Back to National Institute of Teaching

Privacy Notices

Get in touch

info@niot.org.uk
@NatInstTeaching

For our website

Introduction

The National Institute of Teaching is committed to protecting the privacy and security of personal data.

The General Data Protection Regulation (GDPR) 2018 and Data Protection Act 2018 (DPA) sets out the law relating to data protection and the way we handle your personal data is carried out in accordance with that law.

This privacy notice relates to the personal information we collect about you when you visit our website, complete one of the expressions of interest forms on our website or enrol on one of our programmes.

This privacy notice sets out the following information:

  • Our details
  • DPO details
  • The personal data we collect
  • Why we use this data
  • Special Category Data
  • Our legal basis for using this data
  • Collecting this personal data
  • How we store this data
  • Data Sharing - Who we share any personal data with and why
  • Analytics
  • Cookies
  • Security and Performance
  • For our Research
  • Transferring data internationally
  • Your rights
  • Complaints

Our details

We are the National Institute of Teaching (NIoT), a new specialist teacher development provider in England. Co-founded by the Harris Federation, Oasis Community Learning, Outwood Grange Academies Trust and Star Academies via the vehicle the School-Led Development Trust, NIoT will provide innovative teacher and school leader development programmes.

The National Institute of Teaching is the controller for the personal information we process, unless otherwise stated. This means that we are responsible for deciding how we hold and use the personal information we collect about you.

You can contact us info@niot.org.uk

DPO details

It is the role of the Data Protection Officer to monitor internal compliance with data protection legislation and inform and advise the National Institute of Teaching of its data protection obligations.

If you have any questions about the information in this privacy notice or how we collect and process your personal data, please contact our Data Protection Officer.

Our Data Protection Officer is Shaun Dillon. You can contact the DPO at s.dillon@niot.org.uk

The personal data we collect

Expression of interest forms:

Personal data that we may collect using the expression of interest forms via our website and social media:

  • Your personal data - Name, date of birth, address
  • Your contact information - Email address, telephone number, contact preferences
  • Your current employment status - Details of whether you are currently employed by a school in England
  • Your teacher information - DfE teacher reference
  • Your school information - Name of your current school, school URN, school contact number and address
  • LEA area, school setting type, school phase, school specialism, number of pupils on the roll, percentage of free school meal pupils
  • Your work experience - employment history, current job role/title, length of time in current post, leadership responsibilities, reference details (full name and email)
  • Your educational records – qualification levels, grades
  • Your status – your right to live and work in the UK, whether you currently hold teacher status
  • Invoice information – who is paying for the course, their contact name, email address, telephone number and address
  • Your preferences – which programme you are interested in, which phased of education you are looking at,
  • Special requirements – disabilities, health concerns or learning requirements that mean that you require support to complete an application or enrol with us.

Application/enrolment on programmes:

Personal data that we may collect from you if you complete an application/enrolment to one of our programmes will be the same as the above and the following:

  • Programme and campus information – the programme and campus location you are applying for
  • Personal information – any previous surnames you have been known by
  • Special requirements – allergies, dietary requirements or additional support needs
  • Programme suitability statement – the information you chose to provide to us in support of your application to enrol on the programme
  • Marketing information – how you heard about our programme, whether we can contact you with details of other programmes
  • Financial information – student loan information, account and payment information
  • HR information – for some programmes (e.g. The ITT) a personnel file for all trainees to include contract information, financial/payment information, performance management information, appraisal records, grievance records (where applicable)

Special category data that we may collect about you if you enrol on one of our programmes:

  • Medical and health information
  • Ethnicity
  • DBS criminal record checks information

When you submit an expression of interest form or registering for information, you are opting in to receive email responses from the National Institute of Teaching (NIoT). If you wish to opt out of future emails, you can do so at any time by clicking the “unsubscribe” button located at the bottom of our emails.

Why we use this data

NIoT collects personal data in order to manage its functions as a provider of education.

