Data Subject Access Request (DSAR) Policy

Trading Name: Vocational Training Hub

1. Introduction

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (as amended by the Data (Use and Access) Act), individuals have a statutory right to access the personal data that organisations hold about them. This process is known as a Data Subject Access Request (DSAR).

This learning platform, underlying system and technical infrastructure are owned by The Gtg Global Limited (Company Number: 15026292). All training data is processed in connection with services facilitated and delivered by TTH Group Limited (trading as Vocational Training Hub). Vocational Training Hub acts as the data controller and is committed to processing all DSARs in a lawful, transparent and timely manner.

2. Who Can Make a DSAR?

The right of data access belongs entirely to the individual learner, not their employer or sponsor. Any learner who has registered or completed training with Vocational Training Hub can submit a DSAR, regardless of:

3. Scope of Personal Data & Search Limits

You may request access to the personal data we actively process about you, which typically includes:

Statutory Search Limitations: In accordance with UK law, our obligation to locate and extract data is limited to conducting a reasonable and proportionate search of our active electronic systems. We are not required to provide:

4. How to Submit a DSAR

To request your data, please contact us using the details below. To avoid processing delays, please provide the following details to help us pinpoint your records:

Email: support@vocationaltraininghub.com

Required Details: Full name used during training, the email address linked to the learning platform, approximate dates of training and the name of your employer at the time (if applicable).

5. Identity Verification

To prevent identity theft and the unauthorised disclosure of personal information, we must verify your identity before releasing any data. We may request a confirmed piece of identification (e.g., a utility bill, driving licence or passport) or verification of specific account security questions. The statutory response window will not begin until your identity has been successfully verified.

6. Timeframes & "Stopping the Clock"
7. Fees

DSARs are provided completely free of charge. However, we reserve the right to charge a reasonable administrative fee if you request multiple physical copies of the same information, or if a request is legally deemed manifestly unfounded or excessive.

8. Withholding Data & Refusals

We may refuse to comply with a request, or withhold specific data fields, where permitted by data protection legislation (e.g., where a request is manifestly unfounded or repetitive, or where data is protected by legal professional privilege).

If we withhold data or refuse a request:

  1. We will issue a formal response explaining the specific legal exemption or reason relied upon.

  2. We will notify you of your right to utilise our Internal Data Protection Complaints Procedure or escalate the matter externally.

9. Delivery of Data

To maintain data security, your records will be compiled electronically into a secure, encrypted digital format (such as a password-protected PDF) and sent directly to your verified email address.

10. Internal Complaints & ICO Escalation

If you are dissatisfied with how your DSAR was handled, or if you wish to dispute a decision regarding withheld data, you have a statutory right to lodge an internal complaint with us.

The Vocational Training Hub is fully registered as a data controller with the ICO under registration name Vocational Training Hub and registration number: ZC181649.

Please direct all initial DSAR applications, queries, or internal data protection complaints to our team:

Support Hub

We are online