Privacy notice

The Higher Education Funding Council for Wales (HEFCW) is the Lead Beneficiary of the GO Wales: Achieve through Work Experience Programme and is a registered data controller with the Information Commissioner's Office.

Under data protection legislation, we have a legal duty to protect any information we collect from you. We follow strict security standards to prevent any unauthorised access to your data.

We will only use your information for the purpose described and we would not disclose any information to any other body except where this is necessary to comply with the law or protect our services or others.

What information do we collect?

When you visit our website we log your IP address which is classed as personal information. We also log your browser type (e.g. Internet Explorer, Firefox, Google Chrome) and the referral website (if the last website you visited provided a link to us).

We collect information from students who send an enquiry on the Programme to the GO Wales team in their university using the 'Contact us' form on the website. If you contact the GO Wales team in your university through this website, HEFCW will not pass on any of your information to anyone other than the GO Wales team in your university.

Our website hosts the portal to log into the GO Wales AtWE IT system. We log the usernames and IP addresses of anyone who attempts to log on, whether they are successful or not, or whether they are using a valid login name or not.

If you use 'forgotten password', we store the data submitted to this page in a database alongside a timestamp of submission.

Additional privacy notices apply for individuals who have authorised user accounts to log onto the GO Wales AtWE IT system. Browsing activity will be logged against the username. The GO Wales AtWE IT system uses cookies to verify that a request for the page is from an authenticated user. The cookie is removed from your computer when you logout, close the browser, or after twenty minutes of inactivity.

We use data in log files to compile website usage statistics and error tracing. Under normal circumstances, we do not use the data to identify a visitor or trace a visitor's activity on the website. However, we may do this in order to identify abusive activity.

Our lawful basis for processing of this information is for the purposes of our legitimate interests in providing IT services and systems that are secure and function effectively.

Logs are stored for 12 months before they are permanently deleted.

Links to other websites

Please be aware that the GO Wales: Achieve through Work Experience website contains links to other websites. This privacy notice does not cover these links to other websites. We do not accept responsibility or liability for the privacy policy of any of these websites and we encourage you to read the privacy statements on the other websites you visit.

Contacting us

We try to be as open as we can be in terms of giving you access to your personal information. Under data protection legislation, you have certain rights which are explained at

The right to request access to your personal information is known as making a subject access request. You are entitled to know what information we hold on you, and can make this request, in writing, to We will need to confirm your identity in order to process your request.

If you have feedback on this website, you can contact us at

Changes to our privacy notice

This privacy notice is regularly reviewed to ensure that it accurately describes how we process personal information. This notice may be updated from time to time, for example, when new legislation is enacted or when new purposes or systems are added.

Regularly reviewing this page ensures you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties.

This privacy notice was last updated on 17 May 2018.