BCM Ltd GDPR and Retention of Records Policy

Introduction

This policy explains how BCM Ltd complies with GDPR requirements and outlines procedures relating to the collection, storage, use, and retention of learner personal data and assessment records.

Use of Data

All personal data collected and stored by BCM Ltd is used solely for legitimate business purposes, including communication regarding studies, qualifications, learner support, assessment activities, and post-completion feedback.

Personal data will not normally be shared with third parties without prior written consent, except where information must be provided to awarding organisations, regulators, or other authorised bodies in accordance with qualification and legal requirements.

Individuals may request access to or correction of their personal data in writing using the contact details provided within this policy.

Data Retained

BCM Ltd retains learner and assessment records in accordance with awarding organisation requirements and relevant regulatory obligations.

Learner Information

Information retained may include learner names, Unique Learner Numbers where applicable, dates of birth, contact details, enrolment information, and awarding organisation registration details.

Learner Assessment Records

Assessment records retained may include induction records, identity verification evidence, assessment plans, unit achievement records, assessor documentation, mark sheets, and completed learner assessments.

Internal Quality Assurance Records:

Internal quality assurance records may include IQA documentation, sampling plans, internal quality assurer reports, standardisation meeting minutes, assessor and IQA qualifications, CVs, CPD records, and certification or achievement claims.

Record Retention Period

All records will be retained in accordance with awarding organisation requirements or for the maximum retention period specified within this policy before being securely disposed of where appropriate.