At Autoexel we take the protection of privacy and confidentiality very serious. We understand that all users of our site and those who engage with us for Services or to be part of Autoexel as an employee should be confident that their data will not be used for any purpose unintended by them, and will not fall into the hands of a third party not associated directly with Autoexel company operations. Our policy is both specific and strict taking into consideration the needs of the General Data Protection Regulations.

Legitimate Interest

Autoexel processes data when it is their legitimate interests to do this and when these interests are not overridden by data protection rights.  

Our legitimate interests include:

• Processing and recording End-point Assessment activities
• Understanding our customers’ behaviour, activities, preferences, and needs; 
• Ensuring the security and integrity of our Services and in ensuring that our Websites and Apps operate effectively; 
• Improving existing products and services and developing new products and services; 
• Handling customer contacts, queries, complaints or disputes;
• Fulfilling our duties to our customers, colleagues, shareholders and other stakeholders. 
• The processing is necessary because of a legal obligation that applies

Autoexel may process data to comply with our legal and regulatory obligations eg compliance with the Education & Skills Funding Agency (ESFA) apprenticeship Funding Rules.

What we do with data

Here is a list of the information we collect and why it is necessary to collect it:

1. Basic identification and contact information, such as name, email address and contact details is used to:
   • To provide services which have been request;
   • To maintain our accounts and associate records;
   • For billing;
   • To enable us to answer enquiries;
   • For verifying identity for security purposes;
   • For marketing our services and products;
   • To help make our web site as useful as possible; 
2. Associate information is given to us in the course of business and the business of our associate programme or a customer of our services. Such information is retained for business use only. We undertake to preserve the confidentiality of the information and of the terms of our relationship. This information is used: 
• To maintain assessment records and results;
• To maintain our accounts and associate records;
• For billing;
• To enable us to answer enquiries;
• Information which does not identify any individual may be used in a general way by us or third parties, to provide class information, for example relating to demographics or usage of a particular page or service. 
3. Business Information. 
• This is information given to us in the course of business engagement and our service delivery such as in relation to application to partner with us, employment, and subcontractor to deliver part of our service delivery or advertise with us. Such information is retained for business use only. We undertake to preserve the confidentiality of the information and of the terms of our relationship. It is not used for any other purpose. We expect any partner to reciprocate this policy. 

Who we share Personal Information with?

Autoexel may make Personal Information available to:

• Employers and Training Providers - In the course of carrying out End-point Assessment activities we will make available apprentice details including reasonable adjustment requirements, assessment booking details and assessment results. 
• Our service providers - This includes external third-party service providers, such as accountants, auditors, experts, lawyers and other outside professional advisors; IT systems, support and hosting service providers; printing, advertising, marketing and market research and analysis service providers; document and records management providers; technical engineers; data storage and cloud providers and similar third-party vendors and outsourced service providers that assist us in carrying out business activities.
• External Quality Organisations – Autoexel may share information with External Quality Organisations so that they can fulfil their quality assurance and standardisation duties.
• Governmental authorities and third parties involved in court action – Autoexel may share Personal Information with governmental or other public authorities (including, but not limited to, workers’ compensation boards, courts, law enforcement, tax authorities and criminal investigations agencies); and third-party civil legal process participants and their accountants, auditors, lawyers and other advisors and representatives as we believe to be necessary or appropriate: (a) to comply with applicable law, including laws outside country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities including public and government authorities outside country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our group companies; (f) to protect our rights, privacy, safety or property, and that of our group companies, others; and (g) to allow us to pursue available remedies or limit our damages.
• Other third parties - Occasionally, we may share Personal Information with other third parties. We will always do this under contract and in accordance with instructions. 

Procedures

Personal Information and Data Requests. 

All data is held under the terms of Data Protection Act 1998 and also General Data Protection Regulation (GDPR) 2016.

Any data held can be viewed and updated on our online End-point Assessment Management System, SEPA. Requests for access can be made to info@autoexel.org.uk or call the office on 0330 22 34 339 and ask to speak to the Data Controller.

If we need to keep data for business purpose and audit we reserve the right to hold this data, which will be held for periods defined in our Data Retention Policy. After this period request may be made for data to be removed. Individuals may at any time request for other data to be removed free of charge from our systems if they no longer wish to be part of our service offer. To request data to be removed please contact the Data Controller at Autoexel Ltd, Unit 21 The Quadrant, Barton Lane, Abingdon, OX14 3YS. To better safeguard information, we will also take reasonable steps to verify identity before granting access or making corrections to information.

This policy has been compiled so as to comply with current General Data Protection Regulation legislation, so far as we are aware. If you have any question regarding the confidentiality policy, please contact us via Autoexel Ltd, Unit 21 The Quadrant, Barton Lane, Abingdon, OX14 3YS, Tel: 0330 22 34 339.