We only ever use your personal data with your consent, or where it is necessary:
• To enter into, or perform, a contract with you
• To comply with a legal duty
• To protect your vital interests; this means, for example, keeping you safe from harm
• For our own (or a third party's) lawful interests, provided your rights are not affected
We will only use your information for the purpose or purposes it was collected for.
Administration
We use personal data for administrative purposes. This includes:
• Receiving payment (e.g. direct debits or payment card details)
• Maintaining databases of our learners and their educational progress
• Performing our obligations under training contracts
• Helping us respect your choices and preferences (e.g. if you ask not to receive marketing material, we’ll keep a record of this).
Marketing
We use personal data to communicate with people and to promote PFA. This includes keeping you up to date with our news and offerings.
Research and Analysis
We may carry out research and analysis on the data we hold to understand behaviour and responses and identify patterns and trends.
We evaluate, categorise and profile personal data to tailor services and communications we send out (including targeted advertising) and to prevent unwanted material from being sent to you.
Anonymised data
We may combine sets of personal data and change the personal data so that it can no longer be linked to any particular person. This information may then be used to monitor PFA’s business performance or to identify trends or patterns within our existing learner database.

We will never sell your personal data. If you have opted-in to marketing, we may contact you with information about further opportunities in education.
We may share personal data with other organisations who provide us with services. For example, we may use an IT supplier to process personal data. However, these activities will be carried out under contracts which have strict requirements to keep your information confidential and secure.

PFA will ask its learners and contacts to “opt-in” for marketing communications. This means you’ll have the choice as to whether you want to receive these messages.

As an education provider, we regularly process the personal data relating to young people who enquire about courses and training opportunities.

We use a variety of physical and technical methods to keep your data safe and to prevent unauthorised access or sharing of your personal information.
Electronic data and databases are stored on secure computer systems and we control who has access to information using both physical and electronic means.
Our employees receive data protection training and we have a set of detailed data protection procedures which personnel are required to follow when handling personal data.

Payment security
All electronic forms that request financial data will use secure web technology to encrypt the data between your web browsers and our computers.
If you use a credit card, we will pass your credit card details securely to our payment provider. PFA complies with the payment card industry data security standard (PCI-DSS) published by the PCI Security Standards Council and will never store card details.

CCTV
Some of our premises have CCTV and you may be recorded when you visit them. CCTV is there to help provide security and to protect both you and PFA. CCTV will only be viewed when necessary (e.g. to detect or prevent crime) and footage is only stored temporarily. Unless it is flagged for review CCTV will be recorded over.
PFA complies with the Information Commissioner’s Office CCTV Code of Practice and we put up notices, so you know when CCTV is in use.

Where PFA information is stored
PFA’s operations are based in the UK and we store our data within the European Economic Area (EEA).
We will never process or store personal information outside of the EEA.
How long does PFA Keep information for?
We will only use and store information for as long as it is needed for the purposes it was collected for. How long we keep information depends on the information and what it’s used for. For example, if you ask us not to send you marketing emails, we will stop storing your emails for marketing purposes (though we’ll keep a record of your preference not to be emailed).
We continually review what information we hold and delete what is no longer required. We never store payment card information.

We want to ensure you remain in control of your personal data and that you understand your legal rights which include:
• The right to ask and be told whether or not we have your personal data and, if we do to obtain a copy of the personal data we hold (this is known as a subject access request)
• The right to have your data deleted (though this will not apply where it is necessary for us to continue to use the data to administer your training course.
• The right to have incorrect data amended
• The right to object to your data being used for marketing purposes or profiling