Internal Data Protection Policy

1. Policy Purpose and Scope

This policy sets out how Vocational Training Hub manages and protects personal data across our online and face-to-face vocational training operations. It applies to all internal employees, freelance trainers, and third-party infrastructure. This policy governs data collected through our proprietary Learning Management System (LMS), administrative operations and live course delivery.

2. Core Data Protection Principles

We process all personal data in strict compliance with the UK GDPR and Data Protection Act 2018 under the following core principles:

3. Lawful Bases for Processing Data

We rely on the following legal bases to process personal data across our services:

4. LMS Security and Access Scoping

To maintain security across our custom LMS platform:

5. Delivery Protocols (Virtual and Face-to-Face)

6. Enterprise Reporting and Data Disclosures

Personal data is not sold or rented. Data disclosures are restricted to:

7. Data Retention Schedule

Your personal data will not be stored for longer than is necessary to fulfil the operational purposes for which it was collected. We adhere to the following retention periods:

8. Data Subject Rights & Incident Management

Support Hub

We are online