Guidance

Privacy policy: Provider data self-assessment toolkit (PDSAT)

Updated 13 September 2024

Applies to England

How we use your personal information

The provider data self-assessment toolkit (PDSAT) service is run by KPMG on behalf of the Education and Skills Funding Agency (ESFA), an executive agency of the Department for Education (DfE). For the purpose of data protection legislation, the DfE is the data controller for the personal data processed as part of this service.

When you register on the service, the personal information you give us will be used:

  • to allow us to create an account
  • to allow us to contact you in the event of a problem
  • for administration and research purposes

The nature of your personal data that we hold

The personal data that this service holds includes your:

  • work email address
  • internet protocol (IP) address
  • details of which version of web browser you use (for troubleshooting purposes only)

How long we hold personal information

We will retain your personal information until your account is deleted.

Who we share your personal information with

The data we collect may be shared with other government departments, agencies, public bodies or suppliers working on our behalf.

We will share your data if we are required to do so by law - for example, by court order, to prevent fraud or another crime.

Why our use of your personal data is lawful

In order for our use of your personal data to be lawful, we need to meet one (or more) conditions in the data protection legislation.

For the purpose of this service, the processing is necessary for the performance of a task carried out in the public interest.

Your data protection rights

Under data protection law, you have certain rights depending on our reason for processing your personal information.

You have the right to:

  • ask us for access to information we hold about you
  • have your personal data rectified, if it is inaccurate or incomplete
  • request the deletion or removal of personal data where there is no compelling reason for its continued processing
  • restrict our processing of your personal data (that is, permitting its storage but no further processing)

More information about how the DfE handles personal information is published in their Personal information charter.

Further information about your data protection rights are available from the Information Commissioner’s Office (ICO).

How to complain

Contact us using DfE’s secure online contact form or by writing to:

Ministerial and Public Communications Division
Department for Education
Piccadilly Gate
Store Street
Manchester
M1 2WD

If you wish to contact the DfE’s data protection officer, use the secure online contact form or write to the address above.

You also have the right to make a complaint about data protection with the ICO. More information is available on the ICO website.

Last updated

We may need to update this privacy notice periodically, so we recommend that you revisit this information from time to time. This version was last updated in September 2024.