This privacy notice explains how the Adult and Community Learning (ACL) team at Dudley Council uses your personal information and protects your privacy.
Who we are
We are part of Dudley Metropolitan Borough Council and provide learning for adults aged 19 and over. As a data controller, we are responsible for handling your personal data securely and legally.
We only collect information when required by law, funding rules, or to support your learning. This includes:
Personal details: name, address, date of birth, contact information
Demographics: ethnicity, gender, disability, employment status
Learning records: enrolment details, attendance, support needs, results
Health information: medical needs that may affect your learning
Feedback: comments, compliments or complaints you submit
Some data may also be collected during course enquiries or IAG (Information, Advice and Guidance) sessions, with your consent.
We use your information to:
Deliver learning and support services
Confirm your eligibility for funded courses
Monitor progress and service quality
Provide advice and guidance
Meet legal and funding obligations
Reach people who face barriers to learning
We may share your data with:
Funders: Education and Skills Funding Agency (ESFA) and West Midlands Combined Authority (WMCA)
Exam boards: to register you and issue results
Council departments: to respond to your requests or support service development
Approved third parties: like Adobe Sign, for digital signatures
We never sell your information. We will only contact you about courses if you have given us permission.
We process your data under the UK GDPR using the following legal bases:
Consent: when you agree to receive communications
Contract: when you enrol on a course
Legal obligation: to meet statutory and funding rules
Public task: to deliver publicly funded education
Legitimate interest: to improve services (when this doesn't override your rights)
We use Adobe Sign to securely collect e-signatures. Your data is handled in line with GDPR. Signed forms are deleted from Adobe Sign after 2 days. You will receive a copy by email.
Your data is stored on secure Dudley Council systems within the UK. We have strict policies, training, and technical protections in place. Only staff who need access to your data can see it.
Third-party providers must follow our security standards and sign data protection agreements.
Learning records: kept for 12 years
Adobe Sign forms: deleted from the system after 2 days
Data is then securely destroyed in line with funding and legal rules.
You have rights over how we use your personal data. You can:
Ask for a copy of your data
To make a request for your personal information, contact the Council’s Corporate Information Governance Team at information.governance@dudley.gov.uk or by calling 0300 555 2345 and asking to speak to the Data Protection Officer.
You can also:
Ask us to correct anything wrong
Ask us to delete your data (in some cases)
Limit or stop how we use your data
Ask to move your data to another provider
Withdraw consent (where we rely on it)
To do any of the above, contact us using the details below:
We use your data to deliver and improve adult learning services
We keep it safe and never sell it
You can control how your data is used
Further information
For independent advice about data protection, privacy and data sharing issues, or to lodge a complaint, you can contact the Information Commissioner's Office (ICO) at:
Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF