Privacy Policy

This privacy policy sets out how the YTKO Group uses and protects any information that you provide to the YTKO Group after you give consent.

YTKO Ltd is committed to ensuring that your privacy is protected and our company is registered (Z5524644) on the Data Protection Public Register of the Information Commissioner’s Office (ICO). Should we ask you to provide certain information by which you can be identified when using this website or via our support services contractual terms, then you can be assured that it will only be used in accordance with this privacy statement.

YTKO Group may change this policy from time to time by updating this page. This policy is effective from November 2023.

What we collect

We may collect some or all of the following information, depending on which of our services you use:

  • name, company name and job title
  • contact information including email address and telephone number
  • demographic information such as postcode, city and areas of interest
  • personal information such as age, gender, physical or mental health conditions, disability, education, ethnicity, skills, experience
  • other information relevant to customer surveys and/or offers.
  • business related information, including ownership, registration, location, type of activity, financial information, information relating to directors and employees including employment information such as NI Numbers.

What we do with the information we gather

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:

  • Internal record keeping for candidate assessment, recruitment, staff HR and payroll
  • Some of our projects may share data with their funder(s) and/or project partner(s). See each project-specific privacy policy for more details.
  • If you have consented for us to do so, we may periodically send you an e-newsletter from the designated project/service or YTKO Group with new or complementary YTKO Group products, special offers or other information which we think you may find interesting using the email address which you have provided. We can remove this email address at any time on request.
  • From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. We may use the information to customise the website according to your interests.
  • We use a number of carefully chosen companies who could also have a copy of some of your data:
  • Internal record keeping for candidate assessment, recruitment, staff HR and payroll


We take care to always process your data in accordance with the general principles of the GDPR legislation, in particular:

  • We’ll make sure we only process the data in a way that’s compatible with the original purposes for which that data was shared with us. We’ll always be clear with you what that is.
  • It’s important to us that the data we’re holding about you is accurate, and we’ll make sure to fix it quickly if it’s not.

Usually our data processing is on the basis of your “consent” [Article 6, 1 (a)], or otherwise, for government-related contracts, its “public interest” [Article 6, 1 e]. For further information, see:


We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online or via our paper forms. We also regularly train and update our staff around the required provisions of GDPR regulation. The US companies we use are all covered by Privacy Shield.


We are obliged to retain your personal data for the duration of all of our business support service contracts and for auditing and compliance purposes. That’s normally 10 years from when you first contact us, although contracts that involve the Department for Levelling Up, Housing and Communities require us to keep evidence until the end of the year 2036.

Using our websites

Our websites collect the following (non-identifying) information (via Google Analytics):

  • the internet domain and IP addresses from which you access the website
  • the type of browser (for example Internet Explorer or Firefox)
  • the operating system you use (for example, Windows, Macintosh)
  • the date and time of your visit
  • the pages you acceswhich will also set some cookies.

The Information Commissioner’s Office has information about disabling cookies and/or opting-out of Google Analytics.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:

  • Whenever you are asked to fill in a paper or electronic form, please check the provisions of the consent wording to ensure that you are happy with how your personal information will be used.
  • If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by emailing us at or directly to any of the designated project teams.
  • Alternatively, please write to us at YTKO Ltd, 150 Minories, London, EC3N 1LS.

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you give us consent that you are happy for this to happen.

You may request details of personal information which we hold about you (a GDPR “Subject Access Request”) or ask us to delete it (a GDPR “Request for erasure”). If either case, please contact one of the designated project teams or email

If you believe that your information we are holding is incorrect or incomplete, let us know (a GDPR “Request for rectification”) at the above addresses or to any of the designated project teams. We will promptly correct any information found to be incorrect.

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to: