Privacy Policy
Privacy Notice for UK SPF Programme
Who we are
The Greater Manchester Combined Authority (GMCA) is made up of the ten Greater Manchester councils (Bolton, Bury, Manchester, Oldham, Rochdale, Salford, Stockport, Tameside, Trafford and Wigan) and the Mayor of Greater Manchester.
This privacy notice is for UKSPF funding across: Communities and Place, Local
Business and People and Skills. The UK Shared Prosperity Fund (UKSPF) is a three-year domestic fund running from 2022-2025.
The overall aim of the UK Shared Prosperity Fund is to support the UK Government’s wider commitment to level up all parts of the UK by delivering on each of the four parts of the Levelling Up agenda (Gov.uk):
• Boost productivity, pay, jobs and living standards, especially in those places where they are lagging.
• Spread opportunities and improve public services, especially in those places where they are weakest.
• Restore a sense of community, local pride and belonging, especially in those places where they have been lost.
• Empower local leaders and communities, especially in those places lacking local agency.
The primary goal of UKSPF is to build pride in place and increase life chances across the UK, while recognising the acute challenges town centres and communities have faced during the Covid pandemic.
Greater Manchester Combined Authority (GMCA) is the lead authority for the UK Shared Prosperity Fund (UKSPF) and Multiply adult numeracy scheme in Greater Manchester. It has overall accountability for how the Fund is administered in the city region.
What information we collect
During initial engagement and throughout the UKSPF programme, the GMCA needs to collect the following information regarding businesses and individuals accessing the UKSPF programme (note: depending on what aspect of UKSPF funding is being received the extent of data collection will reflect, if you require any further details please speak with the provider):
Businesses:
• Business Name (including address and contact information)
• CRN/ UTR Number
Individuals (accessing skills or individual support programmes):
• Name (including Forename and Surname)
• Email Address
• Address (including postcode)
• Telephone number
• Date of Birth
PRIVACY NOTICE FOR UKSPF PROGRAMME
• Gender
• Ethnicity
• National Insurance Number
• Employment status/ labour market status
• Education Background (including basic skills level, highest education attainment, last engagement in education)
• Household situation
• Disability status and health conditions
• Recipient of benefits
• Information on programme (qualification, hours of learning undertaking, start and end date of programme)
In some instances, there may be a requirement to present evidence to confirm identity and check eligibility to receive the funding. Details from the documentation are recorded i.e., unique document reference numbers but full copies are not collected.
How we collect your information and who we will share it with
To deliver the UKSPF funding, the GMCA has partnered with Local Authorities, Stakeholders and Delivery Partners. These Partners are responsible for collecting the information listed above and sharing it with the GMCA.
We use it to administer the UKSPF programme, which includes sharing specified data with the Department for Levelling Up, Housing and Communities (who are responsible for the UKSPF funding). Collection and sharing of specific data with the Department for Levelling Up, Housing and Communities is necessary to enable them to monitor the effectiveness of the programme and for the funding payments from the UK government.
Where we need to share your personal data with others including third parties, we ensure this data sharing complies with data protection legislation.
Further to the purpose of funding GMCA will use the data to monitor the performance and assess the outcomes of the UKSPF projects are being delivered across Greater Manchester. This will include for the purposes of evaluation and to support the UKSPF programme for Greater Manchester.
Who is the Data Controller for personal data collected as part of the UKSPF programme
The GMCA is the Data Controller for the data listed above. Our Partners collect this on our behalf, acting as our Data Processor.
In some circumstances, our Partners may need to collect additional information from you i.e. training course they provide. If it was not a requirement of our contract with them, the Partner is the Data Controller for such additional information. This includes any feedback they request from you on delivery of the funding, which they collect for their own continuous improvement purposes.
PRIVACY NOTICE FOR UKSPF PROGRAMME
The Department for Levelling Up, Housing and Communities is an independent Data Controller for data we share with them to ensure funding payments from the UK Government.
Our lawful basis for processing your personal data
For processing personal data our lawful basis is:
Article 6 1(e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
For processing special category data our lawful basis is:
Article 9 2(g) processing is necessary for the reasons of substantial public interest The information we collect is use UKSPF Programme and that we can evidence compliance. The information is also used to ensure that GMCA can evaluate the impact of the programme, to ensure the funding is being used in the best interests of the residents and business within Greater Manchester.
How we ensure the security of your personal data
The GMCA is committed to the security of your personal information. We aim to ensure that we have appropriate physical, technical, and organisational controls in place to protect all personal data we collect or receive. For example, ensuring our network is protected and monitored. All our employees receive training on how to handle personal data securely.
Where we use external companies to collect or process data on our behalf, we carry out comprehensive checks before we work with them and ensure that contracts are in place that set out our expectations and requirements.
How long we will keep your information
The UKSPF Programme will only keep your personal information for as long as we need it. We decide how long to keep your personal information based on the needs of the department and the law.
We will keep your information for up to 6 years; this is so we can evaluate the success of the UKSPF programme. We will take necessary steps to keep your information safe. It will then be securely destroyed when it is no longer needed.
Your information rights
The GMCA must comply with the UK General Data Protection Regulations (GDPR) and the Data Protection Act 2018. Under data protection law, your rights include:
Your right of access – You have the right to ask us for copies of your personal information.
PRIVACY NOTICE FOR UKSPF PROGRAMME
Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
If you wish to make a request, please contact us at:
Email: officeofdpo@greatermanchester-ca.gov.uk
Postal: Office of the DPO GMCA, Churchgate House, 56 Oxford Street, Manchester, M1 6EU
The GMCA will only be able to comply with your rights in relation to the information they have collected.
How you can make a complaint
If you are not satisfied with how the GMCA is using the information we hold about you, please contact our Data Protection Officer by emailing:
officeofdpo@greatermanchester-ca.gov.uk.
If you are still not satisfied with the GMCA’s response to any request to exercise your individual rights or if you believe that the GMCA is not processing your personal data in accordance with the law, you can contact the Information Commissioners’ Office by:
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline number: 0303 123 1113
For more details on how the GMCA use data please visit our website:
Privacy policy and data protection – Greater Manchester Combined Authority (greatermanchester-ca.gov.uk)
About Build A Business
Our website address is: https://buildabusinessgm.org.
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.