Skip to main content

This is a new service – your feedback will help us to improve it.


This privacy notice explains how we collect and use your personal information for find an end-point assessment organisation. This service is run by the Education and Skills Funding Agency (ESFA), an executive agency of the Department for Education (DfE).

For the purposes of the relevant data protection legislation, DfE is the data controller for any personal information processed on this service.

How we use your personal information

DfE collects your personal information when you use find an end-point assessment organisation. We collect:

  • questions, queries or feedback you leave
  • your name, organisation, email address and contact number if you choose to be contacted for research

This data can be viewed by authorised people in the Apprenticeship Service and our suppliers, to:

  • gather feedback to improve our services
  • respond to any feedback you send us, if you’ve asked us to

We only collect and use your personal information where we need to and the law permits.

How long we hold personal information

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. We will then securely destroy any personal information we hold.

Who we share your personal information with

We may share your information where the law allows it to enable the running of find an end-point assessment organisation, or where we have a legal obligation to do so.

What is the legal basis for collecting and processing the data

In order for the use of personal data to be lawful, we need to meet one (or more) conditions in the data protection legislation, as set out in Article 6(1) of the General Data Protection Regulation (GDPR). For the purpose of find an end-point assessment organisation, the relevant condition that we are meeting is ‘public task’ as specified under Article 6 (1)(e) of the GDPR.

Your data protection rights

Under data protection law, you have certain rights depending on our reason for processing your personal information.

Your right of access

You have the right to:

  • ask us for copies of your personal information (read more here)
  • have your personal data rectified, if it is inaccurate or incomplete
  • request the deletion or removal of personal data where there is no compelling reason for its continued processing
  • restrict our processing of your personal data (i.e. permitting its storage but no further processing)

If you need to contact us regarding any of the above, please do so via the DfE site at:

More information about how the DfE handles personal information is published here:

Further information about your data protection rights appears on the Information Commissioner’s website at:

How to complain

Contact us using our secure online contact form or by writing to DfE’s data protection officer at:

Ministerial and Public Communications Division
Department for Education
Piccadilly Gate
Store Street
M1 2WD

You also have the right to make a complaint to the Information Commissioner’s Office.

This privacy notice was prepared on 20 January 2021.