Skip to content

Privacy & Freedom of Information Notice


The purpose of this page is to provide a simple overview of the General Data Protection Regulation and Freedom of Information compliance information that the College is required to provide to the public, and in particular individuals who in some way are in communication or interacting with the College.

We hope that you find the information useful and suited to your scenario.

Student Data

This privacy notice is issued by the Education and Skills Funding Agency (ESFA) on behalf of the Secretary of State for the Department of Education (DfE) to inform learners about the Individualised Learner Record (ILR) and how their personal information is used in the ILR. Your personal information is used by the DfE to exercise our functions under article 6(1)(e) of the UK GDPR and to meet our statutory responsibilities, including under the Apprenticeships, Skills, Children and Learning Act 2009. Our lawful basis for using your special category personal data is covered under Substantial Public Interest based in law (Article 9(2)(g)) of GDPR legislation. This processing is under Section 54 of the Further and Higher Education Act (1992).

The ILR collects data about learners and learning undertaken. Publicly funded colleges, training organisations, local authorities, and employers (FE providers) must collect and return the data to the ESFA each year under the terms of a funding agreement, contract or grant agreement. It helps ensure that public money distributed through the ESFA is being spent in line with government targets. It is also used for education, training, employment, and well-being purposes, including research.

We retain your ILR learner data for 20 years for operational purposes (e.g. to fund your learning and to publish official statistics). Your personal data is then retained in our research databases until you are aged 80 years so that it can be used for long-term research purposes. For more information about the ILR and the data collected, please see the ILR specification at

ILR data is shared with third parties where it complies with DfE data sharing procedures and where the law allows it. The DfE and the English European Social Fund (ESF) Managing Authority (or agents acting on their behalf) may contact learners to carry out research and evaluation to inform the effectiveness of training.

For more information about how your personal data is used and your individual rights, please see the DfE Personal Information Charter ( ) and the DfE Privacy Notice ( )

If you would like to get in touch with us or request a copy of the personal information DfE holds about you, you can contact the DfE in the following ways:

Using our online contact form

By telephoning the DfE Helpline on 0370 000 2288

Or in writing to: Data Protection Officer, Department for Education (B2.28), 7 & 8 Wellington Place, Wellington Street, Leeds, LS1 4AW

If you are unhappy with how we have used your personal data, you can complain to the Information Commissioner’s Office (ICO) at:
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. You can also call their helpline on 0303 123 1113 or visit

Website Privacy

Google Analytics
The College website sets “first party” cookies through its use of Google Analytics. We use Google Analytics to provide us with anonymised (non-personal) site analytics, which in turn help us improve this website. Google Analytics sets or updates cookies only to collect data required for the reports. This means that all cookies set by Google Analytics cannot be altered or retrieved by any service on any domain other than Further detailed information on Google Analytics cookies can be found here.

Facebook Pixel
We use a Facebook Pixel on the website. This method of conversion tracking helps us measure the return on investment of our Facebook Ads by reporting on the actions people take after viewing those ads. We use the conversion pixel to retarget adverts towards people who have visited the college website on occasion.

To opt out of these, use this link to update your settings on Facebook.

Our website uses cookies – these are small text files that are placed on your device to help this website to provide a better user experience. In general, cookies are used to retain user preferences, store information for things like your saved courses, and provide anonymised tracking data to third party applications like Google Analytics. As a rule, cookies will make your browsing experience better. However, you may prefer to disable cookies on this site and on others. The most effective way to do this is to disable cookies in your browser. We suggest consulting the Help section of your browser or taking a look at the All About Cookies website which offers guidance for all modern browsers. All About Cookies

Third party links
You might find links to third party websites on our Website. These websites should have their own privacy policies which you should check. We do not accept any responsibility or liability for their policies whatsoever as we have no control over them.

Subject Access Requests

By law, an individual has the right to access the information that an organisation holds about them.
Accessing personal data in this way is known as making a Subject Access Request.

You are entitled:

  • To be informed whether your personal data are being processed by Suffolk New College
  • To be sent a copy of your personal data, subject to any possible exemptions and the removal of other people’s personal data as appropriate.
  • To be sent certain information about your personal data

Your subject access request to the College may be submitted in whatever format you wish, but we have created a standard Subject Access Request Form for your convenience.
Using the form will help us process your request more quickly.

General Subject Access Request Form

On receipt of your request, we will let you know the statutory deadline by which we will reply. If, on receipt of our response, you consider that the College has not dealt correctly with your request, please get in touch using the contact information below. If you are still not satisfied, you should contact the Information Commissioner’s Office.

Freedom of Information

The Freedom of Information Act 2000 applies to all “public authorities” as defined in the Act, including Suffolk New College. It gives a general right of access to all types of recorded information held by us, sets out exemptions from that right and places a number of obligations on us. Under the Act a public authority has two main responsibilities:

  • Production of a guide to the information it makes publicly available commonly known as a “Publication Scheme”; and
  • Dealing with individual written requests for information and providing the information if it is not already published, or exempt from release.

The College’s Freedom of Information Policy, including our publication scheme and how to make a Freedom of Information request can be found here: Freedom of Information Policy


Should you have a question about the data we store about you, contact our Data Protection Lead:

Mary Gleave
Suffolk New College
Rope Walk
Ipswich, Suffolk