Last updated: October 2026
In short: we use your information to answer your questions, consider applications and deliver your training. We never sell it, we keep it secure, and you can ask to see, correct or delete it at any time by emailing zak@nextsteptrainingltd.co.uk.
Introduction
This notice explains how Nextstep Training Ltd collects, uses, shares and protects personal information. It follows the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
It applies to everyone whose information we handle: people who enquire or apply for a vacancy, learners and apprentices, employers and their staff, partners, and visitors to this website.
We make sure personal information is:
- used fairly, lawfully and transparently;
- collected for clear purposes and not used for anything else;
- limited to what we need;
- kept accurate and up to date;
- kept no longer than necessary;
- kept secure and confidential.
Who we are
Nextstep Training Ltd is the data controller for the information described in this notice. We are registered with the Information Commissioner’s Office (ICO) under number Z2884210.
- Address
- Unit A2 Ment House, 1B Mentmore Terrace, London E8 3DQ
- Data Protection Officer
- Zak Vesamia · zak@nextsteptrainingltd.co.uk
- General enquiries
- info@nextsteptrainingltd.co.uk · 020 7247 5497
What information we collect
Information you give us
- Enquiries: your name, email address, phone number, employer, the programme you are interested in and your message.
- Vacancy applications: your name, email address, phone number, postcode, date of birth, Maths and English grades, when you can start, whether you have the right to work in the UK, how you heard about the role, your cover note and your CV.
- Enrolment and your programme: the details we need to enrol you and deliver your apprenticeship, such as contact details, National Insurance number, previous qualifications, employment details, progress, attendance and assessment records.
- Newsletter and guides: your email address and the guide you asked for.
- Website chat: the messages you send and, if you ask to speak to a person, your name and email address.
- Employers: contact details of the people we work with, and information about the roles and training you arrange with us.
Special category information
Some information is more sensitive, such as health, disability, ethnicity or criminal records. We only collect it where the law allows, for example for safeguarding, equality monitoring or government funding requirements, and we protect it with extra care.
Information from other sources
We may receive information about you from your employer, the Department for Education and its agencies (including the Learning Records Service), awarding and end-point assessment organisations, and recruitment websites where you have applied for one of our vacancies.
How we use your information
- to reply to your enquiry and give you information and advice;
- to consider your application, contact you about it and tell you the outcome;
- to enrol you, deliver and support your apprenticeship or course, and record your progress and achievement;
- to meet our funding, audit and reporting duties to the Department for Education and other regulators;
- to keep learners and staff safe, including Prevent duties;
- to work with employers on recruitment and training;
- to send you updates you have asked for, such as our newsletter;
- to run, secure and improve this website and our services.
Our legal basis
We only use personal information where the law allows. We rely on:
Artificial intelligence
Our website chat uses an AI model, run by Cloudflare, to answer general questions from the information published on this website. Your messages are processed to produce a reply and are saved so our team can follow up if you ask to talk to a person.
The AI does not make decisions about you. It is not used to assess applications, eligibility or progress. Please do not share sensitive information in the chat.
How we protect and store it
- Information sent through this website is encrypted in transit and stored in secure, access-controlled systems.
- CVs are kept in private storage that only authorised staff can open, after signing in through Cloudflare Access.
- Staff are trained in data protection, use strong passwords and multi-factor authentication, and only see what they need for their role.
- Paper records are kept in locked cabinets and shredded securely when no longer needed.
- Any suspected data breach is investigated straight away and, where required, reported to the ICO within 72 hours.
How long we keep it
We keep information only for as long as we need it, in line with our Data Retention Schedule:
- learner and apprenticeship records for the period required by the Department for Education’s funding and audit rules;
- safeguarding records for the periods set out in our Safeguarding, Child Protection and Prevent Policy;
- enquiries, vacancy applications and chat conversations only as long as needed to respond and to keep a fair record of recruitment.
When information is no longer needed it is securely deleted or destroyed. You can ask for the retention period that applies to your information at any time.
Automated decision-making
We do not make decisions about you using only automated processing. Applications, enrolments and assessments are always reviewed by a member of our team.
Your rights
Under UK data protection law you have the right to:
- Access a copy of the information we hold about you;
- Correct information that is wrong or incomplete;
- Erase your information in some circumstances;
- Restrict how we use it while a concern is checked;
- Object to our use of it, including for direct marketing;
- Move information you gave us to another organisation (data portability);
- Withdraw consent where we rely on it.
To make a request, contact our Data Protection Officer at zak@nextsteptrainingltd.co.uk or write to us at the address above. There is normally no charge. We reply within one month; if your request is complex we may need up to two more months, and we will tell you why within the first month.
Department for Education privacy notice
If you are a learner or apprentice, we share information about you and your learning with the Department for Education (DfE) and its agencies. They use it to fund, monitor and improve education and training, and it is recorded in the Individualised Learner Record and the Learning Records Service.
The DfE is the data controller for this information. You can read how it uses your data on GOV.UK, and we give you its full privacy notice when you enrol.
Concerns and complaints
If you are unhappy with how we have handled your information, please contact our Data Protection Officer first at zak@nextsteptrainingltd.co.uk or info@nextsteptrainingltd.co.uk. You can also read our data protection and complaints policies.
You have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes to this notice
We review this notice at least once a year and whenever our use of personal information changes. The date at the top shows when it was last updated.