Connect to Work Privacy Notice

Connect to Work Privacy Notice

Who are we?

Ingeus UK Limited is a private limited company registered with Companies House, company no. 04320853.  Second Floor, 66-68 East Smithfield, Royal Pharmaceutical Building, London E1W 1AW. 

What is Connect to Work?

Connect to Work is a major new employability programme commissioned to support people with disabilities, people with health conditions and those with complex barriers to employment to get into work. The delivery in London has been delegated into four contract packages areas to sub-regional partnerships. The South London Partnership consists of the London Boroughs of Croydon, Kingston Upon Thames, Merton, Richmond Upon Thames and Sutton. Ingeus delivers the service in Croydon, Kingston, Merton and Sutton in connection with our supply chain partners: 

  • Working Well Trust 
  • Royal Mencap Society 

How do we collect your information?

On the Connect to Work programme we will collect your personal information directly from you during appointments. 

We will however gain other information about you from:

  • Employers – that you work with 
  • Family members and Carers – who are supporting you*  
  • Health providers – who are caring for you*  
  • Other agencies – that we may refer you to as part of the Connect to Work programme.
    *with your consent. 

What Personal Data do we collect from you?

We only ever collect as much data as we need to in order to meet the requirements of the service we are providing to you. For Connect to Work we will gather: 

  • Name
  • Address
  • Telephone (Mobile) Number 
  • Date of Birth 
  • Sex 
  • National Insurance Number 
  • Qualifications* 
  • Education and Career History* 
  • Health and disability information* 
  • Information about any unspent criminal convictions* 
  • Information about your personal circumstances – housing, debt etc. 
  • Employment details*
    *this information is required to help us determine barriers to employment that we can utilise in developing our approach in supporting you whilst you are on the Connect to Work programme. 

What we use your information for?

We use the information you provide to us to: 

  • ascertain your eligibility for Connect to Work programme 
  • understand your individual circumstances so we can provide appropriate support 
  • provide information that we share with suitable prospective employers and placement providers 
  • monitor and track your progress  
  • improve our services.  

We may share your information with third parties that we engage to help us provide the Connect to Work programme.  

What is the Lawful Basis for processing your Personal Data?

The law on data protection sets out a number of different reasons for which organisations may collect and process your personal information. For Connect to Work we have determined the following apply:   

  1. Your Consent
  2. To meet our contractual obligations
  3. To meet our legal obligations
  4. Our and your legitimate interest

Please Note - In some circumstances we are required to pass on details to law enforcement of people who are involved in certain kinds of illegal or criminal activity. This includes disclosure under the requirements of Prevent and Safeguarding legislation. 

How long is your information kept by Connect to Work?

We regularly review how long we keep your Personal Data; however, we do have certain legal obligations to retain some types of information for specific periods of time. We only hold on to Personal Data for as long as is necessary in order to process it for the relevant activity, or for as long as is set out in any relevant contract or agreement you hold with us. For Connect to Work we are only required to retain the data for the duration of the contract we hold with South London Partnership. This is set as 31 March 2038.

Who has access to your Personal Data?

Ingeus and our supply chain partners staff have access to your personal data. The information is retained in a secure records management system. 

Third Party Providers

We will share your personal information with your consent with employers and other third parties that we feel will help and support you through the programme. 

We make certain any third-party organisation has agreed to process your personal data in accordance with all Data Protection Legislation. 

Information and Data Security

Ingeus is accredited to ISO27001 and Cyber Essentials Plus information security standards. 
We only allow staff to access information that is relevant to their job role. 
All staff are security cleared and undertake regular data security training.  

Marketing and Communications

Ingeus marketing activities are designed to promote and communicate updates about events and news that may be of interest to you. We use Ingeus websites, social media accounts and other channels such as email, for example, to carry out our marketing duties. We may ask for your consent to opt in to receive marketing communications. 

 If making contact via website, we capture the following in the Contact us form: 

Address or location
First name 
Last name 

Phone number 
Email address 

Your Message 

Social Media - Ingeus uses Facebook, Twitter, LinkedIn, YouTube, TikTok and Instagram. It is possible to contact us directly on some our our platforms. Any data that is collected, is controlled by the platform itself. As a result of this, we recommend that you familiarise yourself with their Privacy Notices. They can be found on their websites.        

Your Data Rights and how to access them

The right of Access

You have the right to access the information about you that Ingeus holds about you. This is sometime known as a (data) subject access request. We will ask you to verify your identity when you look to access this right. Once we have done so we will provide information in an accessible format within 1 month. Please note that we can extend the response deadline to 3 months in certain circumstances. 


The right to Data Portability

You have the right to move, copy or transfer the Personal Data we hold from one IT environment to another in a safe and secure manner. Please be aware, this only relates to electronic information and not paper files.


The right to Rectification

You have the right to correct any personal information that we hold that may be incorrect. To ensure that the information we hold about you is always as accurate as possible, please get in touch.

The right to Object to Processing

This right allows to you to stop us using your Personal Data at any time for purposes such as direct marketing. Please note, there are exceptions to this right. For further information, please contact us at dataprotectionofficer@ingeus.co.uk.


The right to Erasure (Right To Be Forgotten)

You can use this right in certain circumstances, to ask us to erase any personal data that we hold Please note – The right of erasure is not an absolute right. We will assess every request in accordance with ICO guidance and based on its individual circumstances. We can legally decline a request if the data is still required to meet legal or contractual obligations or if it is still required for the reasons it was originally collected it i.e. to deliver the service. We will make you aware of any issues that may arise when you access this right.


The right to Restriction of Processing

You have the right to restrict the processing of your Personal Data. This means you can limit the way we process your information in certain circumstances. 

To access any of the above rights, you should contact the Ingeus data protection team: 

E – dataprotectionofficer@ingeus.co.uk 

A - Second Floor, 66-68 East Smithfield, Royal Pharmaceutical Building, London E1W 1AW