The DepartmentMinistry forof LevellingHousing, Up,Communities Housing and CommunitiesLocal (DLUHC)Government (MHCLG) is offering an English language and employment support programme (also known as STEPSTEP) Ukraine) for up to 10,0004,000 Ukrainiansindividuals acrosscomprising the UK. The aim of STEP50% UkraineUkrainians isand to50% helpHong youKong improveBritish yourNationals English(Overseas) language(HK skillsBN(O)) andvisa gainholders employmentin orEngland.

The employmentaim moreof commensuratethe withprogramme youris skillto levelassist throughUkrainians theand provisionresettled ofHK EnglishBN(O)s languagein trainingentering andor employmentgaining support.higher-paid employment. The STEP Ukraine programme is delivered by World Jewish Relief in partnership with the British Council.

This privacyPrivacy noticeNotice explains how and why we use your personal data within the STEP Ukraine programme.

1. The identity and contact details of the DepartmentMinistry forof LevellingHousing, Up,Communities Housing and CommunitiesLocal (DLUHC)Government (MHCLG) and our Data Protection OfficerOfficer   

DLUHCMHCLG is the “data‘data controller”controller’ for your personal data where you take up the offer of English language training, and/or employment support within the STEP Ukraine,programme, and we need to collect and use your data to deliver this to you. “Data‘Data controller”controller’ means that we are responsible for your personal information under UK data protection law (UK GDPR).

EnglishScore is another data controller whose role is to deliver English language tests and exams for STEPUkrainian Ukraineand HK BN(O) participants, after you complete English language training. This means that they will be separately responsible for your data at the stage that you seek to take these exams.exams See the EnglishScore privacy notice.

DLUHCMHCLG’s ‘s Data Protection Officer can be contacted at dataprotection@levellingup.gov.ukdataprotection@communities.gov.uk.

2. Why we are collecting and using your personal data

We require your personal data to be able to provide you with English language training and / or to help facilitate employment support. If you choose to participate in the STEP Ukraine programme. EnglishScore also needs to use your personal data in its role of providing and invigilating your language exams.

3. What data we are collecting

To administer and deliver English language training we will collect and use the following information about you:

1. YourName, nameaddress, email address, telephone number 
2. YourDate uniqueof studentbirth identificationand numberage 
3. CourseVisa stagedetails 
4. To you’reprovide eVisa share atcode –details, forincluding examplenationality.  
5. Employment ifstatus  
6. Information you’veabout enrolledtechnical equipment and howaccess manyto wifi 
7. Access lessonsto you’veDWP takencoach 
8. YourChildcare attendanceneeds 
9. Qualifications 
10. Photo  
11. Resume (education and career summary) 
12. Student unique identification numbers 
13. National insurance numbers 
14. Application numbers 
15. Enrolment numbers 
16. Region 
17. Sex 
18. Duration in UK     
19. Course stage – enrolled, initial assessment completed; active/inactive, mid-course assessment complete/incomplete, final assessment complete/incomplete    
20. Attendance levels (days and hours attended)attended) 
21. EnglishDropout proficiency,levels and reasons as to why learners left the programme 
22. English proficiency of attendees including assessment scores (initial, mid and final) 
23. TechnicalEmployment dataoutcomes from(employment uselevels pre and post intervention)  
24. The changes in the attitudes of ourlearners websitesto –employment forprospects/English examplelanguage yourability 
25. Attitudes Internetof Protocolattendees addressto employment prospects/language acquisition (through pre and cookiepost sessionintervention datasurveys)

EnglishScore –- who are entirely separate from DLUHCMHCLG –- will provide testing and certification of your English language proficiency. They will need to use:

1. Your name, including to provide you with exam certificates if you pass.pass
2. Your student unique identification number
3. Your English language scores
4. Information relating to photos of you and/or facial recognition – to verify that the student taking a test online or remotely, is really you
5. Recordings of your voice (to test your speaking skills)
6. English proficiency including assessment scores

Further details of data collected by EnglishScore can be found in the EnglishScore privacy notice.

To administer and deliver employment support, and evaluatecontinually monitor the effectiveness of STEP UkraineEnglish programmeLanguage weTraining willand Employment Support assistance to Ukrainians and HK BN(O)s collect and use the following information about you:

1. Name
2. Address
3. Email address
4. Telephone number
5. Date of birth and age
6. National insurance numbers
7. Region you live in
8. Sex
9. Languages
10. Family information
11. Disability and accessibility needs
12. Childcare needs
13. Recent Photograph of you
14. VisaeVisa share code details, including nationality and BRP status (Biometric Residence Permit)
15. Duration spent in UK
16. Employment status, employment history and qualifictionsqualifications (including Resumé)
17. If you have used a work coach from the Department for Work and Pensions (DWP)
18. Student unique identification numbers, application numbers and enrolment numbers
19. Dropout levels and reasons as to why learners left the programme
20. Employment outcomes (employment levels pre and post intervention)
21. The changes in the attitudes of learners to employment prospects/English language ability
22. Attitudes of attendees to employment prospects/language acquisition (through pre and post intervention surveys)
23. Technical data from use of our online services – for example your Internet Protocol address, cookie session data

4. Lawful basis for processing the datadata 

We must have a lawful basis under UK data protection law to use your personal data lawfully. The relevant lawful basis for processing personal data is:

• UK GDPR Article 6(1) (e) - processing is necessary for the performance of a task carried out in the public interestinterest,
• Data Protection Action 2018 (DPA) – Part 2, Chapter 2, Section 8 - processing of personal data that is necessary for the exercise of a function of the Crown, a Minister of the Crown or a government departmentdepartment.

