Our Legal Status
We are a “data controller” for the purposes of the Data Protection Act 2018 and the UK GDPR for any information gathered for registering as a new participant, the management of account details and for any personal information inputted into the website by users or any information provided to us by participants.
What Information Is Collected?
We collect, store, use and process the following personal information about our participants and users of the website:
- Information that you provide by registering as a participant or user of our website. This includes information such as name, email, address, business address, date of birth, login details username and password, pictures or videos you submit, details of your qualifications, Facebook Custom Audience, and other identification details provided at the time of registering to use the website;
- Information that you provide when using our services. This includes pictures, videos or data you submit, details of the training and webinars you attend and any other information you provide to us during the provisions of our services;
- Details of the services we provide to you. This is known as transaction data and includes details about payments you have made to us and other details of the products and services you have purchased from us;
- Financial details. This includes bank account and payment card details;
- Details of your log and device data. When you access our website, we may automatically record information that your browser sends whenever you access our website. This log data may include your web address you came from and are going to, your device model, operating system, browser type, unique device identifier, IP address, mobile network carrier, time zone and location;
- Cookie data. We use “cookies”, or similar technologies to record your log in details. We may use “session cookies” (that last until you close the browser) or “persistent cookies” (that last until you delete them);
- Records of your correspondence with us, either through the website or by telephone, e-mail, social media or post; and
- Details of your marketing preferences. This includes your preferences in receiving marketing from us and our third parties and your communication preferences.
Where Do We Collect Information From?
Most of the information we collect will come directly from our participants and website users.
Why Do We Collect Participant’s Information?
We have set out below a description of all the ways we plan to use your information, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. We may process your information for more than one lawful ground depending on the specific purpose for which we are using your information.
|Purpose/Activity||Type of Information||Lawful Basis for Processing Information|
|To register you as a new participant||Contact details
|Performance of a contract with you|
|To process and deliver our services to you including managing payments, fees, charges and collecting any money owed to us||Contact details
|Performance of a contract with you
Necessary for our legitimate interests to recover any debts due to us
Marketing and communications information
|Performance of a contract with you
Necessary to comply with our legal obligations
Necessary for our legitimate interests to understand how our participants use our services to develop them and grow our business
|To administer and protect our business and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)||Contact details
|Necessary to comply with our legal obligations
Necessary for our legitimate interests to run our business, provision of IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise
|To use data analytics to improve our website, products/services, marketing, customer relationships and experiences||Technical information||Necessary for our legitimate interests to better understand our participants and their use of our services, to keep our website up to date, to develop our business and to inform our marketing strategy|
|To make suggestions and recommendations to you about products or services that may be of interest to you||Contact details
Marketing and communications information
|Necessary for our legitimate interests to develop our products and services and to grow our business|
Our Marketing Communications
We may use the personal information of participants and users to contact you to inform you about services we believe might be of interest to you via email or text message (we call this marketing communications). You may receive marketing communications from us unless you have opted out or unsubscribed to receiving that marketing.
You can ask us to stop sending you marketing communications at any by following the unsubscribe links on any marketing communications sent to you or by contacting us at any time.
Where you opt out of receiving these marketing communications, this will not apply to personal information provided to us as a result of the provision of our services and we will still be required to contact you in relation to the services we provide.
What Happens If You Fail To Provide Personal Information?
If you do not provide the personal information requested, or you withdraw your consent for the processing of your personal information, where this is necessary for the website functionality or for participation in our services, we will not be able to provide our services to you.
Are You Subject To Automated Decision-Making?
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.
Disclosures Of Personal Information
We may share personal information with third parties where required by law, where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so. Third party providers we may share your information with include:
- Business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you;
- Advertisers and advertising networks that require the data to select and serve relevant adverts to you and others. Analytics and search engine providers that assist us in the improvement and optimisation of the website;
- Auditors, accountants and financial organisations;
- Insurers, solicitors, professional advisers and consultants
- Central and local government;
- Health care professionals;
- Police forces, courts and tribunals; and
Any third parties will be bound by contractual provisions with us and only have access to personal information to perform the described purposes and may not use it for other purposes.
We require all third parties to respect the security of personal information and to treat it in accordance with the law. We do not allow any third-party service provider to use personal information for their own purposes and only permit them to process personal information for specified purposes and in accordance with our instructions.
We have put in place appropriate security measures to prevent personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to personal information to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process personal information on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and the Information Commissioner’s Office of a suspected breach where we are legally required to do so.
We will only retain personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Details of retention periods for different aspects of personal information are available upon request. After this period, we will securely destroy or anonymise personal information in accordance with data protection law.
We may retain some of the information you for statistical or research purposes. We will anonymize any information used for research purposes so that you are not identifiable.
Where Personal Information Is Stored
The personal information that we collect is stored within the UK and EEA. However, it may be necessary to transfer and store personal information at a destination outside the UK or the EEA. Personal information may also be processed by organisations operating outside the UK or the EEA who work for us, on our behalf or for one of our suppliers. Such suppliers maybe engaged in, among other things, the fulfilment of our obligations to users and customers in regards to the provision of our services. We will take all steps reasonably necessary to ensure that personal information is treated securely and in accordance with this policy and, in the event that personal information is transferred outside the UK or the EEA, shall ensure that this is carried out subject to the requirements of the UK GDPR.
Under certain circumstances, you have the following rights under data protection laws in relation to your personal information:
Right To Request A Copy Of Your Information
You can request a copy of your information which we hold (this is known as a subject access request).
Right To Correct Any Mistakes In Your Information
You can require us to correct any incomplete or inaccurate information.
Right To Request Erasure Of Your Personal Information
This enables you to ask us to delete or remove personal information where there is no good reason for us to continue to process it.
Right To Object To Processing
You have the right to object to processing where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
You can ask us to stop contacting you for direct marketing purposes. If you would like to do this, please email us at contact us using the details below.
Right To Request The Restriction Of Processing
You have the right to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
Right To Request The Transfer Of Your Personal Information To Another Party
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal information, or request that we transfer a copy of your personal information to another party, please contact us using the contact details below.
Right To Withdraw Consent
In the circumstances where you may have provided consent to the collection, processing and transfer of personal information for a specific purpose has been provided, individuals have the right to withdraw consent for that specific processing at any time. To withdraw your consent, please contact us using the contact details below. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
Please note, there are some specific circumstances where these rights do not apply and we can refuse to deal with your request.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
There may be circumstances where we will refer your request to our customer as a data controller and therefore the party responsible for the processing of personal information.
If you have a concern about the way we are collecting or using personal information, we would ask that you raise your concern with us in the first instance by e-mailing firstname.lastname@example.org.
Alternatively you can make a complaint to the Information Commissioner’s Office at https://ico.org.uk/concerns/ or write to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.