Our Policy
Data collected
- Basic contact details (name, email, phone, organisation).
- Booking and service information (attendance, training records, assessment participation).
- Financial information required for invoicing and accounting.
- Optional sensitive information shared during training or consultancy (handled with heightened confidentiality).
- Minimal website analytics if using online forms.
Purpose of processing
- Delivering training, consultancy, and assessment services.
- Managing bookings, communication, and follow‑up support.
- Issuing invoices and maintaining financial compliance.
- Meeting safeguarding or legal obligations.
Lawful bases
- Contract (service delivery).
- Consent (optional information).
- Legal obligation (accounting, safeguarding).
- Legitimate interests (service improvement).
Data storage & security
- Secure digital systems with restricted access.
- Paper records stored safely and destroyed when no longer required.
- No automated decision‑making or profiling.
- Data retained only as long as necessary for legal or operational purposes.
Data sharing
- Only shared when essential: booking organisations, accountant, safeguarding bodies, or secure service providers.
- Never sold or used for unrelated marketing.
Individual rights
- Access, correction, deletion (where appropriate), withdrawal of consent, objection, and data portability.