.png?width=1709&height=843&ext=.png)
.png?width=1165&height=190&ext=.png){kind=spacer}
Ingeus UK Limited is a private limited company registered with Companies House, company no. 04320853. Second Floor, 66-68 East Smithfield, Royal Pharmaceutical Building, London E1W 1AW. We are registered with the Information Commissioners Office Z804306X.
We are all about people, delivering services that make a positive, lasting difference to people's lives, including employment and health programmes, services for young people, training and skills support, and support for people in the justice system. Our mission is to enable better lives.
When you use the services of Ingeus UK Limited, you may provide us with your Personal Data. We only collect data to administer your interaction with us.
This notice details how we handle your personal data. Some of our contracts have specific privacy notices that have information supplements that highlighted here.
Ingeus implements industry leading controls to ensure that information is secure. We are accredited to the information security standards ISO27001:2002 and Cyber Essentials Plus. All staff are required to pass Baseline Personal Security Standard (BPSS) and complete data security training when the join the business, then at least annually.
There are many ways that we at Ingeus UK Limited collect your personal details. This will differ depending on what part of the business you are interacting with. We will obtain limited information from the commissioner of the service you are referred to but most information we will be collected from you directly through appointments and other interactions.
For prospective employees, we collect data for you directly as part of the application process.
We collect different types of personal data from you depending on your relationship with us. Typically, we will collect:
We use the information you provide to:
The law on data protection sets out a number of different reasons for which businesses may collect and process your personal data. These are detailed below.
1. To meet our contractual obligations
We are required by commissioners that fund our services to collect your personal data.
These include:
Central London Forward
Derby and Derbyshire Talking Therapies
Department of Work and Pensions:
Greater Manchester Combined Authority
Lancashire County Council
Ministry of Justice:
Newham Talking Therapies
South London Partnership
Youth Endowment Fund
York and North Yorkshire Combined Authority
2. To meet our legal obligations
In some circumstances we are required to pass on details to
3. Because we have a legitimate interest
In order for us to provide the services to you we will need to collect, process and retain your personal information.
If you are making a job application, we need to process your personal data to progress it appropriately.
4. To meet the public task obligations of our commissioners
Some of the information we collect and retain will be processed under public task obligations of the service commissioner.
5. Because we have obtained your consent
We will ask to you consent to the collection, processing and retention of your personal data when you join the programme.
How long is your information kept by Ingeus UK Limited?
The length of time we need to retain your personal information for is dependent upon the service you access. We regularly review how long we keep your Personal Data; however, we do have certain legal obligations to retain some types of information for specific periods of time.
Who has access to your Personal Data?
Ingeus UK Limited staff involved in the delivery of the service to you, will have access to your personal data.
Where the service is delivered by one of our delivery partners, they will also have access.
We share limited information with our commissioners. They do not have access to, nor do we share a full record of the data you share with us.
If you are applying for a job with us, only the Hiring Manager, others involved in reviewing your application and the Talent Acquisition team will have access.
Does Ingeus transfer my personal data overseas?
Ingeus retains and processes data within the United Kingdom. However, we may utilise some applications and websites to support you where limited data may be processed outside the UK. An example of this would be when we purchase an item for you from Amazon where it is delivered to your home address. In these instances, we complete a risk assessment and implement controls to minimise the amount of data utilised.
Do you utilise automated decision making?
Currently, Ingeus does not utilise automated decision-making processes.
How do we use your information for Marketing and Communications?
The Ingeus UK Limited marketing team delivers activities that are designed to promote and communicate updates about us. We use our websites, social media accounts and other channels such as email, to carry out our marketing activities. We may ask for your consent to opt into receiving marketing communications. The information below details what we collect and why.
Contact us form:
In order for us to respond to you, we must capture your name, contact information and region to know either which programme you are enquiring about or which one we could
Newsletter
This Personal Data is captured by us as it is the minimum we need in order to send you a copy of our electronic newsletter. You can unsubscribe from this service at any time.
Social Media
Ingeus uses social media to interact with you. We use Facebook, Twitter, LinkedIn, YouTube, TikTok and Instagram. It is possible to contact us directly on some of our platforms, however, we do not collect any personal data collected via LinkedIn. Any data that is collected, is controlled by the platform itself. As a result of this, we recommend that you familiarise yourself with their Privacy Notices. They can be found on their websites.
What are your data rights and how can you access them?
UK GDPR provides you with a range of data rights. These are detailed below.
You have the right to access the information that Ingeus UK Limited holds about you. You can reasonably expect to receive the information we hold about you within 30 calendar days of us verifying your request. Please note – we provide information in readily accessible digital formats such as msg, xlsx, pdf, docx, jpeg, pptx.
You have the right to move, copy or transfer the Personal Data we hold from one IT environment to another in a safe and secure manner. Please be aware, this only relates to electronic information and not paper files.
You have the right to correct any personal information that we hold that may be incorrect.
This right allows to you to stop Ingeus UK Limited using your Personal Data at any time for purposes such as direct marketing. Please note, there are exceptions to this right.
In certain circumstances, you can ask us to erase any personal data that we hold.
Please note – The right of erasure is not an absolute right. We will assess every request in accordance with ICO guidance and based on its individual circumstances. We can legally decline a request if the data is still required to meet legal or contractual obligations or if it is still required for the reasons it was originally collected it i.e. to deliver the service. We will make you aware of any issues that may arise when you access this right. We will also consult with our commissioners when making a decision.
You have the right to restrict the processing of your Personal Data. This means you can limit the way we process your information in certain circumstances.
To access any of these right or have any queries, then please contact us at dataprotectionofficer@ingeus.co.uk. In accordance with ICO guidance, we will ask to verify your identity before we enact your data rights. This is to ensure we only respond to legitimate requests.
Please Note:
If you are seeking to access information in relation to a Work Capability Assessment (WCA), Personal Independence Payment (PIP) or other benefit assessment you must contact DWP via rightofaccess.requests@dwp.gov.uk . DWP are the data controller for this information, and we are required to forward are request to them directly. You can find out more about how DWP processes information via Personal information charter - Department for Work and Pensions - GOV.UK.
If you access the Careers Information Advice and Guidance, CFO Evolution or CRS programmes you will also need to engage with our Ministry of Justice colleagues via data.access@justice.gov.uk. You can find out more about how DWP processes information via Personal information charter - Ministry of Justice - GOV.UK.
Who can I contact if I have a query or complaint?
We always want to make sure that we as an organisation, are as transparent as possible. However, if you do have any questions, queries or complaints please don’t hesitate by contacting us:
You have the right to escalate any concerns you may have about our data processing with the ICO. They can be contacted through their website www.ico.org.uk.
This Privacy Notice was last reviewed on the 2nd March 2026.
Contact Us
