Multiverse Group Ltd ("we", “us”, “our” or “Multiverse”) is the controller of your personal data collected through: https://Multiverse.io (“Site”), any apprenticeship services offered or provided through the Site or otherwise by Multiverse, and via recruitment platform https://apply.workable.com/Multiverse--(“Services”).
The Site and Services are not intended for children (persons under 16) and we do not knowingly collect personal data relating to children.
- Information we may collect from you
- How do we use the personal information you provide to us?
- Legal basis for processing your personal information
- Who we share your information with?
- Your rights
- Cross border data transfers
- Children’s privacy
- How long we retain your information
- Links to external websites
- How to contact us
1. Information we may collect from you
During the processes of registering you as a user of the Multiverse services (as explained more fully in our Terms of Service accessed via the Site), and/or providing services to you in connection with your apprenticeship we will collect and process some or all of the following personal data about you:
Information you provide to us.
- Personal Data: You may voluntarily decide to provide us with personal information about you by filling in forms on our Site or by corresponding with us by telephone, e-mail or otherwise. This includes information you provide when you register to use our Site, subscribe to our Services, participate in discussion boards or other social media functions hosted by Multiverse, enter a competition, promotion or survey, and when you report a problem with our Site. You provide us with this information in order to receive the apprenticeship, recruitment and employment opportunity matching services we provide, register for apprenticeship services and to receive information about new opportunities we are working on that may be of interest to you.
- The information you give us may include your name, date of birth, address, e-mail address and phone number, postcode, academic results, curriculum vitae, citizenship, right to work or visa status, personal description and photographs, video interviews, personality and psychometric test answers and results, as well as your previous employment history. We use this information to assess your eligibility for the apprenticeship opportunities, to match you to suitable opportunities and to communicate with you.
- We collect any content (text, images, photographs, messages, comments or any other kind of content that is not your e-mail address) that you may post on our Site.
- We also collect the following information during the course of an apprenticeship: Off the job training records, details of progress reviews, details of assignments and feedback, objectives set throughout the program, various types of exam scores, various types of satisfaction ratings, online log in frequency, and attendance records.
- Special Category Data: You may provide us with sensitive personal data about yourself (e.g. details of your gender, race or ethnicity, religious or political beliefs, trade union membership, sex life, sexual orientation, genetic data, biometric data and health data) by filling in forms on our Site or by completing electronic forms we ask you to complete as part of your apprenticeship application or otherwise disclosing Special Category Data to us during your apprenticeship programme. We use this Special Category Data:
- to track the diversity of applicants, to demonstrate to our clients the diversity of applicants, to track success of candidates from different ethnic groups, and to ensure that we have no internal biases.
- as part of our contextual flagging system which supports our clients in understanding applicant performance “in context” when they are deciding who to interview from the shortlist of candidates provided to them by Multiverse. More information can be found in the Multiverse Recruitment Policy.
- to obtain information on any special health or disability requirements you might have when attending interviews or otherwise meeting your Employers.
- if you are located in the UK, we also collect ethnicity because we are required to collect and report this information to the Education & Skills Funding Agency (ESFA), the UK government agency that regulates apprenticeship training.
- to track the wellbeing, welfare and safety of applicants (we call this “Safeguarding”).
to share or grant access to your Special Category Data to your Employer in the circumstances listed under ‘Who We Share Your Information With?’
We many also use personal and Special Category Data in anonymised datasets, which removes your personal identifiers, for the purposes of understanding our users and candidate pool, equality monitoring and reporting purposes, and as aggregated data for client reporting and for marketing purposes.
Information we collect about you.
With regard to each of your visits to our Site we may automatically collect the following information:
- Information collected by our services: including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
- Information about your visit (log files): including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.
Information you provide to other sources.
When contacting us, you may use services, tools or websites not controlled by Multiverse – for example, Zoom (each a “Third Party Platform”).
Your use of Third Party Platforms is at your own risk and we cannot be responsible for any damages or consequences caused by your use of them. They shall process your personal data in accordance with their own privacy notices. Therefore, you are also advised to review their privacy notices before deciding whether to share your personal data with them.
Information we receive from other sources.
We work closely with carefully selected third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies, ESFA, Learning Records Service, awarding and examining bodies, government bodies, current, past employers or Employers , LinkedIn) and may receive information about you from them. Information may include:
- education and employment history ( if applicable); attendance information (such as sessions attended, number of absences and absence reasons); assessment information (such as assessment results); medical information (such as disabilities, allergies or illnesses); emergency contact details, special educational needs information (such as care plans); behavioural information (number of exclusions); police record, conviction history (if applicable); personal learning record information; postcode deprivation data, bank account details to enable expenses payments to be made; performance records (such as feedback on progress reviews).
2. How do we use the personal information you provide to us?
Please see the Special Category Data section for more information on how we use Special Category Data. In addition to these uses, we use personal information held about you in the following ways:
- to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us;
- in order to provide you with the apprenticeship recruitment and employment opportunity matching services we provide, and for you to register for and complete apprenticeship services;
- to provide you with information about other products and services we offer that are similar to those that you have already received or enquired about;
- to provide you with information about products or services we feel may interest you;
- to provide your personal data to our clients to whom you are applying or are on programme with, and with whom you have permitted us to share your personal data;
- to notify you about changes to our Services;
- to ensure that content from our Site is presented in the most effective manner for you and for your computer.
