Skills Team (Trailblazer – Youth Guarantee)  

Cambridgeshire and Peterborough Combined Authority 
 

1. Introduction 

This Privacy Notice explains how the Skills Team (Trailblazer – Youth Guarantee) uses personal data to support young people with skills development, employability, training pathways, and progression opportunities. 

We only process personal data where it is necessary to deliver the Youth Guarantee programme and related support services, and we do so in accordance with organisational policies and data protection law. 

2. Who Is Responsible for Your Data 

Cambridgeshire and Peterborough Combined Authority (CPCA) is the data controller for the personal data processed under this programme. The Skills Team (Trailblazer – Youth Guarantee) is the internal service responsible for delivering the programme on behalf of the CPCA. 

For any questions, you can contact: 

• Skills Team: [email protected]  

• DPO: [email protected] 

3. Personal Data We Process 

To deliver the Youth Guarantee offer, we may process the following types of personal data: 

Basic information 

• Name, gender and date of birth  

• Contact details (email address, phone number) 

• Address/postcode (for location‑based support) 

• National Insurance Number 

• Parent/guardian contact details (only when required by law or safeguarding policy) 

• Unique participant identifier number 

Support, training and progression data 

• Education, training, and employment history (including dates last active) 

• Referral source (who suggested you join the program) 

• Skills assessments, career preferences, and goals 

• Records of 1:1 sessions, action plans, and attendance records 

• Progression outcomes and current employment name/education status 

Special category data (only where necessary and proportionate) 

• Ethnicity 

• Health information relevant to support needs, (this may include physical or mental health conditions and how they affect day-to-day life) 

• Information relating to current or historic Special Educational Needs (SEN) 

• Specific barriers to employment (e.g., childcare, transport, language, or health-related barriers) 

• Safeguarding concerns, where applicable and lawful 

This data is processed only when strictly needed and supported by an appropriate legal basis. 

4. How We Collect Personal Data 

We collect personal data from: 

• young people participating in the programme 

• parents/guardians (where appropriate) 

• online forms, referrals or applications 

• partners delivering training or support on our behalf 

• internal systems 

• From authorised referral partners (e.g., education providers, career services, local agencies) 

5. Why We Process Your Data (Purposes) 

We use personal data to: 

• Confirm your eligibility for the Youth Guarantee programme and ensure you meet the required criteria. 

• Provide personalised support, including skills development, coaching, and 1-to-1 mentoring sessions. 

• Deliver and monitor progress through training sessions, workshops, and various programme activities. 

• Create and review action plans to help you identify and achieve your specific career and education goals. 

• Facilitate referrals to training providers, employers, or specialised support services that meet your needs. 

• Track engagement and outcomes to measure your journey and your progression into education, training, or employment. 

• Remove barriers to participation by providing targeted support for health, transport, or other personal circumstances. 

• Ensure safeguarding and pastoral care to maintain your safety and provide necessary support during your time with us. 

• Fulfil data sharing agreements with central government departments (such as the DWP and DfE) by providing full participant datasets for statutory monitoring and evaluation. 

• Support national research and evaluation by allowing government analysts to track long-term outcomes through the secure linking of personal records. 

• Inform future government policy by providing the evidence base needed to evolve national youth strategies and improve services for young people. 

• Maintain audit and funding records to provide a full evidence trail to our funders, ensuring the programme is delivered transparently and remains eligible for investment. 

How we process your data 

We process your personal information in a structured and secure way to support your journey through the Youth Guarantee programme. 

Collection and input 

Your information is collected when you register with a Youth Guarantee provider and during your participation in the programme. 

Your provider will enter your details into a secure case management system. 

Use within the programme 

Your information is used by your provider to: 

• deliver support tailored to your needs,  

• record your progress and outcomes, and  

• manage your participation in different activities or interventions.  

Each provider can only access the information they need to support you. 

Referrals between providers 

If you are referred to another Youth Guarantee provider: 

• only your basic contact details will be shared,  

• this will only happen with your permission, and  

• the receiving provider will collect any additional information directly from you.  