We use this data to:

  • Contact you with information about the programmes that we offer
  • Enrol you on to the programme you have selected to undertake
  • Ensure you meet the entry requirements for the programme you are interested in
  • Provide assistance with your application or during your programme of study
  • Provide reasonable adjustments and meet our obligations under the Equality Act 2010
  • Administer admissions waiting lists
  • Carry out research for quality assurance and standards of our programmes
  • Carry out research to improve our programmes
  • Comply with the UK immigration and Visa requirements
  • Meet your needs in terms of any special requirements or medical/health requirements during your programme of study
  • Comply with our obligations set out by the DfE, regulators and other associated bodies.

Special Category Data

If we collect and process any special category data such as ethnicity, religion or health information we will ensure that this is subject to additional safeguards and greater protection.

We will do this by ensuring that this information is not held in multiple locations on our secure systems and is not shared unless this is absolutely necessary.

Our lawful basis for processing special category data will be pursuant to Article 6(1)(b) UK GDPR where the processing is necessary for the performance of a contract with you as a learner enrolled on one of our programmes or in order to enrol you on to one of our programmes.

Pursuant to Article 9(2)(a) UK GDPR, processing of your special category data is carried out with your consent.

Extra care will be taken when collecting, processing or sharing special category data and, unless there is a legal reason preventing it, you will be informed before we share the data with any external organisations.

Our legal basis for using your data

We only collect and use your personal data when the law allows us to. Most commonly, we process it where:

  • You have provided us with your information in order to express your interest in, or enrol on our programmes

Our main lawful basis for processing this information, pursuant to Article 6(1)(b) UK GDPR, is that we have a contractual obligation to offer the programme that you have enrolled on.

We may also process your personal information when we have your specific consent to do so, for example, where you have provided us with your marketing preferences.

Where you have provided your consent, you may withdraw or amend this at anytime by contacting us.

With regards to the website we maintain and monitor the performance of our website and constantly look to improve the site and the services we offer to our users.

The lawful basis we rely on to process your personal data is:

Article 6(1)(a) UK GDPR – which states that we will process your personal data with your consent. For example, when we require your consent for the optional cookies we use.

If we process your personal data on the lawful basis of consent, you have the right to amend that consent and change your preferences at any time. Please refer to the information under the ‘Cookies’ section above.

Article 6(1)(f) UK GDPR – which allows us to process personal data when it is necessary for our legitimate interests. For example, in order to maintain the integrity of our website, IT systems and the continuity of our business.

Collecting this personal data

We collect information directly from you when you submit an expression of interest form via our website or apply to one of our programmes.

How we store this data

We store all personal information on our secure network, using the AWS Amazon EU (Ireland) Cloud based secure storage.

All personal information is stored securely within the UK.

Whenever we collect or process your personal data, we will only keep it for as long as is necessary for the purpose for which it was collected. Details of how long we store your personal information are contained in our Retention Policy.

NIOT’s Registers of Processing Activities (ROPAs) includes retention periods and will indicate the types of data which are archived for historical or statistical purposes.

Data sharing – who we share any personal data with and why

We do not, and will not, sell your data to third parties.

NIoT will only share your personal data with third parties, if we are allowed or required to do so by law.

Where information is shared with third parties, we will seek to share the minimum amount of information necessary to fulfil the relevant purpose.

We may share your personal information with the following:

  • Third party contractual service providers: to ensure the smooth running of our services and systems.
  • Third party agents or service providers appointed by NIoT: to enable us to operate effectively.
  • The DfE
  • Validating partners for example but not limited to the University of Birmingham, to enable us to register you for a programme and for an award
  • Third party appointed researches: to enable us to continue to provide the highest quality programmes (any personal information shared would be anonymised or pseudo-anonymised).

Analytics

When you visit our website www.niot.org.uk, we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns.

