Coronavirus: Our database of information and links is designed to help employers during the crisis. Our Urgent messages page has the latest updates.
CITB is committed to protecting your privacy and ensuring that any information that we collect about you is never misused. This policy explains what information we collect, how and why we use it, how we keep it safe, and what your rights are.
By using our websites, services and products, you agree to the way we collect and use your personal information according to the terms of this privacy policy.
We are the Construction Industry Training Board (CITB), a charity registered in England and Wales (number 264289) and in Scotland (number SC044875).
CITB is required to process personal information and is a data controller for the purposes of data protection legislation including the UK Data Protection Act 2018, the UK GDPR and the General Data Protection Regulation (EU 2016/679). CITB is registered as a data controller (number Z7125297).
If you have any comments or concerns about any aspect of this policy or any privacy or data protection issue, please email our Information Governance Team at information.governance@citb.co.uk or write to:
Information Governance Team
CITB
Sand Martin House
Bittern Way
Peterborough
Cambs
PE2 8TY
Our Data Protection Officer can be contacted at information.governance@citb.co.uk or by writing to the address above.
The “Public Interest” condition is the primary legal basis upon which CITB relies for processing personal information. Your information is collected or provided to CITB to enable the functions (and purposes incidental to those functions) as set out in the Industrial Training Act 1982.
However, public interest is not sufficient grounds to process sensitive or “special category” personal information. CITB will usually require explicit consent to process this category of information, except where CITB is acting under a statutory right or obligation (for example in a matter concerning safeguarding) or if particular urgent grounds exist (for example preventing or detecting a crime).
These 8 principles summarise our commitment to protecting your privacy:
When we review our privacy policy we will note the date it was last updated.
This privacy policy was last reviewed and updated in April 2021.
You give us information when you use our websites, products and services, including when you:
We collect information about you when you visit our websites through the use of cookies (see Cookies section below).
We may also get information from other sources, including:
The information we collect about you, could include but is not limited to your:
We may also have sensitive information, which could include the following:
We use your information for many purposes, which may include to:
We take the security of your personal information very seriously.
We use technical measures, such as encryption, and carry out regular security reviews to keep our protections up to date. We also strictly control access and ensure staff who are authorised for access are adequately trained in keeping your information safe.
Our procedures mean that we may ask you to prove your identity before we share your personal information with you.
Third-party websites you access through links on our websites will have their own privacy policies. We do not accept any responsibility or liability for them.
We do not share your information with others unless you have consented or it is necessary to do so because:
When we do have to share information, it is likely to be with:
We may want to share your CITB-accredited achievements with newspapers, websites and other media. Contact us at unsubscribe@citb.co.uk if you would prefer us not to.
We may use Data Processors, including those located outside of the United Kingdom and the European Economic Area (EEA). Where this happens we make sure the transfer and storage of your information still complies with UK and/or EEA laws as applicable and this Privacy Policy.
We may record phone calls we make or receive for training, quality assurance and to help us to deal with enquiries; for example, where we might need to confirm the details of a previous conversation.
We identify recorded calls using the originating telephone number and the time and date of the call.
A recording may contain your personal information relating to the products and services we offer.
We may ask you for some personal information over the phone to confirm your identity, depending on the nature of your enquiry to prevent fraud and protect your data.
We use a ‘pause and resume’ function so we don’t record any part of your call that involves payment details.
We keep recorded calls securely, and only specific CITB staff, or specific staff of CITB appointed processors, are authorised to review them.
We contract a company to maintain call recording and a ‘pause and resume’ function. The company is authorised to access recorded calls only for fault diagnosis, testing and administration purposes.
We delete recorded calls after 24 months, unless they are part of an active investigation.
Images from closed circuit television (CCTV) of a recognisable person are treated as personal data in data protection law.
We use CCTV to:
CCTV is deployed at our office locations which are;
CITB has offices at three additional locations where CCTV does operate but not within CITB’s demised space as follows:
CCTV systems are operated independently at each location. For further information please contact information.governance@citb.co.uk.
Where necessary we may share CCTV image information with:
CCTV images recorded by us are kept for 30 days, unless we need them for an active investigation. After that, the images are automatically overwritten by the recording equipment. Images recorded at locations managed by third parties will be held in accordance with the retention policies of those third parties.
We destroy recordings that are part of an active investigation as soon as they are no longer needed.
You can ask for a copy of your information recorded by CCTV, except in certain circumstances described by applicable legislation. You do not have the right to instant access.
We use your payment details to process orders, collect levy payments and distribute funds, such as training grants.
We do not use your payment information for any purpose you have not authorised or disclose it to third parties without your permission. We process credit and debit card transactions following the Payment Card Industry Data Security Standard PCI DSS.
CITB staff and contracted data processors have access to your payment details to carry out your transaction.
For bank and building society account transactions, we may make a record of your:
Where possible, we only store the verification code of card transactions and other data needed to process the payment once the transaction is complete. Where this is not feasible, we use other security methods to keep your data secure. We may process data such as the:
We keep your bank or building society details for as long as you authorise and delete them when they are no longer needed. We do not keep payment card information.
Our websites, services and products are not aimed at children under the age of 16 and we do not knowingly collect any information from them.
We ask children not to register with us or give us any of their information.
Where we have inadvertently collected information from a child, we will delete it as soon as possible.
