Restart Scheme Privacy Notice

Restart Scheme Privacy Notice

Who are we?

Ingeus UK Limited is a private limited company registered with Companies House, company no. 04320853.  Second Floor, 66-68 East Smithfield, Royal Pharmaceutical Building, London E1W 1AW. We are registered with the Information Commissioners Office Z804306X.  

We are all about people, delivering services that make a positive, lasting difference to people's lives, including employment and health programmes, services for young people, training and skills support, and support for people in the justice system. Our mission is to enable better lives.  

When you use the services of Ingeus UK Limited, you may provide us with your Personal Data. We only collect data to administer your interaction with us.

How we secure your data?  

Ingeus implements industry leading controls to ensure that information is secure. We are accredited to the information security standards ISO27001:2002 and Cyber Essentials Plus. All staff are required to pass Baseline Personal Security Standard (BPSS) and complete data security training when the join the business, then at least annually. 

How we use your information 

Ingeus UK Limited is committed to protecting your privacy. This document describes how we process your personal information in accordance with the General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.  It also contains important information about your rights and how to contact us. 

We have been commissioned by the Department for Work and Pensions (DWP) to provide the Restart Scheme programme in the Greater Manchester and Central and West London regions. Ingeus and our Delivery Partners (B2W (Back 2 Work), Bolton Council, Oldham Council, Rochdale Council, The Growth Company, Seetec Pluss and Wellfair2Work Limited T/A Get Set UK, with whom Ingeus has legal agreements), collect and use information obtained from you, DWP and Jobcentre Plus (JCP) in order to deliver the Restart Scheme. 

The Restart Scheme supports individuals to find employment and remain in work, by providing an individual tailored package of support based on an individual’s skills, experience and needs. Through assessment, action planning and working in partnership with specialist partner organisations we aim to develop skills and build confidence to support your journey into work.  

Ingeus and the DWP are joint Data Controllers for the processing of personal data in relation to the Restart Scheme services. 

How do we collect your information? 

The DWP/JCP relay to Ingeus UK Limited the Personal Data required in order to commence providing you with the service. We also collect data from you directly during appointments and other interactions.

What Personal Data do we collect from you?

  • Name – to identify you  
  • Address – to identify you  
  • Email Address – to keep in contact with you  
  • Telephone Number – to keep in contact with you 
  • NI Number - to identify you  
  • Sex – for equality monitoring  
  • Qualifications – to support service delivery  
  • Employment History – to support service delivery  
  • Health information (only if it is a barrier to employment) – to support service delivery  
  • Housing and Accommodation (only if it is a barrier to employment) – to support service delivery  

We only collect as much data as we need to, in order to meet the requirements of the DWP and the Restart scheme.   

What we use your information for?  

All organisations must have a valid, lawful reason to process your information. Ingeus UK Limited and its Delivery Partners will only collect and use your information for the lawful purposes of administering the services that we are contracted to deliver on behalf of DWP. We ask you for information about yourself, so that we can support you and to identify services which we feel could benefit you on the programme.  

Your information may also be used for: 

  • Performance monitoring and analysis to help us assess the quality and standard of our services
  • Conducting investigations in response to a complaint or enquiry
  • Accounting and record keeping e.g. keeping accounts related to business activities and financial management
  • Research and evaluation such as participating in feedback surveys
  • Referring you to partner organizations who provide specialist support, training or other services that will benefit you to gain employment as part of the action plan we will develop with you  

Research and evaluation 

In order to ensure that we provide you with the best possible service, we may from time to time conduct research and evaluation. Sometimes we will do this by aggregating and anonymising the data, which means that no one can identify you. On occasion we may ask you to take part in a new piece of research and provide additional information or share your information with a third party for the purpose of research, this will only ever be done with your knowledge and consent. Additionally, DWP/JCP have engaged a third party organisation to assess the satisfaction of participants on the Restart Scheme programme. You have the right to opt out of research and survey activities.

What is the Lawful Basis for processing your Personal Data? 

The law protecting your personal information is the General Data Protection Regulation (GDPR).  As custodians of your personal information, Ingeus UK Limited are committed to ensuring that your personal data is processed lawfully and respectfully, and by ensuring that we are compliant with the GDPR.  