The information collected in this way includes:

  • IP address
  • Pages visited
  • Web browser
  • Search criteria entered
  • Previous web pages visited
  • Social media username (if you have interacted with us using such channels)

We do this to find out such things as the number of visitors to the various parts of the site and to make improvements to our service to ensure we are providing the best visitor experience.

This information is only processed in a way that does not directly identify anyone.

The information collected is classed as personal data as Google assigns a unique identifier to each visitor. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

We have measures to protect the information collected, which include: limiting the amount of data that is collected, setting a retention schedule for the data collected, restricting access to our Google Analytics data and regularly reviewing our use of analytics.

The analytics data is captured by Google Analytics 4 which anonymises the data.

Cookies

We use cookies on two types of cookies on our website: essential cookies and optional cookies.

Cookies are small text files that are placed on your computer by the websites that you visit.

Essential cookies - most of cookies we use are necessary for the functionality, security and accessibility of the website.

Optional cookies – we use some cookies to track your activity when you visit our site for example, the number and type of pages visited and where visitors have come to the site from. We use the information gathered to improve our website and user experience. The cookie’s collect information in an anonymous form.

We do not collect or store your personal information so the analytics data cannot be used to identify who you are.

We do not allow Google to use or share the data we collect.

We use a cookies tool on our website to gain consent for the optional cookies we use.

Alternatively, if you would prefer to restrict, block or delete cookies from us, or indeed any other website, you can use your browser preferences to do so.

If you wish to opt out of all Google Analytics tracking then you can do so, here: https://tools.google.com/dlpage/gaoptout.

Security and performance

We use a third-party secure web hosting service, Amazon AWS EU (Ireland) which offers industry leading encryption and security of data in transit and at rest. AWS developed a security assurance programme using best practice for global privacy and data protection.

A record of traffic information is retained for a period of 12 months

For our research

If you are responding to a survey, are part of a focus group, or attend a research related event

Introduction

The National Institute of Teaching is committed to protecting the privacy and security of personal data.

The General Data Protection Regulation (GDPR) 2018 and Data Protection Act 2018 (DPA) sets out the law relating to data protection and the way we handle your personal data is carried out in accordance with that law.

This privacy notice relates to the personal information we collect about you when you respond to a survey, are part of a focus group or an attend event.

For information about the data we collect when you visit our website, please refer to the ‘privacy notice for visitors to our website’.

This section of the privacy notice sets out the following information with regards to research:

  • The personal data we collect
  • Why we use this data
  • Special Category Data
  • Our legal basis for using this data
  • Collecting this personal data
  • How we store this data
  • Data Sharing - Who we share any personal data with and why
  • Transferring data internationally
  • Your rights
  • Complaints

The personal data we collect

Responding to a survey, completing a quiz, being part of a focus group or attending a research related event such as observations conducted for research purposes. We provide activity-specific participant information sheets for our research projects that involve primary data collection.

Personal data that we may collect using when you respond to a survey, are part of a focus group or attend an event:

  • Your personal data - Name, date of birth, address, gender
  • Your contact information - Email address, telephone number, contact preferences
  • Your current employment status - Details of whether you are currently employed by a school in England
  • Your teacher information - DfE teacher reference
  • Your school information - Name of your current school, school URN, school contact number and address
  • LEA area, school setting type, school phase, school specialism, number of pupils on the roll, percentage of free school meal pupils
  • Your work experience - employment history, current job role/title, length of time in current post, leadership responsibilities, reference details (full name and email)
  • Your educational records – qualification levels, grades
  • Your NIoT training records – subject specialism, training and assessment data.
  • Your status – your right to live and work in the UK, whether you currently hold teacher status
  • Special requirements – disabilities, health concerns or learning requirements that mean that you require support to complete a survey, are part of a focus group or attend an event.

Our legal basis for using your data

The purpose for collecting your data is to carry out research, assessment and evaluation projects to enable us to better understand how to improve teacher education, both nationally and internationally.

We may also use contact details to send communications that promote the NIoT’s aims and services. We will inform you when we wish to use your data for this purpose and collect your explicit consent when required, which can be withdrawn at any time. We only collect and use your personal data when the law allows us to.

