Privacy Notice
This privacy notice explains what you can expect us to do with your personal information.
What This Notice Covers
Contact details
What information we collect, use, and why
Lawful bases and data protection rights
Where we get personal information from
How long we keep information
How to complain
Contact Details
Telephone: +44 7350 293596
Email: contact@uptrail.co.uk
What Information We Collect, Use, and Why
Student Education and Welfare
We collect or use the following information for student education and welfare:
Names and contact details for students or children
Gender
Date of birth
Right to work information
Dealing With Queries, Complaints or Claims
We collect or use the following personal information for dealing with queries, complaints or claims:
Names and contact details
Purchase or service history
Financial transaction information
Information Updates and Marketing
We collect or use the following information for information updates or marketing purposes:
Names and contact details
Marketing preferences
Website and app user journey information
Recruitment
We collect or use the following information for recruitment purposes:
Contact details, such as name, address, telephone number or personal email address
Date of birth
National Insurance number
Copies of passports or other photographic identification
Employment history, such as job applications, employment references or secondary employment
Education history, including qualifications
Right to work information
Details of any criminal convictions, including DBS, AccessNI or Disclosure Scotland checks
Security clearance details, including basic checks and higher-level security clearance
Compliance With Legal Requirements
We collect or use the following information to comply with legal requirements:
Identification documents
Lawful Bases and Data Protection Rights
Under UK data protection law, we must have a lawful basis for collecting and using your personal information.
There are several possible lawful bases under the UK GDPR. You can find more information about lawful bases on the Information Commissioner’s Office (ICO) website .
The lawful basis we rely on may affect your data protection rights. Your principal rights are outlined below.
Your Right of Access
You have the right to ask us for copies of your personal information.
You may also request other information, such as details about where we obtained your personal information and who we share it with. Certain exemptions may apply, which means you may not receive all of the information you request.
Your Right to Rectification
You have the right to ask us to correct personal information that you believe is inaccurate and to complete information that you believe is incomplete.
Your Right to Erasure
You have the right to ask us to delete your personal information in certain circumstances.
Your Right to Restriction of Processing
You have the right to ask us to restrict or limit how we use your personal information in certain circumstances.
Your Right to Object to Processing
You have the right to object to the processing of your personal information in certain circumstances.
Your Right to Data Portability
You have the right, in certain circumstances, to ask us to transfer personal information that you provided to us to another organisation or directly to you.
Your Right to Withdraw Consent
Where we rely on your consent as our lawful basis for processing your personal information, you have the right to withdraw your consent at any time.
If you make a data protection rights request, we will respond without undue delay and, in any event, within one month, subject to any applicable extensions permitted by law.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
Our Lawful Bases for the Collection and Use of Your Data
Student Education and Welfare
Consent – We have permission from you after providing you with the relevant information. Where consent is relied upon, you have the right to withdraw your consent at any time.
Dealing With Queries, Complaints or Claims
Consent – We have permission from you after providing you with the relevant information. Where consent is relied upon, you have the right to withdraw your consent at any time.
Information Updates and Marketing
Consent – We have permission from you after providing you with the relevant information. Where consent is relied upon, you have the right to withdraw your consent at any time.
Recruitment
Consent – We have permission from you after providing you with the relevant information. Where consent is relied upon, you have the right to withdraw your consent at any time.
Compliance With Legal Requirements
Consent – We have permission from you after providing you with the relevant information. Where consent is relied upon, you have the right to withdraw your consent at any time.
Where We Get Personal Information From
Directly from you
From publicly available sources
How Long We Keep Information
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including meeting applicable legal, regulatory and contractual obligations.
Our general retention periods are set out below.
Candidate and Student Data
Examples include CVs, application information and related records.
We retain this information for up to 1 year after the last meaningful interaction, unless a longer period is required by law or has been explicitly agreed.
Client Data
Examples include contracts and business communications.
We retain this information for up to 2 years after the end of the business relationship, subject to any longer retention period required for legal, tax, accounting or regulatory purposes.
Complaint or Claim Information
We retain information relating to complaints or claims for up to 2 years from the date the matter is resolved, unless a longer period is required for legal or regulatory purposes.
Marketing Preferences and Contact Information
We retain marketing preferences and relevant contact information until you withdraw your consent or unsubscribe.
After you unsubscribe or withdraw consent, we may retain limited information where necessary to record and respect your opt-out request.
After the applicable retention period has ended, personal information will be securely deleted or anonymised where appropriate.
For further information about how long we keep your personal information, or the criteria we use to determine retention periods, please contact us using the details above.
How to Complain
If you have concerns about how we use your personal information, please contact us using the contact details at the top of this privacy notice.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal information.
Further information about your data protection rights and how to make a complaint is available on the ICO website .