacted directly to discuss the situation.

The Right to Access is one of many rights accorded individuals under data protection law.

The complete list of rights includes-

  • The Right to be Informed
  • The Right to Access
  • The Right to Rectification
  • The Right to Erasure
  • The Right to Restrict Processing
  • The Right to Data Portability
  • The Right to Object
  • Rights in relation to Automated Decision-Making and Profiling

We uphold all individuals’ rights under the Data Protection Act 2018.

5 Contact Information of the Data Controller

Together Enabled Ltd is the data controller responsible for data protection. If you have concerns about personal data or want to exercise your rights, you can contact us. If you are dissatisfied with our response, please request a review. If you are still unsatisfied, you can complain to the Information Commissioner’s Office (ICO) via their website.