Levy Support Scheme privacy notice

What this privacy notice is for

This privacy notice provides details on how we, Norfolk County Council, use your personal information for the purpose of your access to the Apprenticeships Norfolk service.

By 'use' we mean the various ways your personal information may be processed including storing and sharing the information.

If you have provided consent, for the use of your information, you can withdraw this at any time by emailing: [email protected]

Further details

We also provide further details regarding:

Who we are
How long we use your information for
Your rights under the General Data Protection Regulation (the UK GDPR) and
How to exercise them

You can see this information in Norfolk County Council's general privacy notice or you can ask us for a copy of this information.

What we use your information for

We may use the information about you or your business to:

Determine your eligibility for the Apprenticeships Norfolk brokerage service
Provide support and advice with your apprenticeship (including referring to suitable training providers)
Communicate with you about any advice and support
Make you aware of any events/activities or share the latest Apprenticeship Norfolk updates
Promote our services; selected, anonymised, business data may be published to promote the apprenticeship support offer across Norfolk. This could include business size, location by Norfolk district, industry, or apprenticeship requirements
Conduct surveys and evaluations (anonymised) to demonstrate the service's effectiveness
Create case studies and other marketing materials that may be published publicly to promote apprenticeship opportunities (we will seek separate consent prior to recording and sharing case studies)
Manage the Levy Support Scheme
We will use anonymised data for reporting and performance measuring purposes. Where business names are required for the reporting, a sole trader's business name may be visible
We also use this information to assess the quality of our services and evaluate and improve our policies and procedures. We may use information in other ways compatible with the above.

If you are a sole trader, employee, partner, or company director accessing Apprenticeships Norfolk's services, we will collect your contact and business data to support your enquiry most effectively.

This may include agreeing on a suitable way of communication, or identifying grant and funding opportunities based on your business location, apprentice's age group, industry sector, etc.

Please note that some contact information (i.e. business name and employee name) may be considered personal data under the UK GDPR, as it may refer to an individual. This could be the case for a sole trader's business name.

By contacting Apprenticeships Norfolk for information, advice, and guidance on apprenticeships, you are consenting to us using your data for processing and reporting purposes. You can withdraw your consent at any time by emailing us at [email protected], however this will affect our ability to offer support to you.

What personal data we collect

We will collect and use:

Business Name
Business Address
Business Contact Details (Name, Phone Number, and Email Address)
Individual Contact Details (Name, Phone Number, and Email Address) where an individual contacts us or is being referred to us via a stakeholder for support
Apprentice's Age Bracket (16-18, 19-24 or 25+)
Apprenticeship Details (e.g. potential training provider, apprenticeship standard and level, start date and duration)
Personal information for specific event attendance (i.e. dietary / mobility requirements) to ensure you can attend an event in a safe way, as and where required. This data will only be used for the purpose of organising the event and will be permanently deleted afterwards
Photographs and videos of yourself, when you choose to participate in case study recordings - this is an additional offer, and we will seek separate consent for any promotion/marketing activities.

Who provides this information

We receive most of this information from:

Yourself
Third parties, e.g. sector groups, membership organisations, local business development services (if they refer you to us)
Employers (if they refer you to us)
Training providers (if they refer you to us)

Who we share your information with

We may need to share your information with third parties, such as:

Your preferred training provider (registered on Register of Approved Training Providers), where applicable and requested by yourself
Other Norfolk County Council projects that could support your business (where applicable, following your consent)
Suffolk County Council (business details shared when administering the Levy Support Scheme)

Any information which is shared will only be shared on a need-to-know basis, with appropriate individuals. Only the minimum information for the purpose will be shared. If you wish for us to make an introduction to a third party (eg training provider), we can do so, after seeking additional consent from you.

Your personal information will also be shared with third parties contracted by Norfolk County Council to provide a service to Norfolk County Council. These services providers are known as data processors and have a legal obligation under UK GDPR and to Norfolk County Council to look after your personal information and only use it for providing that service. For example, this would include companies such as Microsoft who provide our email solution.

All our third-party service providers and other subsidiaries or parents in the group are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions, as identified in separate privacy notices.

How the law protects you and the legal basis for processing your information

The UK GDPR and DPA place a legal obligation on us to process your personal information in accordance with the following data protection principles in that your personal data must be:

Used lawfully, fairly and in a transparent way
Collected only for valid purposes that we have explained to you and not used in any way that is incompatible with those purposes
Relevant to the purposes we have told you about and limited only to those purposes
Accurate and kept up to date
Kept only as long as is necessary for the purposes we have told you about
Kept securely

We must have a lawful basis for processing personal information. Our lawful bases for doing so will include:

Where you have given clear consent for Apprenticeships Norfolk to process your personal data for a specific purpose.
We have a contract with your business (Levy Support Scheme, Service Level Agreement).
You do not have to provide information to perform the Levy Support Scheme, Service Level Agreement. However, if you do not, we may not be able to process your request(s).

How long we keep your personal information for

We will keep your information for six years, from the date of first contact. If you have provided consent, you can withdraw this at any time by emailing us at [email protected].

If we need to use your information for research or reports, your information will be anonymised and any information taken from notes (handwritten or typed) during any consultation sessions will be securely destroyed. The information will continue to be used in a summarised and anonymised form in any research reports or papers that are published. The anonymised information in the papers may be of historic interest and may be held in public archives indefinitely.

How we keep your information

The information is stored electronically, on the County Council's network including records management systems. Additionally, information is securely stored in other mediums, including email accounts and Microsoft Office Forms.

When processing your data for the purposes set out above, except for Eventbrite (below), your information is not sent outside the UK/EEA.

Should you provide separate consent for marketing/events we use Eventbrite for bookings. For event and marketing purposes, you may have the opportunity to register for employer/apprentice network events or other activities via our Eventbrite listings. Eventbrite use sub processors (who process data on behalf of Eventbrite). These sub processes may have access to your personal information. Norfolk County Council have not been able to assess each sub processor and where data is transferred. However, the sub processors are subject to contractual clauses to keep your information safe and the information you are asked for to register for this event has been limited. After you register with Eventbrite you are able to delete your own information from the website following the event, in the privacy centre.

Links to other websites

Where this notice applies to information collected or processed on a website, please note this privacy notice only applies to the Apprenticeships Norfolk service and the Apprenticeships Norfolk website and ceases to apply when you leave our pages. If you follow links to other organisations' websites, even if you follow a link which we have provided, it is suggested you take the time to read the privacy notices on the other websites you visit.

Automated decision making

We do not make automated decisions about you.

Your responsibility to inform us of changes

It is important that the personal information we hold about you is accurate and current.

Please keep us informed if your personal information changes during your working relationship with us. You can do to help us with this by:

Telling us when any of your details change, and
Telling us if any of the information we hold about you is wrong

Questions or complaints

If you have any questions about this privacy notice or how we handle your personal information, you can write to the DPO by letter to the DPO, Norfolk County Council, County Hall, Martineau Lane, Norwich NR1 2DH or by email to [email protected].

You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. The ICO can be contacted:

By writing to the ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

By telephoning 0303 123 1113

Online at www.ico.org.uk/global/contact-us/

Changes to this notice

We may amend this privacy notice at any time so please review it frequently. The date below will be amended each time this notice is updated.

This notice was created in April 2026.