Privacy Policy

Welcome to the Privacy Policy for our First Aid & Health and Safety Training Company based in London, United Kingdom. We deliver professional training services for individuals, workplaces, schools, and organisations across the UK.

This policy explains how we collect, use, store, and protect your personal data when you book a course, make an enquiry, or engage with our services online or in person.

We are committed to maintaining your trust by being transparent, secure, and fully compliant with all relevant laws, including:

The UK General Data Protection Regulation (UK GDPR)
The Data Protection Act 2018
The Consumer Rights Act 2015
The Privacy and Electronic Communications Regulations (PECR)

Who We Are

We are a professional training provider registered and operating in the United Kingdom, offering regulated first aid and health & safety qualifications to individuals, employers, childcare settings, schools, and organisations.

Why This Policy Is Important

Whether you’re a parent, employer, school, nursery, or learner attending training in person or onsite, we want you to know:

What personal data do we collect
Why do we collect it
How we use it
Your legal rights
How to contact us with concerns

Data We Collect

1. Personal Information

We may collect the following personal data when you:

Book a course online or via phone
Complete a course registration form
Make an enquiry through our website
Sign up for newsletters or email updates
Request group or on-site training quotes

Examples of data we collect include:

Full name
Email address
Contact phone number
Company or organisation name
Job title or role (if booking through your employer)
Emergency contact details (if required for training safety)

2. Training & Booking Information

To deliver your course effectively and issue a regulated certification, we may also collect:

Date of birth (for certification purposes)
Medical or access requirements (for training adjustments)
Course booked
Attendance records
Payment records or invoices
Certification delivery details (e.g. postal address)

3. Website Data & Cookies

When you visit our website, we may collect:

IP address
Browser type
Device type
Pages visited
Time spent on our site
Referral source (e.g. Google search)

We use cookies to improve website functionality and understand how users interact with our pages (see “Cookies” section below).

Lawful Basis for Processing Your Data

We only process your personal data when there is a lawful basis to do so under UK GDPR. These include:

Consent – you have given clear permission (e.g. for marketing emails)
Contract – processing is necessary for a course booking contract
Legal obligation – we must process it to comply with UK law
Legitimate interest – it’s necessary for running our business in a way that does not override your rights

How We Use Your Information

Your data is used only for the purpose it was collected. Examples include:

Processing course bookings
Issuing certificates
Delivering onsite training
Providing customer support
Improving our website
Managing training enquiries
Sending essential updates (e.g. course reminders)

We will not use your personal data for any unrelated marketing unless you explicitly opt in.

Marketing & Communication Preferences

We may contact you to:

Confirm your training booking
Share pre-course instructions
Send renewal reminders for certification
Provide updates on new or relevant courses

You will always have control over marketing communication:

We will never send marketing emails without consent
You can opt out of marketing emails at any time by clicking “unsubscribe” or contacting us directly
We will not sell, share, or rent your information to third parties for marketing

How We Store and Protect Your Data

We take your data security seriously. All personal data is:

Stored securely on password-protected systems
Transmitted using SSL encryption on our website
Restricted to trained staff on a need-to-know basis
Backed up regularly with appropriate cyber protections

If we store physical copies (e.g. signed registers), they are kept in locked cabinets within secure premises.

Data Retention: How Long We Keep Your Information

We retain your data only as long as necessary to:

Deliver your training
Issue a valid certification
Meet legal or audit requirements
Resolve any disputes or questions

Retention Periods

Data Type	Retention Period
Training records & certificates	6 years
Payment records	6 years (HMRC requirement)
Enquiries	12 months
Marketing consent	Until withdrawn
Cookies & web data	26 months

After the retention period, your data is securely deleted or anonymised.

Sharing Your Data: When and Why

We do not sell or rent your personal data. We may share your data with:

1. Awarding Bodies & Regulators

To issue regulated first aid certificates, your details may be securely shared with:

Qualsafe Awards
FAA (First Aid Awards)
Ofqual-regulated bodies
Internal quality assurers or external verifiers

2. Payment Providers

When you pay online, your card data is processed by trusted, PCI-compliant payment processors (e.g. Stripe, PayPal). We do not store card details on our servers.

3. Training Partners (if relevant)

If you are booked onto a course delivered by a verified partner, we may share your details with that partner solely for training purposes.

4. Legal Obligations

We may disclose your data where legally required to comply with:

Law enforcement requests
Court orders
Audits or tax regulations

Your Rights Under UK GDPR

You have clear legal rights regarding your personal data. These include:

Right to access: Request a copy of the personal data we hold.
Right to rectify: Correct inaccurate or incomplete data.
Right to erase: Request deletion of your data where lawful.
Right to restrict processing: Limit how we use your data.
Right to data portability: Transfer your data to another provider.
Right to object: Object to processing based on legitimate interest.
Right to withdraw consent: At any time, for marketing or optional processing.

You can exercise any of these rights by contacting us at:

Email: info@paediatricfirstaidcourses.co.uk

Phone: 07903177781

We will respond within one calendar month of your request.

Cookies & Analytics

Cookies help us offer a better browsing experience and measure our website’s performance.

What Cookies We Use

Essential cookies: For core website functionality (e.g. booking system)
Analytics cookies: Track how users find and interact with the site
Marketing cookies: Only with your consent (e.g. Google Ads)

You can manage your cookie preferences anytime via your browser settings or through the cookie consent banner on our site.

Third-Party Links

Our website may contain links to external websites (e.g. awarding bodies, government guidelines). We are not responsible for the privacy practices or content of these sites.

We recommend reading their individual privacy policies before submitting any data.

Special Category Data (e.g. Medical or Access Needs)

To deliver inclusive training experiences, we may collect special category data – such as health conditions or disabilities – only with your consent.

This allows us to:

Make reasonable adjustments during training
Ensure your safety during practical exercises
Comply with safeguarding obligations

This data is stored securely and is only accessible to necessary staff.

Children’s Privacy

We do not knowingly collect personal data from children under 13 unless a parent, school, or legal guardian has provided it for relevant services.

All such data is handled with additional safeguards.

Data Breaches: What Happens If Something Goes Wrong

If a data breach occurs that may affect your rights, we will:

Notify you without undue delay
Describe the nature of the breach
Provide advice on how to protect yourself
Report it to the Information Commissioner’s Office (ICO) if required

Our team is trained in data security protocols to minimise risks.

International Transfers

We store and process your data within the United Kingdom. If we ever transfer data outside the UK (e.g. cloud storage), we will ensure it:

Has an adequate level of protection
Uses approved safeguards such as Standard Contractual Clauses (SCCs)
Is processed in compliance with UK GDPR

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

Changes in data protection laws
Updates to our services or booking system
Feedback from users or regulators

The most recent version will always be available on our website. We recommend reviewing it regularly, especially before making a booking.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: