Privacy Policy
How Fasttrack Technology Academy Ltd collects, uses and protects your personal data, and your rights under UK GDPR.
Version: 1.0
Who we are
Fasttrack Technology Academy Ltd (“Fasttrack”, “we”, “us”) is the controller of the personal data described here, unless we say otherwise.
- Company number 14392836, registered in England and Wales
- Address: 2 Iverson Road, Kilburn, London NW6 2HE
- Privacy contact: WhatsApp +44 7838 079175, or write to us at our address above
We follow UK GDPR, the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025) and, for marketing, the Privacy and Electronic Communications Regulations.
We are a small training provider. We teach adults coding and AI (bootcamps, funded bootcamps and an internship), teach children aged 8–14 (Future Engineers), and teach parts of apprenticeships for approved main providers.
The short version
- We collect what we need to answer your enquiry, check your eligibility, teach you and support you.
- We don’t sell your data.
- Analytics and advertising cookies (Google Analytics 4 and the Meta Pixel) only run if you say yes in our cookie banner.
- For funded courses and apprenticeships, we must share some information with the funder or the main training provider.
- You can ask to see, correct or delete your data, and you can complain to us or to the ICO.
What we collect
| Who | What we collect |
|---|---|
| Website visitors | IP address, device and browser information, pages viewed and how you got to us (UTM campaign tags). Analytics and advertising data only with your consent. See our Cookie Policy. |
| People who enquire (forms, WhatsApp, email or phone) | Name, email, phone, postcode, age band, your situation (for example employed or unemployed), the course you’re interested in, answers to eligibility questions, your messages and your marketing choice |
| Employers | Contact name, job title, organisation details, size, levy status, training needs |
| Learners on fee-paying courses | Registration details on TeachCMS, payment records, attendance, coursework, progress, certificates, and support needs if you tell us |
| Funded bootcamp learners | As above, plus the eligibility evidence the funder requires: date of birth, address, right to work and residency evidence, employment status and, where required, your National Insurance number. Also equality monitoring information (optional, see below), and your job or progression outcome for up to 6 months after the course. |
| Apprentices | Information the main provider needs and asks us to record: attendance, off-the-job training hours, progress against the apprenticeship standard, and feedback. Your employer’s and the main provider’s own privacy notices also apply. |
| Children (Future Engineers) and parents or carers | Child’s name, age, school year, progress, and any medical or support information parents choose to tell us; parent’s or carer’s contact details; consents (for example for photos) |
| Job applicants and staff | Application details, references, right-to-work checks and, for roles that need it, DBS check information. We keep the DBS certificate number and date, not a copy of the certificate. |
| Photos and videos | Images from classes and events, used only as described in section 7 |
Special category data
Some information is especially sensitive, for example health, disability or learning difficulty, ethnicity, religion, and sexual orientation. We only collect it when you choose to tell us so we can support you, or when a funder requires equality monitoring. Equality questions are always optional (“prefer not to say” is available). We process this data under UK GDPR Article 9(2)(g) (substantial public interest) together with the Data Protection Act 2018, Schedule 1: equality of opportunity, safeguarding, and support for individuals. Criminal offence data from DBS checks on our tutors and staff is handled only where the law allows, under a Schedule 1 condition.
Why we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR Article 6) |
|---|---|
| Replying to enquiries and checking eligibility before you enrol | Steps at your request before a contract (6(1)(b)); for employers, legitimate interests (6(1)(f)) |
| Enrolling you, teaching, assessing, issuing certificates, taking fees | Contract (6(1)(b)) |
| Funded bootcamps: evidence of eligibility, reporting to the funder, audits | Legal obligation or public task of the funder, and our contract with the funder. We rely on 6(1)(c), (e) or (f) as the funding agreement requires. |
| Apprenticeships: recording and sharing attendance, hours and progress with the main provider | We act as the main provider’s processor under its instructions, or under our contract with it (see section 6) |
| Safeguarding children and adults at risk | Legal obligation (6(1)(c)), and vital or legitimate interests where needed |
| Website security, preventing spam and fraud | Legitimate interests (6(1)(f)) |
| Analytics (Google Analytics 4) | Consent (6(1)(a)), given in the cookie banner |
| Advertising measurement (Meta Pixel) | Consent (6(1)(a)), given in the cookie banner |
| Marketing emails and WhatsApp messages about courses and events | Consent (6(1)(a)). You can unsubscribe at any time. |
| Photos and videos where you can be identified, for publicity | Consent (6(1)(a)), from a parent or carer for children |
| Keeping records for tax, accounts and legal claims | Legal obligation (6(1)(c)) and legitimate interests (6(1)(f)) |
We do not make decisions about you that are based solely on automated processing and have legal or similarly significant effects.
Cookies, Google Analytics and the Meta Pixel
- Google Analytics 4 (Google LLC / Google Ireland, measurement ID G-0HQP9V83MS) helps us understand how visitors use our website. It only runs if you accept analytics cookies. We do not send Google your form answers.
- Meta Pixel (Meta Platforms Ireland Ltd, Pixel ID 1655619242951429) measures whether our Facebook and Instagram adverts lead to visits and enquiries, and helps us show adverts to people likely to be interested. It only runs if you accept marketing cookies. When it runs, Meta receives information such as your IP address, browser details, the pages you visit on our site and events such as “lead”, and may link it to your Meta account. For collecting and sending this data, we and Meta are joint controllers. Meta’s own use is covered by Meta’s Privacy Policy (https://www.facebook.com/privacy/policy).
