Privacy Notice
We take the privacy and security of personal information seriously.
The Bridge Alternative Provision is committed to protecting the privacy and personal information of our learners, parents, carers, staff, volunteers and website users.
This Privacy Notice explains what personal information we collect, why we use it, who we may share it with, how long we keep it, how we protect it and the rights individuals have in relation to their information.
Who is Responsible for Your Information?
The Bridge Alternative Provision is the Data Controller for the personal information described in this Privacy Notice. This means that we are responsible for deciding how and why personal information is collected, used, stored and shared.
Our contact details are:
The Bridge Alternative Provision
Units 1-4 Epsom Centre
White Horse Business Park
Trowbridge
Wiltshire
BA14 0XG
Email:
admin@tbap.co.uk
Telephone:
01225 592763
What Information Do We Collect?
The information we collect depends on your relationship with The Bridge.
Name, date of birth, contact details, educational records, examination results, learning plans, EHCP and SEN information, medical needs and welfare concerns.
Name, contact information, emergency contact information and communication preferences.
Name, contact information, employment history and information relating to DBS and safer recruitment checks.
Technical information such as IP addresses and website analytics data. Information about our use of cookies is provided separately in our Cookie Policy.
Why Do We Use Personal Information?
We process personal information where it is necessary to operate The Bridge and provide appropriate education and support.
Our Lawful Basis
Under UK data protection law, we must have a lawful basis before processing personal information. The lawful basis we rely upon will depend on the purpose for which the information is being used.
The lawful bases that may apply to our processing include:
Where processing is necessary for us to comply with our legal obligations, including education and safeguarding requirements.
Where processing is necessary in connection with a contract or to take steps before entering into a contract.
Where processing is necessary for our legitimate interests or those of another person, provided those interests do not override the rights and freedoms of the individual.
Where we have asked an individual to provide clear consent for a particular use of their personal information.
Special Category Data
Some of the information we process is particularly sensitive and receives additional protection under data protection law. This is known as special category data.
Depending on the circumstances, this may include information about an individual's health, disability, medical needs, ethnicity, religion or other information falling within the special categories defined by UK data protection law.
Where we process special category data, we identify both an appropriate lawful basis under Article 6 of the UK GDPR and an additional condition for processing under Article 9.
Depending on the purpose of the processing, the Article 9 conditions we may rely upon include:
Where processing is necessary in connection with our obligations and rights in relation to employment, social security or social protection law.
In limited circumstances where processing is necessary to protect someone's vital interests and the individual is physically or legally incapable of giving consent.
Where processing is necessary for reasons of substantial public interest and is supported by an appropriate condition in UK law, including where relevant to safeguarding children and individuals at risk.
Where the legal requirements for this condition are met and processing is necessary for the provision or management of health or social care.
Where appropriate, we may process special category information where an individual has given valid explicit consent for a specified purpose.
We only process special category information where it is necessary and proportionate for the purpose for which it is being used and where the relevant legal requirements and safeguards are satisfied.
Criminal Offence Data
As an education provider, The Bridge undertakes safer recruitment checks and may process information relating to criminal convictions, offences and related security measures, including information associated with Disclosure and Barring Service (DBS) checks.
Criminal offence information receives additional protection under data protection law. Where we process this information, we identify an appropriate lawful basis under Article 6 of the UK GDPR and ensure that the processing is authorised in accordance with Article 10 of the UK GDPR and the Data Protection Act 2018.
We only use this information where it is necessary and proportionate, including for safer recruitment, safeguarding and meeting our legal and regulatory responsibilities. Access is restricted to those who require the information for their role.
Who Might We Share Information With?
Where it is necessary and lawful to do so, we may share personal information with organisations involved in education, safeguarding, regulation and the provision of our services.
Information is only shared where there is an appropriate reason and lawful basis for doing so.
We do not sell or rent personal information to third parties.
How Long Do We Keep Information?
We do not keep personal information for longer than it is needed. Retention periods depend on the nature of the information, why it is held and any applicable legal or regulatory requirements.
Learner records are generally retained until the learner reaches the age of 25, or longer where required by law.
Staff records are generally retained for six years after employment ends, unless a different retention period is required.
How Do We Protect Your Information?
The Bridge takes appropriate measures to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.
Your Data Protection Rights
Data protection law provides individuals with a number of rights over their personal information. Not every right applies in every circumstance and some rights depend on the lawful basis being used.
Access — request a copy of the personal information we hold about you.
Rectification — request that inaccurate or incomplete information is corrected.
Erasure — request deletion of personal information in certain circumstances.
Restriction — request that the way we use your information is restricted in certain circumstances.
Object — object to certain types of processing where the law provides this right.
Withdraw consent — withdraw your consent at any time where consent is the basis on which information is being processed.
Data portability — request your information in a portable format where this right applies.
Contact Our Data Protection Officer
If you have a question about how your information is being used, wish to exercise one of your data protection rights, or have a concern about the way your information has been handled, you can contact our Data Protection Officer.
Raising a concern
If you have concerns about the way your personal information has been handled, we would encourage you to contact our Data Protection Officer in the first instance so that we can investigate.
You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's independent regulator for data protection.
Changes to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in our practices, services or legal and regulatory requirements. The latest version will always be published on our website.
Effective: October 2026
Next review: August 2027