  • The GDPR lawful basis we rely on to process your personal data is legitimate interests (GDPR Article 6(1)(f). These interested are as per the above purposes.

We may also process your personal information when we have your specific consent to do so, for example, where you have provided us with your marketing preferences.

Where you have provided your consent, you may withdraw or amend this at anytime by contacting us.

Collecting this personal data

We collect information directly from you when you respond to a survey, complete a quiz, or attend a research related event, such as observations conducted for research purposes respond to a survey, are part in a focus group or sign up to take part in an event. We may also collect information indirectly through your NIoT training records, such as your subject specialism, training or assessment data.

How we store this data

We store all personal information on our secure network, using the AWS Amazon EU (Ireland) Cloud based secure storage.

All personal information is stored securely within the UK.

Whenever we collect or process your personal data, we will only keep it for as long as is necessary for the purpose for which it was collected. Details of how long we store your personal information are contained in our Retention Policy.

NIOT’s Registers of Processing Activities (ROPAs) includes retention periods and will indicate the types of data which are archived for historical or statistical purposes.

Data sharing – who we share any personal data with and why

We do not, and will not, sell your data to third parties.

NIoT will only share your personal data with third parties, if we are allowed or required to do so by law.

Where information is shared with third parties, we will seek to share the minimum amount of information necessary to fulfil the relevant purpose.

We may share your personal information with the following:

  • Third party contractual service providers: to ensure the smooth running of our services and systems.
  • Third party agents or service providers appointed by NIoT: to enable us to operate effectively.
  • The DfE
  • Third party appointed researchers: to enable us to continue to provide the highest quality programmes.

Transferring data internationally

Where we transfer personal data to a country or territory outside the European Economic Area, we will do so in accordance with data protection law and ensure that the organisation outside the EEA is compliant with the GDPR. We do not currently transfer personal data to a country outside the EEA and don’t propose to in the future but will liaise directly with any individuals if this becomes necessary.

Your rights

Your right of access:

Individuals have a right to make a ‘subject access request’ to gain access to personal information that the NIoT holds about them.

If you make a subject access request, and if we do hold information about you, we will:

  • Give you a description of the data we hold,
  • Tell you why we are holding and processing it, and how long we will keep it for,
  • Explain where we got it from, if not from you,
  • Tell you who it has been, or will be, shared with,
  • Let you know whether any automated decision-making is being applied to the data, and any consequences of this
  • Give you a copy of the information in an intelligible form.

Individuals also have the right for their personal information to be transmitted electronically to another organisation in certain circumstances.

Your other rights:

  • Your right to rectification – you have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information that you think is incomplete. This right always applies.
  • Your right to erasure – you have the right to ask us to erase your personal information in certain circumstances.
  • Your right to restriction of processing – you may have the right to ask us to restrict the processing of your information in certain circumstances.
  • Your right to object to processing – you have the right to object to processing if the process forms part of our legitimate interests.
  • The right to object to the processing of your information – you have the right to object to the processing of your information.

If you would like to make a request, please contact our Data Protection Officer (see details above in the ‘Our DPO’ section).

Complaints

We take any complaints about our collection and use of personal information very seriously.

If you think that our collection or use of personal information is unfair, misleading or inappropriate, or have any other concern about our data processing, please raise this with us in the first instance.

To make a complaint, please contact our DPO.

Alternatively, you can make a complaint to the Information Commissioner’s Office:

  • Report a concern online at https://ico.org.uk/concerns/
  • Call 0303 123 1113

Or write to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Professional development at every stage

From new teachers to school trust CEOs - join a community of educators

Find out more about our programmes
We use cookies to provide certain features, enhance the user experience. By clicking on "Agree and continue", you declare your consent to the use of these cookies. Below, you can change the settings or revoke your consent (in part if necessary) and these will be saved for future use. For further information, please refer to our Privacy Policy.