Privacy policy
Updated 12 August 2025
Applies to England
© Crown copyright 2025
This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.
Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.
This publication is available at https://www.gov.uk/government/publications/ilr-data-provider-data-self-assessment-toolkit-pdsat/privacy-policy
The Education and Skills Funding Agency (ESFA) closed on 31 March 2025. All activity has moved to the Department for Education (DfE). You should continue to follow this guidance.
How we use your personal information
The provider data self-assessment toolkit (PDSAT) service is run by KPMG on behalf of the Department for Education (DfE). For the purpose of data protection legislation, DfE is the data controller for the personal data processed as part of this service.
When you register on the service, the personal information you give us will be used:
- to allow us to create an account
- to allow us to contact you in the event of a problem
- for administrative and research purposes
The nature of the personal information we hold
The personal data this service holds includes your:
- work email address
- internet protocol (IP) address
- details of which version of web browser you use (for troubleshooting purposes only)
How long we hold personal information
We will retain your personal data until your account is deleted.
Who we share your personal information with
The personal data we collect may be shared with other government departments, agencies, public bodies or suppliers working on our behalf.
We will share your data if we are required to do so by law – for example, by court order, to prevent fraud or another crime.
Why our use of your personal information is lawful
In order for our use of your personal data to be lawful, we need to meet one or more conditions in the data protection legislation.
For the purpose of this service, the processing is necessary for the performance of a task carried out in the public interest.
Your data protection rights
Under data protection law, you have certain rights depending on our reason for processing your personal information.
You have the right to:
- ask us for access to information we hold about you
- have your personal data rectified, if it is inaccurate or incomplete
- request the deletion or removal of personal data where there is no compelling reason for its continued processing
- restrict our processing of your personal data (that is, permitting its storage but no further processing)
More information about how DfE handles personal data is published in the personal information charter.
Further information about your data protection rights is available from the Information Commissioner’s Office (ICO).
How to complain
Contact DfE’s data protection officer via the secure online contact form or by writing to:
Ministerial and Public Communications Division
Department for Education
Piccadilly Gate
Store Street
Manchester
M1 2WD
You also have the right to make a complaint about data protection via the ICO.
Last updated
We may need to update this privacy notice periodically, so we recommend that you revisit this information from time to time. This version was last updated in July 2025.