We may process personal data that is more sensitive about you, which is called “special‘special category data”.data’. This can include biometric information (such as biometric residence permits).permits and information on disability). We require an additional lawful basis to do this which is the following:

• UK GDPR Article 9(2)(g) processing is necessary for reasons of substantial public interestinterest;
• DPA 2018 – Schedule 2, Part 1, section 6 – processing necessary for the exercise of a function of the Crown, a Minister of the Crown or a government departmentdepartment.

We also treat any nationality data about you as special category data

Please note that EnglishScore explain their own lawful basis in the EnglishScore privacy notice.

5. With whom we will be sharing the data

World Jewish Relief –- are our main “data processor” delivering the STEP Ukraine programme. They will only process personal data under strict terms we have put in place with them. World Jewish Relief are using the following providers to help them deliver STEPEnglish Ukraine:language and employment support:

1. The British Council – who are facilitating the English language support offer to you, training for which will be provided by trainers provided by the British Council.

   Council

2. CaseWorthy –- for data recording and storage of your personal data.

HM Revenue and Customs (HMRC) – World Jewish Relief will also share your National Insurance numberNumber with HMRC. This is for the purpose of monitoring the effectiveness of the STEP Ukraine programme – from National Insurance number sharing, HMRC will be able to tell DLUHCMHCLG how many STEP Ukraine participants in total have been successful in gaining employment or had changes in employment. Data returned from HMRC to DLUHCMHCLG will be anonymised, so we cannot identify you or other participants when monitoring outcomes from the scheme.scheme. 

EnglishScore – who are the provider of English language tests and exams relating to your training.

Microsoft Corporation – DLUHCMHCLG uses this company for its own IT services.

DLUHCMHCLG will share anonymised data with all UK devolved administrations (the Scottish Government, Welsh Government and Northern Ireland Executive) for STEP Ukraine programme monitoring and evaluation purposes. “Anonymised” means that you cannot be identified from this information.

DLUHC may also publish anonymised data from this programme on gov.uk as part of reporting on the outcomes and impact of the STEP Ukraine Ukraine.GOV.UK.

6. For how long we will keep the personal data, or criteria used to determine the retention period

YourThe World personalJewish informationRelief willand bethe destroyedBritish underCouncil thewill delete personal instructiondata ofwithin DLUHCone atyear of the pointcontract theending dataand, in any event, at the point it is no longer needed,needed infor Julythe 2025.delivery and monitoring of the programme effectiveness.  

Upon secure deletion, the suppliers will provide written confirmation to MHCLG that deletion has taken place, along with any supporting evidence.

7. Your rights, e.g. access and rectification

The data we are collecting is your personal data, and you have rights that affect what happens to it. Generally, you have the right to:

• know that we are using your personal data
• see what data we have about you
• ask to have your data corrected, and to ask how we check the information we hold is accurate
• complain to the Information Commissioner’s Office (see below)

If you wish to use any of these rights you should first contact dataprotection@levellingup.gov.ukdataprotection@communities.gov.uk.

8. Sending data overseas

WorldMHCLG Jewishhas Relief,ensured ourthat mainappropriate deliveryUK provider,GDPR aresafeguards usinghave abeen dataput systemsin providerplace –by CaseWorthyWorld –Jewish whoRelief areto basedensure inthat theyour Uniteddata Statesis ofprocessed Americasecurely (USA), and yoursafely personalwhile datain willthe beUSA. transferredThe andapplicable processedsafeguard therein asthis partinstance ofis administeringthe STEPData Ukraine.

DLUHCProtection hasFramework ensured that appropriateprovides UKfor GDPRUK-US safeguardsadequacy havedecisions beenfor putthe inparties placesigned byup Worldto Jewishthe Reliefframework towhich ensureallows thatfor yourthe safeguarding of data isheld processedin securelythe andUS safelyby whileWJR’s inthird theparty USA.sub-contractor CaseWorthy (dataprivacyframework.gov).

Please note that EnglishScore are separately responsible for any personal data they may send overseas when administering your English language test exams; please refer to the EnglishScore privacy notice.

AsApart a temporary data storage solution, all of the personal data listed above will be stored in the UK between August 2023 and October 2023 apart from survey results which will be stored in the UK betweenThe August 2023 and December 2023. From October 2023 to August 2025, the supplier will store and manage all of the personal data listed above in CaseWorthy servers located in the United States (state of Utah).

AnyUtah) personal data you provide during the signup process will be temporarily stored in the UK and transferred to CaseWorthy servers in the USA. Any surveys you complete up until DecemberSeptember 2023 will be temporarily stored in the UK and transferred to CaseWorthy servers in the USA. Once data has been transferred to the USA, all copies of the data held in the UK will be destroyed.2028.

9. Automated decision making

We will not use your data for any automated decision making.

10. Storage, security and data management

Your personal data will be stored securely. Where data is shared with third parties, as set out in section 5 above, we require third parties to respect the security of your data and to treat it in accordance with the law. All third parties are required to take appropriate security measures to protect your personal information in line with our policies.

11. Complaints and more information

When we or our supplier ask you for information, we will keep to the law, including the Data Protection Act 2018 and UK General Data Protection Regulation.

If you are unhappy with the way the Department has acted, you can make a complaint.

If you are not happy with how we are using your personal data, you should first contact dataprotection@levellingup.gov.ukdataprotection@communities.gov.uk.

If you are still not happy, or for independent advice about data protection, privacy and data sharing, you can contact:

Telephone: 0303 123 1113 or 01625 545 745

ICO website
https://ico.org.uk/