  1. To Meet Contractual Obligations
  2.  To Meet Legal Obligations
    In some circumstances we are required to pass on details to law enforcement of people who are involved in certain kinds of illegal or criminal activity. This includes disclosure under the requirements of Prevent and Safeguarding legislation.  
  3. Legitimate interest
    In order for us to provide the services you are expecting from us, we need your data to allow us to run our business effectively.   

    For example:   
  • We will use your personal data to stay in contact with you whilst you are participating in our programmes.  
  • We will use your personal data to check on your previous qualifications prior to you starting a government funded training course such as an apprenticeship.  
  • We will use your personal data to register you with a qualification awarding organisation  
  • We will use your personal data to track your progress through your journey on the Restart programme

How long is your information kept by Ingeus UK Limited? 

We will only hold on to Personal Data for as long as is necessary in order to process it for the relevant activity, or for as long as is set out in any relevant contract or agreement you hold with us. Ingeus will retain Restart data until at least 1st January 2029.  

Who has access to your Personal Data? 

Ingeus staff involved in the delivery of the service to you, will have access to your personal data.  

Where the service is delivered by one of our delivery partners, they will also have access.  

In addition, when required to do so, we may share your information with DWP, JCP as per our contractual obligations and in accordance with the GDPR.  

  • Where applicable, we may contact your employer to verify your employment information and share employment details with DWP.
  • With your consent, we may share information with other services which we identify as being beneficial to you
  • When necessary, for example, in the event of an emergency or safeguarding concern, it may be in your vital interest to share your information with your GP, other Health Professionals or refer to external services that will provide help.

We will not share your information with others unless required to do so by law and unless we obtain your consent. 

We do not transfer your personal information outside the United Kingdom.  

Please note:  

  • In certain circumstances we may be legally required to share personal information with other organisations, such as the HRMC or law enforcement agencies for the detection and prevention of crime and fraud

Consent  

Where we need your agreement to process your information, for example, by passing your contact details to someone offering a specific service, we will ask for your consent, and will clearly state why your information is needed and who we will share your information with. If you agree to your information being shared, we will record your consent on your record. We will regularly review consents to make sure that the relationships, and purposes for processing, have not changed. 

Right to Withdraw Consent 

Where you have provided consent for us to share your information with a specific organisation or individual, you have the right to withdraw your consent at any time. Should you wish to withdraw your consent, please tell your key worker, or, send a written request to the Data Protection Officer (address below), who will process your request.  

Your Data Rights 

  • The Right to Access

You have the right to access the information that Ingeus UK Limited holds about you. You can reasonably expect to receive the information we hold about you within 30 calendar days of us verifying your request. Please note – we provide information in readily accessible digital formats such as msg, xlsx, pdf, docx, jpeg, pptx.  

  • The Right to Data Portability

You have the right to move, copy or transfer the Personal Data we hold from one IT environment to another in a safe and secure manner. Please be aware, this only relates to electronic information and not paper files. 

  • The Right to Rectification

You have the right to correct any personal information that we hold that may be incorrect.  

  • The Right to Object to Processing

This right allows to you to stop Ingeus UK Limited using your Personal Data at any time for purposes such as direct marketing. Please note, there are exceptions to this right.  

  • The Right to Erasure (Right to be Forgotten)

In certain circumstances, you can ask us to erase any personal data that we hold.  

Please note – The right of erasure is not an absolute right. We will assess every request in accordance with ICO guidance and based on its individual circumstances. We can legally decline a request if the data is still required to meet legal or contractual obligations or if it is still required for the reasons it was originally collected it i.e. to deliver the service. We will make you aware of any issues that may arise when you access this right. We will also consult with our commissioners when making a decision.  

  • The Right to Restriction of Processing

You have the right to restrict the processing of your Personal Data. This means you can limit the way we process your information in certain circumstances.  

To access any of these right or have any queries, then please contact us at dataprotectionofficer@ingeus.co.uk. In accordance with ICO guidance, we will ask to verify your identity before we enact your data rights.  

Contact Us  

We always want to make sure that we as an organisation, are as transparent as possible. However, if you do have any questions, please don’t hesitate by contacting us:  

  • by email: dataprotectionofficer@ingeus.co.uk
  • or by post to this address: 
    The Data Protection Officer
    Ingeus UK Limited
    Second Floor
    66-68 East Smithfield
    Royal Pharmaceutical Building
    London
    E1W 1AW  

You have the right to escalate any concerns you may have about our data processing with the ICO. They can be contacted through their website www.ico.org.uk  

This Privacy Notice was last reviewed on the 31st January 2026.