Privacy Policy

Our privacy notice tells you how we will use any personal data you give to become a beneficiary or client.

This privacy policy applies between you, the User of this Website and Homefield College, the owner and operator of this Website. Homefield College takes the privacy of your information very seriously. This privacy policy applies to our use of any and all Data collected by us or provided by you in relation to your use of the Website.

Definitions

Data – All personal information that you submit to Homefield College via the Website or through other interactions. This includes personal data as defined under UK Data Protection Laws.

Cookies – A small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features of the Website. Details of the cookies used by this Website are set out in our Cookie Notice.

Data Protection Laws – Any applicable legislation relating to the processing of personal Data, including the UK GDPR (General Data Protection Regulation) and the Data Protection Act 2018 (DPA 2018), as well as the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR).

Homefield College, we or us – Homefield College, a registered charity in England and Wales with charity number 1114995, whose registered office is at 217 Loughborough Road, Mountsorrel, Leicestershire, LE12 7AR.

User or you – Any third party that accesses the Website and is not either (i) employed by Homefield College and acting in the course of their employment or (ii) engaged as a consultant or otherwise providing services to Homefield College and accessing the Website in connection with the provision of such services.

Website – The website that you are currently using (https://www.homefieldcollege.ac.uk) and any sub-domains of this site unless expressly excluded by their own terms and conditions.

Interpretation

  1. The singular includes the plural and vice versa.

  2. References to sub-clauses, clauses, schedules or appendices are to sub-clauses, clauses, schedules or appendices of this privacy policy.

  3. A reference to a person includes firms, companies, government entities, trusts and partnerships.

  4. “Including” is understood to mean “including without limitation”.

  5. Reference to any statutory provision includes any modification or amendment of it.

  6. The headings and sub-headings do not form part of this privacy policy.

Scope of this Privacy Policy

This privacy policy applies only to the actions of Homefield College and Users with respect to this Website. It does not extend to any websites that can be accessed from this Website including, but not limited to, any links we may provide to social media platforms or external organisations.

For purposes of the applicable Data Protection Laws, Homefield College is the “data controller”. This means that Homefield College determines the purposes for which, and the manner in which, your Data is processed.

Data Collected

We may collect the following Data, which includes personal Data, from you:

  • contact Information such as name, email addresses and telephone numbers and postal address

  • demographic information such as postcode, preferences and interests

  • technical data such as IP address, web browser type and version, operating system, referral source and length of visit to pages on our site.

Lawful Basis for Processing Data

Under the UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

  1. Consent: Where you have explicitly opted in or requested specific communications (e.g., subscribing to newsletters or submitting contact forms). You may withdraw consent at any time.
  2. Legitimate Interests: Where processing is necessary for our legitimate educational or operational interests, provided your fundamental rights do not override those interests (e.g., handling general enquiries or improving web design and security).
  3. Legal Obligation: Where processing is necessary to comply with legal or regulatory statutory obligations.
  4. Performance of a Contract: Where processing is necessary to enter into or perform a contract with you (e.g., beneficiary, student, or client applications).

How we Collect Data

We collect Data in the following ways:

  • Data given to us by you: When you contact us through the Website, telephone, email, post, application forms, or any other means or when you elect to receive marketing communications from us.

  • Data collected automatically: As you navigate through the site, we collect technical information regarding your connection, device and site usage patterns.

Data that is Collected Automatically

To the extent that you access the Website, we will collect your Data automatically, for example:

  • we automatically collect some information about your visit to the Website. This information helps us to make improvements to Website content and navigation and includes your IP address, the date, times and frequency with which you access the Website and the way you use and interact with its content.

  • we will collect your Data automatically via cookies, in line with the cookie settings on your browser. For more information about cookies, and how we use them on the Website, see our Cookie Notice.