Central monitoring and reporting 

Your information is securely shared with the Youth Guarantee central team for: 

• monitoring performance,  

• auditing the programme, and  

• reporting to the Department for Work and Pensions (DWP).  

This is usually carried out through secure, automated data transfers. 

Evaluation and improvement 

We may analyse information to understand how well the programme is working and how services can be improved. 

Where possible, this is done using aggregated or anonymised data, so individuals are not identified. 

Improving services and understanding what works 

We also use your information to help us understand how well the Youth Guarantee programme is working. 

This includes: 

• evaluating which types of support are most effective,  

• improving services for young people, and  

• helping shape future programmes aimed at reducing the number of young people not in education, employment, or training (NEET).  

Where possible, this analysis is carried out using aggregated or anonymised data, meaning individuals are not identified.   

6. Legal Bases for Processing 

Under the UK GDPR we rely on: 

Article 6 (lawful basis) 

• Public task (Article 6(1)(e)) – processing is necessary for the performance of tasks carried out in the public interest or in the exercise of official authority vested in the Cambridgeshire and Peterborough Combined Authority, including the delivery of skills, employability, education, and youth support programmes funded or commissioned by central government and devolved adult education functions. 

This includes assessing eligibility, delivering support services, monitoring participation and outcomes, safeguarding participants, and meeting reporting and audit requirements. 

• Consent (Article 6(1)(a)) – where required for optional activities eg media use, photos, testimonials. Consent can be withdrawn at any time. 

Special category data (Article 9) 

Where special category data is processed, we rely on: 

• Article 9(2)(g) – substantial public interest, including safeguarding of children and individuals at risk, and supporting equality of opportunity 

• Article 9(2)(j) – Research/statistical purposes (including evaluation purposes) 

Relevant conditions under Schedule 1 of the Data Protection Act 2018 

• Safeguarding – Schedule 1, Part 2, para 18  

• Equal opportunities monitoring – Schedule 1, Part 2, para 8  

• Research/evaluation – Schedule 1, Part 1, para 4 

7. Sharing Your Personal Data 

We may share data with: 

• Internal CPCA teams (e.g. HR, Skills Team) 

• Approved training providers or employability partners 

• Subcontracted delivery partners who provide training, coaching, or support services on our behalf. These partners only receive the information necessary to deliver the service and they must comply with our data protection requirements 

• Educational institutions 

• Employers offering work experience, placements or interviews 

• Local authorities or commissioning bodies (for reporting and monitoring) 

• Safeguarding authorities, if legally required 

We share only what is necessary and always in line with data protection requirements.  We ensure appropriate data sharing agreements or contracts are in place with partners to protect your data. 

8. International Transfers 

We do not routinely transfer data outside of the UK.  However, if data is transferred outside the UK/EEA (e.g., platform hosting), we ensure safeguards such as Standard Contractual Clauses are in place. 

9. Data Retention 

Case management/programme records will normally be retained for 6 months after programme closure to allow for reconciliation, audit, and reporting requirements. 

Data may be retained longer where required for legal or safeguarding purposes. 

Records are securely destroyed or deleted in accordance with the organisation’s retention schedule using approved confidential disposal methods, including secure shredding or electronic deletion 

10. Your Rights 

You have the right to: 

• Access your personal data 

• Have inaccurate data corrected 

• Request deletion of your data (where applicable – the right to deletion may not apply when processing is based on Public Task) 

• Object to processing 

• Restrict how your data is used 

• Withdraw consent (if consent was the basis used) 

• Data portability (this only applies when processing is based on consent) 

• Complain to the Information Commissioner’s Office 

Contact the [email protected] to exercise these rights. 

11. Complaints 

If you wish to raise a complaint on how we have handled your personal information, please contact the Data Protection Officer who will investigate the matter. [email protected] 

We hope that we can address any concerns you may have, but if you remain unhappy you can contact the Information Commissioner’s Office (ICO). For more information, visit https://ico.org.uk  

12. Updates to This Notice 

We may update this Privacy Notice if the Youth Guarantee programme or our processing activities change. Where changes materially affect how we use personal data, we will notify participants directly before the changes take effect.