How we handle your data.

Who we are

This privacy policy applies to Reskill Wales Ltd (the "we", "us", "our" throughout), a Welsh training company registered in Wales, providing ReAct+ funded computer training masterclasses for adults.

What data we collect

Data you give us directly

When you fill in a form on our website (contact form, employer enquiry, eligibility check), we collect:

• Your name (first and last)
• Email address
• Phone number (optional)
• The contents of your message
• For employers: company name, role type, location, and start date preferences
• For learners: which course you're interested in, and your eligibility for ReAct+ funding

Data we collect automatically

When you visit our website, our hosting provider (Hostinger) automatically logs:

• Your IP address
• The pages you visit and when
• Your browser type, operating system, and device
• How you arrived at our site (e.g. search engine, direct link)

This information is collected for security and server-load purposes only. It's not linked to your identity unless you also fill in a form.

Why we collect it (legal basis)

We process your data under the following lawful bases (per UK GDPR Article 6):

• Consent (Article 6(1)(a)) — when you submit a form, you consent to us using your data to respond.
• Contract (Article 6(1)(b)) — when you enrol on a course, we need your data to deliver it, complete ReAct+ paperwork, and meet our obligations to you.
• Legitimate interest (Article 6(1)(f)) — to operate and improve our website, prevent fraud, and respond to enquiries.
• Legal obligation (Article 6(1)(c)) — to comply with Welsh Government ReAct+ reporting requirements, HMRC, and education regulators.

Who we share it with

We share your data only with parties who genuinely need it to deliver the service:

• Welsh Government / Careers Wales — to confirm ReAct+ eligibility and report on outcomes.
• Hostinger — our website hosting provider, who processes form submissions on our servers.
• Employers (with explicit permission) — if you ask us to introduce you to a hiring employer, we'll share your CV and details only with your prior approval.
• HMRC, Companies House, and education regulators — where we're legally required to.

We do not sell your data, share it for advertising purposes, or pass it to third-party marketing companies. Ever.

How long we keep it

• Contact form enquiries — 2 years from your last contact, then deleted.
• Enrolled learners — for the duration required by Welsh Government ReAct+ reporting (typically 6 years), then deleted.
• Employer hiring requests — 2 years, or until the contract ends, then deleted.
• Server logs — 30 days, then automatically rotated/deleted by Hostinger.

How we protect your data

We take reasonable technical and organisational measures to keep your data secure:

• All website traffic is encrypted with HTTPS (SSL/TLS)
• Form submissions are stored on UK-based hosting infrastructure
• Email accounts are protected by strong passwords and 2-factor authentication where available
• Access to learner records is limited to staff who genuinely need it
• We never email passwords or sensitive data unsecured

That said, no transmission over the internet is 100% secure. If a data breach affecting your personal data ever occurs, we'll notify you and the Information Commissioner's Office (ICO) within 72 hours as required by law.

Your rights under UK GDPR

You have a number of rights regarding your personal data. To exercise any of them, just email us at hello@reskillwales.co.uk:

• Right to be informed — you can ask what data we hold about you
• Right of access — you can request a copy of your data (a "subject access request") — we'll respond within 30 days
• Right to rectification — you can ask us to correct anything that's wrong
• Right to erasure — you can ask us to delete your data (unless we have a legal reason to keep it, like ReAct+ reporting)
• Right to restrict processing — you can ask us to stop using your data while we investigate a concern
• Right to data portability — you can ask for a machine-readable copy of your data to take elsewhere
• Right to object — you can object to specific uses of your data
• Rights related to automated decision making — we don't do this, but you have the right not to be subject to it

Complaints

If you're unhappy with how we've handled your data, please get in touch with us first — we'd rather hear about it and fix it than have you go elsewhere unhappy.

If we can't resolve it together, you have the right to complain to the Information Commissioner's Office:

• Website: ico.org.uk/make-a-complaint
• Phone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Cookies

This site uses a small number of cookies — fully detailed in our separate cookie policy. By default we set only essential cookies, and you must explicitly opt in to anything else.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. For material changes (e.g. new categories of data we collect, new third-party recipients), we'll display a notice on our homepage and re-ask for your consent where appropriate.

Contact us

For any questions about this policy or about your data:

• Email: hello@reskillwales.co.uk
• Phone: 01656 737349
• Post: Reskill Wales Ltd, Llynfi Enterprise Centre, Heol Ty Gwyn Industrial Park, Maesteg, Bridgend CF34 0BQ