If you know that a child has given their information to us, please contact us at: information.governance@citb.co.uk
You have the right to:
We will deal with your request in accordance with the applicable Data Protection Legislation.
You can change your contact preferences or withdraw your consents at any time by writing to us at information.governance@citb.co.uk or:
Information Governance Team
CITB
Sand Martin House,
Bittern Way,
Peterborough,
PE2 8TY
To see the information we hold about you, you should make a Subject Access Request, including providing as appropriate your:
and contact the information governance team at:
Information Governance Team
CITB
Sand Martin House,
Bittern Way,
Peterborough,
PE2 8TY
We manage a booking system for construction training courses.
We use your information to find you the right course, venue and, if appropriate, accommodation, to deliver the course, and to process your booking.
CITB employees who operate the course booking system or deliver training have access.
We use your:
We keep your profile information for no more than 6 years from the date you made your last booking, and we delete information about the courses you attended after 6 years.
We delete accommodation booking information 12 months after your departure date.
We support a number of card schemes, which help to ensure the safety and proficiency of the UK construction workforce. Through them, it is possible to check someone’s identity and achievements or qualifications.
We record accredited achievements in a database, which our staff can access to support card schemes and answer your queries. Anyone who can provide us with certain search information about you, (such as your CITB Individual ID or Registration Number, National Insurance number and other personal details), can check your identity and CITB-accredited achievements including using:
A successful search returns the following information about you:
Anyone with the right search information about you has access. This is usually:
We use your:
We will keep your information for no longer than 50 years from the expiry date of your last achievement.
The Construction Training Register is an online database showing who has gained recognised construction-related training achievements and qualifications.
Employers can search the register to check skills and manage their training needs.
We use your information to fulfil our statutory role as an industrial training board. This includes maintaining a record of your training achievements and qualifications with an Approved Training Organisation (ATO).
CITB staff, your employer when booking you on to a training course, and the relevant ATO can access your records.
Anyone who has your name and at least one other piece of identifying data unique to you, such as your Unique Learner Number or CITB Individual Identifier can access your records.
We use your:
We may keep and use your personal data for as long as we need to, to fulfil our statutory functions.
We keep a record of your achievements for up to 50 years, except where the achievement is for life.
We offer a range of construction apprenticeships across Great Britain.
We use the information you give us to understand your career goals and development needs, so that we can place you with the right college and employer.
Your data will only be shared in accordance with the applicable data protection legislation.
We use your:
We may keep your personal data for as long as we need to fulfil our statutory functions.
We keep apprenticeship course records for at least 6 years. Funding providers that subsidise an apprenticeship may specify that they need to keep records for longer.
We provide a number of e-commerce websites to sell our products online including:
We use your information to process your order. This includes your name, contact and payment details.
Our order-processing staff receive details of all orders. Staff and systems at Pearson VUE use your data to process your order. We may transfer your details to other third party service providers for example a fulfilment partner.
We keep order information and financial information for up to 7 years.
We provide grants and other funding to promote careers and support employers, federations, trade associations and training groups in the UK construction industry.
Employers, federations, trade associations and training groups can express interest or apply for funding via a form on our website. We store this information in a secure database.
The information we collect depends on the type of funding application submitted, but could include:
CITB staff and contracted third parties have access to the information.
We keep your information for at least 7 years, as required by accounting legislation, and longer if needed by the funding authority.
The CITB Health, Safety & Environment test helps raise standards across the industry.
We record your identification information, contact details, and HS&E results in a database which our staff can access for testing administration and to validate if you are eligible for additional training or certification. To deliver the test CITB uses third-party test providers including Pearson VUE, and third-party Internet Test Centres. Your test results and ID photograph may also be passed to third-party competency card schemes to allow them to process your card application.
We use your:
We will keep your information for no longer than 50 years from the expiry date of your last achievement.
We conduct and commission research and analysis of the construction industry sector to help it improve and succeed, as authorised by the Industrial Training Act 1982.
We may use your information to undertake research into all aspects of the construction industry including for example to understand trends in construction as well as employment and skills needs in the industry.
CITB staff and contracted third parties performing research for us have access. We may also share information with customers and clients, agents, service providers, and survey and research organisations if we need to.
We may use any of the information we have collected about you across our websites, products and services for our research, including your:
We may also use information gathered from surveys, which may be sensitive, including your:
We keep research information in accordance with the applicable data protection legislation.
SkillBuild is a skills competition for construction trainees and apprentices, who can enter it by providing their details via our website.
We use your information to administer and improve the competition. We may also contact you for your consent to take part in promotional activity for SkillBuild, such as case studies and blogs.
We store your information in a secure database which is not shared with third parties without your consent.
CITB staff and contracted data processors who need the information to administer the competition have access.
What we collect may include your:
We keep your information until 28 February of the year following your registration, except for competition results, which we keep until they are no longer necessary to maintain records for past achievers and to track progress through competition cycles.
We have statutory powers to collect a levy (The Industrial Training Levy) from construction employers to fund training so that the sector has the skilled workforce it needs.
We keep a register of construction employers, which we use to collect the levy from those who are required by law to pay it.
Only CITB staff and contracted data processors have access.
We use your:
We destroy Levy Returns after 7 years. We keep your profile data for 7 years after you or your company are no longer required to complete a Levy Return.
These policies were last updated 7 April 2021.