APPRENTAGO PRIVACY POLICY
This Privacy Policy explains how Apprentago (a trading entity of DegreeApprenticeMedia
LTD, registered in  United Kingdom, Company Number:
14847961) collects, uses, and protects your personal information.

We are committed to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the ICO Age Appropriate Design Code (Children’s Code).

SUMMARY FOR YOUNG PEOPLE (Under 18s)

• What we collect: Your name, school email, CV details, and the work experience you log.

• Why: To help you find apprenticeships, build your CV using AI, and track your work experience.

• Who sees it: Your Teachers (to check your progress) and the Employers you apply to. We do not sell your data to advertisers.

• Your Rights: You can ask us to delete your account or show you what data we hold at any time.

• Safety: If you feel unsafe, use the “Report” button on your dashboard.

---

2. INFORMATION WE COLLECT We collect data to provide our services to Students, Schools, and Employers.

2.1. From Students:

• Identity: Name, Date of Birth, School Email Address.

• Career Data: CV details, personal statements, and “Self-Added” work experience logs.

• Usage: Apprenticeships you view, save, or apply for.

2.2. From Employers:

• Company Details: Contact names, business address, and insurance verification documents when needed.

• Job Listings: Details of apprenticeships and work experience vacancies.

2.3. From Schools:

• Staff Details: Teacher names and emails for account administration.

• Student Lists: Some schools may upload student email lists to create accounts in bulk (under a Data Processing Agreement).

3. HOW WE USE YOUR INFORMATION We use your data for specific, lawful purposes:

1. Service Provision: To allow students to find roles and schools to track progress (Legal Basis: Contract).

2. Safeguarding: To allow schools to monitor where students are going for work experience (Legal Basis: Legal Obligation/Public Task).

3. AI Features: To power the Apprentago AI Agent and CV Builder.

   • Note: Personal data processed by our AI (powered by Google Gemini) is anonymized. Your name is not used to train public AI models.

4. Prevention of Harm: To detect bullying, radicalisation, or unsafe content in line with the Prevent Duty (Legal Basis: Vital Interests).

5. Data Controller VS Data Processor: Where Schools or Colleges provide student personal data, the School acts as the Data Controller and Apprentago acts as a Data Processor processing data on behalf of the School.

4. WORK EXPERIENCE & “SELF-ADD” DATA When a student logs a “Self-Added” placement:

• We process this data to allow the School to approve or reject the placement.

• We do not verify the accuracy of this data.

• We may share this data with a Local Authority or Combined Authority for statutory reporting on youth employment trends (Aggregated Data only).

6. DATA STORAGE & SECURITY

• Hosting: All data is stored on Google Cloud Platform (GCP) servers located within the UK/EEA.

• Encryption: We use Industry-standard Encryption (AES-256) for data at rest and in transit.

• Certifications: Our infrastructure aligns with ISO 27001 and SOC2 standards.

• Some of our service providers may process data outside the UK or EEA: Where this occurs, we rely on approved safeguards such as International Data Transfer Agreements (IDTAs) or equivalent legal mechanisms.

7. DATA SHARING We do not sell your data. We only share data in these specific scenarios:

1. With Schools: Teachers can view data of students at their own school (e.g., “Has Carlo applied for a job?”).

2. With Employers: When you explicitly click “Apply,” your CV and profile are sent to that Employer.

3. With Local Authorities and Combined Authorities: We share anonymized, aggregated statistics (e.g., “500 students in Oxford found placements”) to help them measure success.

4. Legal Duty: We may share data with the Police or Social Services if we have a serious safeguarding concern (e.g., risk of immediate harm).

8. DATA RETENTION

• Students: We keep your data while your account is active. If you leave school or request deletion, we permanently erase your PII within 30 days.

• Inactive Accounts: Accounts inactive for more than 2 years will be automatically anonymised.

9. YOUR RIGHTS Under the UK GDPR, you have the right to:

• Access: Ask for a copy of your data.

• Correction: Ask us to fix mistakes in your data.

• Erasure: Ask us to delete your account (“The Right to be Forgotten”).

• Portability: Get your data in a simple file format.

To exercise any of these rights, email: admin@apprentago.com

10. COOKIES

• Essential cookies – required for login and platform functionality.

• Analytics cookies – to understand platform usage (Google Analytics).

Analytics cookies are used only with user consent and may be disabled via browser settings or cookie controls..

11. CHANGES TO THIS POLICY We may update this policy to reflect changes in the law (e.g., new AI regulations). We will notify you of significant changes via email or a platform notification.

12. CONTACT Data Protection CONTACT (DPC): Carlo Weaver Email: admin@apprentago.com Address: 50 Marston Road, Ilford, Essex, IG5 0LY