Our Use of Data

Any or all of the above Data may be required by us from time to time in order to provide you with the best possible service and experience when using our Website. Specifically, Data may be used by us for:

  • Internal record keeping.
  • Responding to enquiries regarding our study programmes, beneficiary support or college operations.
  • Sending you relevant updates, news or promotional materials (where you have opted in or consented).
  • Improving our website usability, accessibility and cyber security.

Who We Share Data With

We may share your Data with the following groups of people for the following reasons:

  • Internal Staff & Departmental Leads: To route your enquiry to the relevant team member or department.
  • Third-Party Service Providers & Technical Contractors: Including web hosting partners (such as HeX Productions), IT cloud infrastructure providers and software service providers acting as Data Processors under strict confidentiality agreements.
  • Regulatory Authorities & Legal Bodies: Where required by law, court order or regulatory reporting obligations (e.g., Department for Education or Ofsted).

We do not sell, rent or trade your personal data to third parties for marketing purposes.

Data Retention

We will only hold your Data on our systems for the period necessary to fulfill the purposes outlined in this privacy policy, or until you request that the Data be deleted (where applicable under your legal rights).

Specific retention periods depend on the nature of the data (e.g., general website enquiries are retained for as long as necessary to resolve the query, while student application data is subject to statutory educational retention schedules).

International Data Transfers

Data we collect is stored on secure servers located within the United Kingdom or the European Economic Area (EEA). If we ever transfer your Data outside the UK/EEA, we will ensure appropriate safeguards (such as standard contractual clauses or adequacy decisions) are in place to ensure your Data receives the same level of protection.

Keeping Data Secure

We use technical and organisational measures to safeguard your Data:

  • Access to administrative portals and accounts is strictly password-controlled.
  • We store your Data on secure, firewalled servers.
  • We maintain procedures to handle any suspected data breach and will notify you and the Information Commissioner’s Office (ICO) where legally required.

If you suspect any misuse or loss or unauthorised access to your Data, please let us know immediately by contacting us via this e-mail address: mis@homefieldcollege.ac.uk.

If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.

Your Legal Rights

Under UK Data Protection Laws, you have the following rights in relation to your Data:

  1. Right to Access: The right to request copies of the personal information we hold about you at any time. We will not charge a fee unless your request is manifestly unfounded or excessive.
  2. Right to Rectification: The right to have your Data corrected if it is inaccurate or incomplete.
  3. Right to Erasure: The right to request that we delete or remove your Data from our systems (“right to be forgotten”).
  4. Right to Restrict Use: The right to “block” us from using your Data or limit the ways in which we process it.
  5. Right to Data Portability: The right to request that we move, copy or transfer your Data to another service provider.
  6. Right to Object: The right to object to our use of your Data, including where we use it for our legitimate interests or direct marketing.

To make enquiries, exercise any of your rights or withdraw your consent, please contact us via this e-mail address: mis@homefieldcollege.ac.uk.

If you are not satisfied with the way a complaint you make in relation to your Data is handled by us, you may be able to refer your complaint to the relevant data protection authority. For the UK, this is the Information Commissioner’s Office (ICO). The ICO’s contact details can be found on their website at https://ico.org.uk/.

It is important that the Data we hold about you is accurate and current. Please keep us informed if your data changes during the period for which we hold it.

General

You may not transfer any of your rights under this privacy policy to any other person. We may transfer our rights under this privacy policy where we reasonably believe your rights will not be affected.

If any court or competent authority finds that any provision of this privacy policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this privacy policy will not be affected.

Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.

This Agreement will be governed by and interpreted according to the law of England and Wales. All disputes arising under the Agreement will be subject to the exclusive jurisdiction of the English and Welsh courts.

Changes to this Privacy Policy

Homefield College reserves the right to change this privacy policy as we may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the Website and you are deemed to have accepted the terms of the privacy policy on your first use of the Website following the alterations.  
   
You may contact Homefield College by email at mis@homefieldcollege.ac.uk.

Last updated: 2 Oct 2026