- Our website stores campaign tags (for example
utm_source) in your browser’s session storage only if you accept analytics or marketing cookies, so that we can tell which campaign brought you to us. - You can change your choices at any time with Cookie settings in the footer. See our Cookie Policy.
Who we share your data with
We share only what is needed:
Service providers (our processors), who act on our instructions:
| Provider | What for | Location / safeguards |
|---|---|---|
| TeachCMS (https://app.teachcms.com) | Enrolment, learner records, attendance, progress | See the provider’s own privacy notice |
| Hostinger | Website hosting | See the provider’s own privacy notice |
| WordPress plugins on our own site (Contact Form 7, Flamingo or another form plugin, WooCommerce, Tutor LMS) | Forms, orders, the course platform | Stored on our hosting |
| Zoom (Zoom Video Communications Inc.) | Live online classes | USA. See section 9 for the safeguards used |
| WhatsApp (WhatsApp Ireland Ltd / Meta) | Enquiries and course messages, if you contact us that way | WhatsApp acts under its own terms. Messages are end-to-end encrypted. |
| Payment providers (through TeachCMS or our website shop) | Taking fees. We do not store full card numbers. | See each provider’s own privacy notice |
| thelastdevstanding.com | Practice exercises and competitions | See the site’s own privacy notice |
| Google (Analytics) and Meta (Pixel) | See section 5. Consent only. | USA and Ireland. Adequacy (UK–US data bridge) and/or contractual clauses |
| YouTube (Google) | Videos embedded on our pages. These load only after consent, or in privacy-enhanced mode. | As Google |
Other organisations (as separate controllers):
- Apprenticeship main providers we work with, and through them the government department responsible for apprenticeship funding, the end-point assessment organisation, and your employer. For apprenticeship data, the main provider is normally the controller, and we act for it.
- Funders of funded bootcamps (for example the Greater London Authority, a combined authority or the government department responsible) and their auditors, and a lead provider if we deliver as a partner. This applies only if we deliver funded places.
- Employers that sponsor or co-fund your training (attendance and progress only), and employers you choose to be interviewed by.
- Luul Solutions Ltd, a company connected to Fasttrack, for Graduate Internship projects.
- Safeguarding agencies, the police or the local authority where there is a risk of harm, or where the law requires it.
- Professional advisers (accountants, lawyers or insurers), and anyone who buys our business, under confidentiality.
Photos, videos and social media
We post some class and event photos and videos on our website, YouTube, TikTok and Facebook. We only publish images where you can be identified with consent (a parent or carer consents for children). You can withdraw consent for future use at any time, and we will remove existing posts where we reasonably can.
Children
Our Future Engineers classes are for children aged 8–14. Parents or carers register children and make privacy choices for them. We explain what we do in simple language to children where we can. Children’s data is not used for advertising, and we do not knowingly allow the Meta Pixel to target children.
International transfers
Some providers (for example Zoom, Google and Meta) process data outside the UK. Where they do, we rely on UK adequacy regulations, including the UK–US data bridge for certified US companies, or on approved contracts such as the International Data Transfer Agreement or Addendum. Learners who join online from outside the UK, for example in Africa, are covered by this same policy.
How long we keep data
| Data | How long |
|---|---|
| Enquiries and register-interest forms that don’t lead to enrolment | 12 months, then deleted |
| Marketing list | Until you unsubscribe |
| Fee-paying learner records | 6 years after the course ends, for tax and legal claims |
| Funded bootcamp records and evidence | As long as the funder requires |
| Apprenticeship records | As the main provider and funding rules require |
| Safeguarding records | As long as the law and good practice require. For children’s records this can be many years |
| Class recordings | 90 days |
| Analytics data in GA4 | Up to 14 months |
| Cookie-consent records | 12 months, or as long as the consent applies |
Your rights
You can ask us to:
- give you a copy of your data (a subject access request)
- correct your data
- delete your data
- restrict how we use it
- object to how we use it, including at any time to direct marketing
- give you your data in a portable format
- withdraw consent at any time, where we rely on consent, for example through cookie settings or an unsubscribe
WhatsApp us on +44 7838 079175, or write to us at our address. We reply within one month, which can be extended in some cases. We may ask you to confirm your identity. Requests about apprenticeship records are passed to the main provider promptly, as it is normally the controller.
Security
We use access controls, encrypted devices, and the security measures of our providers. Only staff who need your data can see it. We do not put learners’ personal data into public AI tools. We only use WhatsApp business accounts to contact learners, and we ask you not to send sensitive information by WhatsApp.
If there is a personal data breach, we contain it, record it and, where it is likely to put your rights at risk, tell the ICO within 72 hours and tell you if the risk is high. If a breach involves apprenticeship data, we tell the main provider promptly so it can meet its own duties.
Complaints
If you’re unhappy with how we’ve handled your data, please tell us first, so we can put it right. We will acknowledge your complaint within 30 days and reply without undue delay. You can also complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/ or 0303 123 1113.
Changes
We will update this policy when our practices change. The version number at the top of this page shows the current version.