- to administer our Site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- to improve our Site to ensure that content is presented in the most effective manner for you and for your computer;
- to allow you to participate in interactive features of our Service, when you choose to do so;
to conduct periodic campaigns, satisfaction or market research surveys, as well as to analyse the results;
- as part of our efforts to keep our Site safe and secure;
- to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
- to make suggestions and recommendations to you and other users of our Site about products or services that may interest you or them;
- to comply with ESFA requirements;
- to support learning and monitor and report on learner progress;
- to assess the quality of our services and ensure continuous internal performance improvement;
- to comply with applicable law, for example, in response to a request from a court or regulatory body, where such request is made in accordance with the law; and
- to resolve any disputes, if you lawfully exercise your rights or if you wish to dispute any part of our service offering.
If you provide us with your email address and / or phone number we may contact you by email, phone or SMS for these services. We may also use this information to send you content and recommendations based on your interests and on opportunities that may be of interest to you. Where we send such communications to you via e-mail of text, this will be because you have: (i) subscribed to receive marketing communications from us; or (ii) purchased our Services, and you have not opted out of receiving that marketing when you provide us with your email address and / or phone number. You have the ability to amend and delete this information from your profile on this Site, and to unsubscribe from marketing communications by following the unsubscribe link in each such message.
We may combine information received from other sources with information you give to us and information we collect about you. We may use this information and the combined information for the purposes set out above (depending on the types of information we receive).
We will inform you if we change the information, we collect or change the sub-processors we use as part of providing this service to you.
4. Legal basis for processing your personal information
We will only collect, process, store and share your personal information to the extent that we are entitled to under law. Most commonly we will use your personal data in the following circumstance:
- Where you have consented to us doing so;
- Where we need to do so in order to perform a contract we have entered into with you;
- Where it is necessary for our legitimate interests (or those of a third party) and your fundamental rights do not override those interests;
- Where it is necessary in order to protect yours or another person’s vital interests; and
- Where we need to comply with a legal or regulatory obligation.
In addition to the legal basis described above, where we collect, process, store and share your Special Category Data, we will only do so:
Where we have your explicit consent to do so;
- Where it is necessary to protect yours or another person’s vital interests where you are physically or legally incapable of giving consent;
- Where processing is necessary for the purposes of carrying out ours and/or your obligations and/or specific rights in the field of employment and social security and social protection law; and
- Where processing is necessary for reasons of substantial public interest with a basis in law.
6. Your rights
If you are a resident of the EEA, you may have certain rights in relation to your personal data as prescribed within the prevailing data protection regulations. These include:
- Right of Access: You may, at any time, request access to the personal data we hold about you (you may have heard of this right being described as a "subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. This right is not absolute. For example, we cannot reveal trade secrets, or give you Information about other individuals.
- Right to Rectification: You may request that we correct personal data that we hold about you which you believe is incorrect or inaccurate, though we may need to verify the accuracy of the new data you provide to us.
- You may modify your personal data that is on your Multiverse account and digital profile by logging into your digital profile, selecting ‘account settings’ and editing the information there. If you would like us to correct any other personal data that we hold about you, then please contact us.
- Right to Erasure: You may ask us to erase personal data if you do not believe that we need to continue retaining it (you may have heard of this right described as the “right to be forgotten”). If for any reason we believe that we have a good legal reason to continue processing personal data that you ask us to erase we will tell you what that reason is at the time we respond to your request.
- Right to Object to Processing: You may object to processing of your personal data where we rely on legitimate interest for processing that personal data. You also have the right to object where we are processing your personal data for direct marketing purposes. We will comply with your request unless we have a compelling overriding legitimate interest for processing or we need to continue processing your personal data to establish, exercise or defend a legal claim.
- Your Right to Restrict Processing: This enables you to ask us to suspend the processing of your personal data in the following scenarios:
- if you want us to establish the data's accuracy;
- where our use of the data is unlawful, but you do not want us to erase it;
- where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
- you have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
- Right to Portability: We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
- Right to object to automated decision making and profiling: You have the right to be informed about the existence of any automated decision making and profiling of your personal data, and where appropriate, be provided with meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing that affects you.
- Right to withdraw consent at any time: You may withdraw your consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
Exercising your rights
When you write to us making a request to exercise your rights, we are entitled to ask you to prove that you are who you say you are. We may ask you to provide copies of relevant ID documents to help us to verify your identity.
Please see “How to contact us” below for contact details.
7. Cross border data transfers
As part of our delivery of the service, we may share UK residents’ personal information with Employers located outside of the United Kingdom (“UK”) in the pursuit of an apprenticeship or employment position. We may transfer your personal data outside of the United Kingdom, some of which may not provide a level of data protection equivalent to the UK. When we do so, we shall ensure that the relevant safeguards are in place to afford adequate protection for your personal data, such as the presence of an adequacy decision, standard contractual clauses or binding corporate rules. Further details regarding the relevant safeguards can be obtained from us on request.
8. Children's privacy
9. How long we retain your information
We will not hold your personal information for any longer than is required by any of those purposes, and once it is no longer required, then we will either permanently delete it or anonymise it to the extent that it is no longer personal information.
Multiverse takes the protection of your information seriously. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
Where we have given you (or where you have selected) a password which enables you to access certain parts of our site, you are responsible for keeping this password secure and confidential. We ask you not to share your password with anyone and we accept no responsibility for any unauthorised access to your personal data that results from you sharing your password or otherwise making your account accessible to third parties. If you suspect that your password has become known to another person or system, then you should contact us immediately.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site. Any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to prevent unauthorised access.
11. How to contact us
The Data Protection Manager
Multiverse Group Ltd
91-93 Baker St (entrance via Crawford St), Marylebone
If we do not address your request or fail to provide you with a valid reason why we have been unable to do so, you have the right to contact the Information Commissioner’s Office to make a complaint. They can be contacted via their website (www.ico.org.uk) or by telephone 0303 123 1113.